Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: 9vGIBoUq3MLFLhlU+ig9pOgeOC19ajHVUKM3HgOOm0c=
Subject key identifier: 31:60:66:D0:D0:2E:99:3B:F9:74:07:D6:43:46:58:37:03:EF:09:A7
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 01975B008278A73558CC3555931C7F4AC34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 1381
Signing time: Tue 10 Jun 2025 18:00:49 +0000
Manifest this update: Tue 10 Jun 2025 18:00:49 +0000
Manifest next update: Wed 11 Jun 2025 18:00:49 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: 9tEXwV9PEe6S8YQm9N0zpnqfTu9o8lDCk155XBiHqnY=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:00:82:78:a7:35:58:cc:35:55:93:1c:7f:4a:c3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jun 10 18:00:49 2025 GMT
Not After : Jun 11 18:00:49 2025 GMT
Subject: CN=316066d0d02e993bf97407d64346583703ef09a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:8a:b5:e4:25:9b:25:77:70:3c:48:6e:f4:
29:c3:36:42:5a:81:5c:93:35:71:c7:d3:29:e8:9d:
4b:1a:6c:f5:16:5a:0f:7d:85:95:c2:d2:97:95:bc:
c6:b3:47:79:3e:0c:df:58:d8:dc:bf:a6:be:fd:cb:
3d:34:ea:f5:59:f8:25:27:cd:70:a1:ca:81:61:aa:
c7:0f:6b:c9:01:48:eb:2e:82:df:21:e5:b1:a7:36:
36:3d:ad:88:6f:a3:2e:78:ba:f8:c9:d6:bf:d1:15:
50:51:ed:e9:a7:16:51:66:d1:36:30:29:64:99:18:
3b:af:92:fc:b7:4c:13:d4:e7:07:41:71:2e:f2:7c:
22:fb:c6:79:9f:74:d9:14:28:d1:8e:59:bd:b7:30:
ef:ff:21:e3:91:41:45:5f:b1:20:e3:c9:e9:37:86:
57:34:3d:72:e8:4d:c8:5f:f5:13:30:b5:31:10:31:
04:50:5e:e5:4f:13:c2:5b:4b:1a:3e:91:fc:df:30:
87:02:1c:43:fe:80:39:8c:98:6d:54:e3:8a:7a:15:
65:39:0c:71:de:bd:fa:d4:44:2d:0f:84:85:16:a5:
94:14:bc:40:b3:76:a5:b6:f5:b7:90:14:3c:40:b1:
85:a3:03:70:bf:71:8c:ea:ee:e1:dc:fe:40:4e:ad:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:66:D0:D0:2E:99:3B:F9:74:07:D6:43:46:58:37:03:EF:09:A7
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:51:2b:46:41:86:22:b2:db:2e:e9:a1:1a:dc:d9:1c:3d:9f:
ff:e1:d6:6a:9f:75:81:8a:30:16:29:29:49:c2:4a:52:65:6d:
39:42:b0:b9:71:6d:a7:68:66:a1:58:fb:00:76:b4:43:80:8f:
81:b6:4b:31:2c:f0:fc:29:9c:ef:42:09:90:66:fc:2b:53:81:
f6:c3:96:b3:32:0e:40:c2:0d:2f:22:0c:48:51:f4:60:eb:54:
3a:bb:c5:f6:50:66:a3:0a:9a:3f:bd:70:f0:ca:c7:89:4a:02:
99:3f:90:b9:76:fe:8b:61:42:d3:b7:ce:95:bd:f2:a0:43:20:
e6:e3:4b:f6:86:db:aa:ee:15:2e:a7:2b:13:4d:44:51:1a:64:
8f:83:84:8c:30:bf:50:e4:92:df:7d:a7:9e:90:46:6d:40:40:
c0:c8:53:af:84:43:40:4a:9c:3b:53:b9:69:8a:ca:9e:4f:7a:
66:1d:c5:53:fe:1d:07:8d:a6:25:5a:73:32:24:02:32:3a:71:
ca:37:63:0d:f8:fd:43:e4:a2:01:69:f3:1a:e9:54:36:98:cd:
38:c4:ef:cc:3c:77:6b:ad:ab:3d:ee:d5:a6:40:61:8a:af:c7:
90:38:0a:23:8c:a0:ec:de:34:22:6e:42:8c:a3:5c:d5:5d:a9:
66:7c:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:10:00 2025 by rpki-client