Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: k7+KIHoRny7Eh1v8qWe9axJQwMfavEWnqCm9SnzoyGA=
Subject key identifier: 90:C3:1D:E2:01:34:89:0F:D4:C4:DA:6E:3D:D1:BB:D8:D0:A4:92:F1
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 01975535210FF87B15FE91C270B68FC3095B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 137E
Signing time: Mon 09 Jun 2025 15:00:34 +0000
Manifest this update: Mon 09 Jun 2025 15:00:34 +0000
Manifest next update: Tue 10 Jun 2025 15:00:34 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: Tj/8dt5YJ1/i1tX9Y13KCS+ksB8jQtl5SkUi/TZ6V6Q=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:21:0f:f8:7b:15:fe:91:c2:70:b6:8f:c3:09:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jun 9 15:00:34 2025 GMT
Not After : Jun 10 15:00:34 2025 GMT
Subject: CN=90c31de20134890fd4c4da6e3dd1bbd8d0a492f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:5d:86:53:1f:18:e0:3c:57:64:d9:4a:48:
89:52:f2:db:53:bb:4a:04:37:48:f2:34:93:67:a1:
67:ac:d5:90:d6:2d:9b:8f:8b:e5:4b:d1:14:63:ef:
e3:27:f0:1b:63:a6:8a:72:8a:2c:f1:2d:33:da:fd:
45:0f:96:5a:88:03:a9:68:22:cd:1f:88:26:ca:a0:
b1:17:22:56:f4:4b:05:14:31:92:65:9d:7d:d6:60:
b9:7b:26:b9:ec:d6:fa:95:0d:d5:34:7c:f7:e9:c6:
86:50:a8:c7:bd:9c:22:30:63:9d:c7:89:e6:42:cd:
b6:73:41:81:ed:48:2c:6d:51:5b:c8:7b:66:55:7a:
93:28:35:75:66:a9:ae:18:a7:3d:07:f7:f1:30:91:
a4:e2:5a:e5:26:f0:55:25:43:4e:23:6f:d3:97:f2:
b7:60:83:1d:a8:d3:2b:08:7d:94:aa:f8:1f:61:02:
d7:d5:9e:be:fd:59:50:ef:25:fd:78:48:d0:66:76:
fb:bc:55:44:2c:21:7d:a9:46:69:f0:f1:c7:37:2b:
84:1c:90:15:63:11:77:83:66:dd:c6:fd:d4:03:e7:
2e:f2:ad:4f:9f:92:39:a9:d2:10:92:00:ff:9d:b6:
7c:5a:30:4e:f1:9a:e3:6a:c8:ac:f6:e1:de:22:a2:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:1D:E2:01:34:89:0F:D4:C4:DA:6E:3D:D1:BB:D8:D0:A4:92:F1
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3a:db:4b:23:e8:d7:fb:22:fc:3d:6c:86:9c:59:db:03:c0:
f9:bd:cb:8c:11:b0:0c:1f:a4:9b:ab:26:aa:1d:a9:01:c3:e2:
7b:f0:61:f1:56:99:7a:57:d3:9e:a6:9b:31:63:b2:f5:7f:1a:
c1:c9:7d:a2:cf:34:25:f1:9c:3e:a2:66:55:c3:b0:6f:68:cf:
5e:9b:25:95:ae:dc:63:1c:51:bf:34:59:bf:3a:dd:53:f0:af:
b6:4d:2a:c3:a9:43:2f:af:e6:d9:7e:b3:72:d6:92:93:dd:49:
2b:2b:7f:7c:d2:3a:27:64:5f:30:23:3d:41:f2:24:de:2e:9e:
be:46:c7:36:5e:b8:e1:7a:4a:50:8b:96:07:a8:d1:37:d6:ba:
10:32:92:35:e4:9e:5c:2b:2c:47:fc:d4:9d:51:a6:4c:28:6f:
e8:61:ab:79:28:55:47:78:9c:a1:ff:41:f5:5b:42:ef:18:3f:
be:77:19:36:91:f6:d8:14:f0:05:54:4c:56:80:21:50:9a:0c:
13:ff:3c:ae:24:11:41:fe:47:43:52:79:41:eb:89:52:d7:73:
4b:51:47:d6:de:4d:8d:93:c8:ac:69:80:f9:83:22:a3:6d:96:
77:55:d1:99:6e:6f:54:87:d6:35:a8:84:43:dd:50:dc:1f:be:
4c:ea:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:21:08 2025 by rpki-client