Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: B00/WThgijGVUUy1dPGxQyAlypSFNmyoZnMi1ZJUkKM=
Subject key identifier: C1:41:98:FF:E9:4F:DE:FC:6B:BE:A8:0F:B7:2D:42:82:19:C1:B2:F4
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 01974CD6BC93ED1377F414653D0F6D907E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 0336
Signing time: Sun 08 Jun 2025 00:00:30 +0000
Manifest this update: Sun 08 Jun 2025 00:00:30 +0000
Manifest next update: Mon 09 Jun 2025 00:00:30 +0000
Files and hashes: 1: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: JrP/QFyh5cU/iHIh/Mz9a9+vtJwQU4y9Cx15AnhfkKk=)
2: vKytNfbEF9joRT3eNK0fcMnnPsw.roa (hash: QRCmo7hQ15OJ3mq9udqpHVMqzKuvB7Gd74/Bu3ia9vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:bc:93:ed:13:77:f4:14:65:3d:0f:6d:90:7e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Jun 8 00:00:30 2025 GMT
Not After : Jun 9 00:00:30 2025 GMT
Subject: CN=c14198ffe94fdefc6bbea80fb72d428219c1b2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:d5:74:a4:7c:6b:3c:2a:ae:55:89:bb:d4:
06:81:e4:2c:b2:c2:9e:20:3b:57:60:f3:b8:df:cb:
83:dc:71:24:8f:7c:2c:3b:1a:77:6d:dd:be:c0:90:
70:bb:fe:5b:e2:98:66:37:a3:d3:a8:30:50:ac:33:
e9:e3:44:a3:df:b7:19:6f:a2:8f:23:27:13:83:de:
0e:29:e6:e7:ea:b4:1c:0f:bd:b1:2b:a5:f6:b1:c4:
d4:a7:0c:de:d3:e7:1f:0a:ad:97:29:33:d6:4f:59:
80:cf:fc:ef:ed:e7:fd:ce:c2:01:b7:41:aa:c1:25:
50:70:64:fa:58:ce:c4:95:5d:57:df:22:82:f0:3a:
b7:24:b1:01:06:35:8e:4d:be:c1:75:d2:3a:ba:be:
36:65:f9:c3:b6:37:59:42:1a:c5:9b:e5:48:d4:2f:
14:3b:29:ed:ee:06:75:24:6d:26:59:a4:a7:0f:2c:
0a:70:46:a5:56:5b:48:16:0c:96:9b:4e:4c:85:de:
c1:3f:59:b9:c6:f5:81:14:4d:52:78:f1:7e:78:d7:
9f:bd:fe:06:00:2d:84:23:82:18:19:2d:05:93:21:
50:94:97:a0:05:d4:79:d0:74:14:ef:95:4f:f3:aa:
e8:c9:3a:d3:f1:99:5b:32:79:5c:79:67:9c:e2:96:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:41:98:FF:E9:4F:DE:FC:6B:BE:A8:0F:B7:2D:42:82:19:C1:B2:F4
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b1:45:d2:ff:ae:cc:ba:10:ec:a5:a7:30:bd:0d:8d:eb:b1:
03:a8:69:20:d8:a6:e8:ec:86:a8:82:4c:38:a7:1f:7d:71:df:
75:45:c6:28:aa:87:ec:cb:d0:89:a3:7a:45:96:ee:45:f9:30:
62:8d:e3:70:55:a6:5b:b5:72:fd:ff:81:b0:80:75:88:a8:77:
22:dd:99:99:39:18:ab:c3:07:59:a8:71:ef:58:fe:82:00:d2:
00:88:a7:81:36:85:6f:2d:14:45:a8:5d:03:72:52:05:d0:2f:
3d:98:f8:5d:95:bf:2f:1e:28:28:f9:df:61:ad:f1:51:75:d1:
e4:41:33:a6:88:03:e3:5c:95:7a:a0:7c:08:e3:45:55:8d:00:
d6:23:e0:ae:5e:8f:4c:a2:a6:9f:13:38:5c:45:0d:e8:09:a9:
28:8a:3f:d6:6a:8a:fe:b2:58:6a:b3:e5:8e:c9:bc:86:34:1a:
37:ad:59:06:29:57:0a:17:9a:84:1d:9b:79:70:a1:b5:01:83:
f4:dc:d1:85:36:da:ca:4a:a2:10:ae:9a:36:ff:c1:ba:cf:fc:
26:89:ed:7e:fd:c0:d9:82:4e:39:5f:0c:88:ef:56:fa:60:8f:
58:4a:f7:0b:a3:44:48:61:5f:cf:ea:2c:73:73:3c:73:25:16:
30:fd:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:12:04 2025 by rpki-client