Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: 6XEDHvdSD3yqC5y/yaLVrAtlc5gLVK2fw9hf6bwT688=
Subject key identifier: CB:71:AC:D3:64:1D:1E:94:4A:32:7E:D0:DE:BE:0C:E3:66:9B:AA:46
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 01976884E339D5A920946551C2B3FDBE0DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 1388
Signing time: Fri 13 Jun 2025 09:00:28 +0000
Manifest this update: Fri 13 Jun 2025 09:00:28 +0000
Manifest next update: Sat 14 Jun 2025 09:00:28 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: S2h2rgbxNkSxsEIDh+NTLEX6pGBJhUc0nxJiWwHad58=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:e3:39:d5:a9:20:94:65:51:c2:b3:fd:be:0d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jun 13 09:00:28 2025 GMT
Not After : Jun 14 09:00:28 2025 GMT
Subject: CN=cb71acd3641d1e944a327ed0debe0ce3669baa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:f2:72:bc:49:b5:ee:f6:da:8e:c0:3c:61:
31:e6:2c:12:bd:f0:c3:38:fa:c4:b8:03:73:2e:17:
d6:ca:0a:21:f8:cf:17:fb:69:a1:7b:f0:fe:9d:51:
ee:6a:a9:3b:71:1f:10:b3:68:c2:93:8d:aa:5e:22:
84:8d:7a:4a:22:23:1c:ec:69:d6:f6:ab:d8:42:21:
c7:bb:c1:69:71:dd:13:6a:45:fd:c3:74:67:29:10:
bf:00:94:0b:ab:9b:17:35:e9:52:1d:5a:8c:22:27:
a2:ff:44:00:0a:dd:f7:ce:01:ec:44:9e:48:90:59:
ac:df:5a:29:30:bd:84:93:31:b9:b2:5c:da:fe:df:
52:37:24:23:3e:9a:ed:6e:29:f3:90:ed:0c:44:1e:
99:f9:47:35:9d:48:4c:ef:be:3b:62:98:f3:04:75:
4d:b8:98:11:5c:f5:a4:cc:13:63:f3:7c:0a:6b:9b:
74:8e:ec:58:21:eb:9c:d5:4d:c9:4a:fa:0f:34:4c:
e5:05:de:d2:04:27:96:95:f2:c2:94:8f:2b:9b:a6:
49:bc:62:b7:e4:a0:c5:91:be:a3:88:84:b0:e7:0f:
a8:68:4d:38:d9:cf:e8:dd:03:b6:3c:3b:48:30:b3:
06:ff:48:e3:cd:f5:30:28:20:c6:44:da:0c:59:55:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:AC:D3:64:1D:1E:94:4A:32:7E:D0:DE:BE:0C:E3:66:9B:AA:46
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:be:ff:cd:ae:75:8b:35:61:50:30:32:ac:ea:a5:7c:9a:07:
cf:47:a3:bf:fb:83:e0:1d:ea:d0:e1:22:18:8f:ac:9a:1e:8f:
2e:42:aa:00:54:31:8e:6a:d8:87:4a:22:12:1f:b6:a2:fd:4c:
f6:2c:7c:c6:02:7b:0f:6c:13:17:cd:bc:bd:8f:30:25:01:3a:
ea:a4:72:aa:4c:c4:d1:11:b8:5d:03:a0:33:89:6e:45:34:bb:
c6:6f:52:57:99:fb:06:73:b2:d0:c1:e6:ff:1b:fe:28:2a:cf:
46:44:ac:30:f8:9b:66:14:62:ea:bf:d4:9f:26:ca:2b:ae:3e:
60:83:33:97:8f:9c:0d:47:7f:69:7e:55:f0:d2:67:16:25:f8:
4e:df:a0:23:5e:13:ac:8c:65:38:30:a6:8e:1b:fe:43:fa:8d:
13:55:f5:5a:44:09:1b:9f:41:86:8a:e0:26:bc:00:76:af:5e:
f0:21:27:f8:a2:94:f1:6c:4c:8f:a2:b2:6c:d9:d5:55:a6:f6:
70:ba:c1:1f:a6:24:33:88:56:67:0f:9c:0b:f2:bb:dc:af:d6:
21:9a:5a:45:29:3a:eb:93:59:5c:74:e8:69:3c:94:26:f7:18:
e7:88:ec:08:4c:7d:4f:5c:f5:fb:c5:ff:b5:44:db:9a:f6:1f:
84:78:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:44:52 2025 by rpki-client