Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: 76clyUM/ZafnRasZ7sMdbd+EhBX9R+Kv4RXvDk7m+G8=
Subject key identifier: 89:D5:97:EA:3F:26:9B:3E:CB:4F:54:FB:ED:02:8D:C8:58:2A:5A:52
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 0197530FF8D1AAAC2BD60DC4868F03753D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 100B
Signing time: Mon 09 Jun 2025 05:00:44 +0000
Manifest this update: Mon 09 Jun 2025 05:00:44 +0000
Manifest next update: Tue 10 Jun 2025 05:00:44 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: FhZ4ry27sEjvTuySw4WyXZrVyC7IaHr3+xUfDls+5GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:f8:d1:aa:ac:2b:d6:0d:c4:86:8f:03:75:3d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jun 9 05:00:44 2025 GMT
Not After : Jun 10 05:00:44 2025 GMT
Subject: CN=89d597ea3f269b3ecb4f54fbed028dc8582a5a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:93:0b:0b:3f:a8:72:cc:14:3c:5b:9d:fd:
5b:1f:31:f3:f1:5e:10:69:f8:2b:cd:94:f4:bf:58:
24:d2:ad:fe:4f:84:26:f4:54:15:2d:1a:8a:45:be:
af:38:a5:06:09:4f:ca:8d:fe:b1:bb:fb:a0:00:43:
9b:1e:6c:fc:7f:c3:cf:6c:5a:49:15:bd:84:56:30:
b1:47:bf:28:89:1e:65:f6:b8:2f:78:34:27:a4:2c:
47:aa:2a:ae:dc:ce:21:bf:13:6c:2d:b5:ef:51:06:
f7:98:cb:dc:54:66:77:f3:03:13:15:e5:31:eb:be:
f9:68:48:bc:88:90:4d:65:d1:fc:1c:c7:5a:a4:1a:
71:04:4c:05:28:79:da:65:be:ea:8d:1e:7f:8e:a0:
42:28:d6:3d:64:22:72:c3:44:00:da:44:72:b8:6b:
45:de:bf:a2:b3:23:c8:30:27:f0:86:32:ee:9c:1a:
87:3f:0d:47:05:e0:da:ae:8e:d3:4e:b9:6b:3c:7a:
c0:f4:d4:e7:50:8c:44:28:0f:aa:c2:c8:f5:ad:41:
bf:53:66:69:7b:dd:53:21:44:d3:65:7a:4d:1c:52:
cc:cc:e3:80:45:bb:42:b4:fa:2b:23:8a:dd:de:e2:
7d:db:29:d4:8a:c9:6a:c7:78:d9:a6:1f:75:23:12:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D5:97:EA:3F:26:9B:3E:CB:4F:54:FB:ED:02:8D:C8:58:2A:5A:52
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:91:0a:c2:3c:7a:a1:25:9d:99:f6:e4:73:c7:f1:35:fa:dd:
1c:3d:be:3d:47:35:1e:ce:81:fa:59:fb:21:85:8d:9c:57:d4:
5a:cb:84:95:e9:78:b6:ba:b8:0f:84:45:75:c2:40:01:eb:26:
71:a0:38:0a:47:eb:ab:b4:0e:d8:08:be:76:4d:1b:3f:e5:59:
c2:30:e1:9d:29:de:80:ea:3a:6d:c4:ba:ac:2a:38:0b:27:81:
95:43:65:56:0e:79:aa:26:ce:c5:07:29:1e:2e:3f:77:8e:ea:
42:ae:9a:5c:7c:cb:82:25:81:47:6c:4c:23:7c:46:f5:8a:c7:
54:41:60:0f:04:c0:94:cb:6a:c7:79:f8:24:af:c1:0e:0b:dd:
dd:e0:2f:80:b2:6a:4a:53:86:46:66:b2:a0:ff:46:e0:3d:ab:
0b:d0:93:b3:4f:e1:fe:3d:ce:ea:3c:73:86:aa:c2:9a:a0:aa:
ac:79:cf:6d:a7:19:6c:d3:e8:9a:6c:4f:d8:0a:62:d4:4b:7b:
1c:d7:98:21:b8:d7:f6:d9:64:5f:de:b5:d4:a8:69:40:e4:4a:
97:25:9d:46:05:17:b8:2e:9a:83:c9:4c:a3:69:cd:cd:0a:07:
86:e3:39:65:35:8c:e4:bc:fb:98:75:76:30:3f:e1:70:bf:49:
6a:49:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:30:49 2025 by rpki-client