Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: uJO571tmlKAwfVXQADmIpTRRZlZ9lD8UQbycVZVGuIo=
Subject key identifier: 5D:D5:FE:77:19:B4:1B:72:DE:00:20:3E:AB:E8:B8:C6:FD:E0:64:D2
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 01974A43F380091A12CE2B5616EE2505A6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0AF2
Signing time: Sat 07 Jun 2025 12:00:56 +0000
Manifest this update: Sat 07 Jun 2025 12:00:56 +0000
Manifest next update: Sun 08 Jun 2025 12:00:56 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: i+7nidii9Ktm+NKRncGPf37fU1djrGCBsjmx41aOCm0=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:f3:80:09:1a:12:ce:2b:56:16:ee:25:05:a6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Jun 7 12:00:56 2025 GMT
Not After : Jun 8 12:00:56 2025 GMT
Subject: CN=5dd5fe7719b41b72de00203eabe8b8c6fde064d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:22:91:b9:f6:ea:55:64:8b:67:5d:25:4f:
da:ee:cb:5d:0c:d5:77:aa:bf:82:7d:d4:95:23:ba:
6c:7c:0a:07:e3:eb:63:18:6d:0e:3a:51:18:a0:23:
21:49:1a:2e:b9:94:c6:35:bc:bc:c1:08:ed:27:2b:
2c:5c:98:87:16:7a:8b:e4:05:bf:a2:aa:3c:29:64:
d3:bd:9c:63:68:bf:cd:1e:6e:78:0e:1a:f5:4f:55:
e0:21:f0:4a:6b:1d:92:c0:de:2e:06:87:29:74:85:
cc:97:5a:29:f0:ec:bc:92:9c:61:6d:20:c9:88:bf:
2e:b7:09:32:68:f8:50:e0:a9:21:01:2a:4f:5a:2f:
94:2d:e4:d0:d2:5f:29:df:76:ab:71:e8:1b:c5:82:
31:2c:ed:85:4b:97:99:81:ba:0e:fd:61:39:b6:ba:
42:fc:06:88:0b:2b:b3:a2:16:b8:d1:00:8d:5b:f5:
3a:a7:8b:c3:da:3c:a8:89:f8:be:8e:da:18:10:2f:
3f:32:33:d8:37:c4:4f:1c:df:c7:f0:d6:7f:ae:9e:
9f:7a:8b:fc:40:ce:4c:9e:9d:d6:6d:5b:ca:9f:62:
5e:02:fe:97:2c:4b:45:f8:5e:a1:8c:c8:e0:2b:15:
94:be:c8:39:61:fb:32:3b:90:76:3b:f2:96:8b:57:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D5:FE:77:19:B4:1B:72:DE:00:20:3E:AB:E8:B8:C6:FD:E0:64:D2
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:20:25:ed:3e:8a:86:63:ee:c7:89:d6:f0:11:54:7b:1a:86:
67:ec:d7:b4:5d:28:c2:34:ce:e9:df:4d:e1:2e:bf:0d:a6:f6:
06:e0:be:f4:f2:55:36:77:d0:08:2d:d3:73:8e:dc:b2:43:d6:
dc:ba:96:1e:11:84:29:c0:5c:65:6e:a7:49:02:8a:17:0f:48:
47:86:cf:00:2a:1e:08:d2:63:7a:96:45:3a:71:e3:cc:af:bc:
89:3f:34:7e:2d:cb:39:7a:88:bb:d5:67:b7:14:83:eb:e2:2e:
0d:84:8e:7f:cb:e3:ff:27:b9:ac:81:02:56:12:5d:13:d6:fa:
52:5f:85:51:30:f9:f8:b1:ff:dd:32:b2:3c:b2:0d:aa:59:2e:
90:b9:fc:c3:5e:94:2a:b5:ec:15:70:8b:b6:c7:9a:44:0c:5e:
e8:21:f8:da:74:59:c5:72:ed:3d:85:93:af:4a:d7:c8:45:8d:
b8:50:c9:f5:55:be:67:6c:da:33:f1:91:6c:5b:6a:80:5a:ef:
f5:bb:62:9d:e0:72:06:89:8b:02:9f:f1:8c:06:44:41:80:3f:
a3:a4:36:fb:34:93:34:a5:dd:ff:aa:f1:be:39:05:17:73:7a:
66:b3:24:5c:e6:b3:ac:93:5c:b7:50:4f:15:4f:d7:27:7b:7e:
09:3d:2d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:50 2025 by rpki-client