Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: 9+NbKh5Zofr42+DGK8gt6GmadUTdSHTINUADoj2M1zk=
Subject key identifier: EB:28:17:B6:6E:E3:E1:7D:21:4B:55:E7:A0:F4:96:E3:79:BB:F9:00
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 01976A7365CEB4DB4D002E8154C33A9C4F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 1389
Signing time: Fri 13 Jun 2025 18:00:36 +0000
Manifest this update: Fri 13 Jun 2025 18:00:36 +0000
Manifest next update: Sat 14 Jun 2025 18:00:36 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: Rp/a00QZlPEnewF4QLeFNYU09WG7xmwFvn9OYydPedc=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:65:ce:b4:db:4d:00:2e:81:54:c3:3a:9c:4f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jun 13 18:00:36 2025 GMT
Not After : Jun 14 18:00:36 2025 GMT
Subject: CN=eb2817b66ee3e17d214b55e7a0f496e379bbf900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:4d:62:00:48:f4:8b:46:2a:3b:4c:ab:ed:
3f:77:71:53:97:b4:57:a7:fd:5e:d2:dc:b1:8d:ce:
46:a0:3c:62:d9:f1:84:97:49:7a:29:d7:1d:53:5d:
54:a4:fa:fc:32:c9:27:da:c6:91:70:c5:2b:e1:0c:
db:2f:99:dc:4b:bd:73:e6:df:49:75:a1:6f:a2:f9:
0a:4d:46:4c:03:4c:f0:8e:7d:1b:aa:cb:cd:55:7b:
94:34:e3:67:0b:97:27:91:3e:26:b8:e2:88:db:4b:
02:92:0e:91:b2:54:8c:be:fd:b5:de:88:31:18:63:
97:4a:65:a7:3c:ed:0a:08:3a:cb:60:58:8e:b2:23:
c4:93:11:b7:db:04:62:23:ea:18:8f:80:db:71:b8:
da:00:df:78:96:2d:cc:0e:67:5d:ee:0d:71:46:75:
03:14:79:96:19:2f:08:03:7d:1d:7f:a1:65:67:6b:
93:f4:39:d6:29:2d:f8:61:6b:11:f4:0b:05:c8:5f:
cc:7f:b5:38:d3:be:07:c7:c7:81:f3:a6:13:d1:de:
d0:c9:e6:45:4d:ca:10:90:c5:3a:7c:94:3c:7f:05:
a9:b5:e4:6f:81:b4:4c:f1:a1:90:c1:6d:bd:e6:13:
e0:36:0f:8f:c3:80:f3:9d:3f:89:17:29:6f:b5:de:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:17:B6:6E:E3:E1:7D:21:4B:55:E7:A0:F4:96:E3:79:BB:F9:00
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:81:d8:67:5b:10:69:9d:d2:04:68:07:f2:d4:04:a7:f8:a8:
22:b6:52:2c:fd:f0:15:8c:51:60:70:c3:90:46:e5:0c:58:87:
3f:76:df:6a:2b:fe:c2:3f:dc:08:b1:b7:9e:78:0e:68:51:32:
dc:eb:38:9c:21:11:48:fa:75:70:2a:e8:41:cd:4a:0e:03:d7:
a9:26:2f:50:7b:81:af:ab:85:52:18:f0:38:58:52:08:53:a2:
49:84:8e:49:c3:83:f9:f2:b5:f7:ec:f8:9d:f3:05:ae:ea:14:
47:24:3a:68:fc:99:73:0c:0e:8f:0e:ea:d2:d2:ea:19:7e:10:
6f:d1:e5:26:53:b1:6f:b5:75:e4:d3:94:e8:ad:87:96:1b:72:
ee:11:c0:fe:0f:7f:4d:3f:1c:88:09:c5:8e:01:c1:38:0a:78:
3e:7f:d0:8a:8a:6a:04:e2:7e:cb:d3:f4:f4:c7:0c:bb:6d:04:
5e:cc:60:ce:1b:4c:10:bb:4a:af:f6:a4:d0:7f:65:0f:62:eb:
81:58:a0:9c:f2:da:f4:b9:62:37:27:4e:18:0a:7e:9a:70:ad:
2b:f0:34:56:5a:47:c9:a2:b8:46:9f:c8:3d:f5:cb:9d:ab:6e:
d2:2d:33:c1:f9:59:d3:82:7a:42:ba:58:cb:71:cf:42:c8:87:
73:cc:43:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:07:19 2025 by rpki-client