Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: C1dUo3AZnUqvM7uB3do/OBCPUuQq2sXjuhnOlii2zhg=
Subject key identifier: AD:98:9C:81:0B:58:23:87:4E:06:C6:2F:7E:8E:43:CA:D5:9D:64:22
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 019766971FC373E474AD065BEE84EB234DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 1387
Signing time: Fri 13 Jun 2025 00:01:09 +0000
Manifest this update: Fri 13 Jun 2025 00:01:09 +0000
Manifest next update: Sat 14 Jun 2025 00:01:09 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: 7xnSc5aV1TguOvckfKpZtCgX+B/oi4u2eWI0SoqTEIQ=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:97:1f:c3:73:e4:74:ad:06:5b:ee:84:eb:23:4d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jun 13 00:01:09 2025 GMT
Not After : Jun 14 00:01:09 2025 GMT
Subject: CN=ad989c810b5823874e06c62f7e8e43cad59d6422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:aa:13:72:35:0a:0e:d4:1d:7c:3a:5f:e1:
c0:93:ec:a6:46:60:96:a7:4d:89:c3:fe:37:2e:9f:
47:fb:d4:36:67:18:e2:67:a7:d2:0b:be:5c:88:73:
76:af:52:4a:ef:bf:fc:85:aa:df:2d:d9:07:0f:94:
14:a5:17:d6:9a:ce:b6:f9:7e:f8:ed:d3:df:be:3a:
7a:7e:2c:2c:ac:bf:6e:24:2c:8f:3c:90:cc:c1:59:
52:77:41:02:51:bb:e4:27:f7:6a:69:5e:5b:09:fe:
ad:63:57:14:e7:01:ea:3e:35:27:32:a0:ca:36:13:
1c:1b:79:20:a5:fd:2f:4f:15:3f:3e:0d:eb:65:a2:
30:5d:7f:8e:08:5b:e2:f0:21:b8:db:70:f9:40:ce:
d4:57:84:88:21:f6:79:e6:b0:82:fd:79:c8:0f:1a:
5b:f4:11:39:17:e3:9b:5f:fa:3c:31:32:21:8e:52:
98:1d:02:ca:43:60:39:61:dc:cf:72:f2:21:80:76:
1e:b7:8a:ac:99:6b:1f:12:56:96:82:d7:e1:ed:be:
91:0a:fb:2d:5a:54:f0:79:97:c9:80:b7:2b:32:f6:
66:a8:89:8a:5b:56:28:94:20:46:42:42:df:30:e8:
4e:d1:a1:c5:c4:c1:2f:46:d9:fa:d3:4c:e1:d9:54:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:98:9C:81:0B:58:23:87:4E:06:C6:2F:7E:8E:43:CA:D5:9D:64:22
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:16:d8:b6:74:30:d9:df:cd:11:3b:0e:9c:51:eb:1a:36:
01:8b:22:a9:d3:91:5d:c2:42:69:4b:73:86:9c:13:3f:1a:c1:
7c:6c:be:f5:71:87:c9:fe:9f:49:55:ef:69:4c:cc:1a:3a:41:
a5:03:6d:5a:bf:b2:a7:cd:41:53:de:fd:3c:ed:63:65:df:c7:
95:ea:f4:da:8e:08:ac:d8:14:3d:0a:bb:6c:d6:03:79:1c:7e:
a6:4e:82:d3:b4:67:23:2d:43:61:02:2a:f5:a4:c6:5c:4b:49:
b4:c6:74:bd:54:f7:9e:f9:a9:02:e7:e2:c2:ca:48:51:45:47:
a2:a7:42:c5:b8:17:59:49:cf:4e:37:42:6f:0b:8c:d3:f5:c8:
e9:7b:9c:7b:41:b1:52:de:8d:bf:f7:66:18:02:b5:bc:9c:d8:
70:ad:02:76:23:46:53:83:93:90:84:c3:fb:ea:76:01:3e:4b:
c0:e4:cb:1f:da:2b:32:2e:be:84:c6:6b:c3:10:a4:6f:c1:3a:
4d:e2:62:41:c5:f1:92:e7:8c:f5:e8:19:c2:89:91:c0:7d:db:
f1:de:9c:a4:7b:a7:b5:33:47:03:e4:4f:52:7e:0a:0d:1c:28:
97:d3:9f:02:a4:73:77:74:ae:cc:de:22:3f:0f:e7:71:75:ad:
0c:df:18:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:31:21 2025 by rpki-client