Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: cWRbBgVFCFuV5fyUaRfnsB+xenimOBxhKFEo0U6kVUI=
Subject key identifier: 44:B3:BA:7A:F5:BB:C9:05:CC:31:21:A4:C2:9E:55:31:0B:37:18:93
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019747E767B4728C4C199333BADBB8387D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0652
Signing time: Sat 07 Jun 2025 01:00:37 +0000
Manifest this update: Sat 07 Jun 2025 01:00:37 +0000
Manifest next update: Sun 08 Jun 2025 01:00:37 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: VYUBp76mECOSdsQguaMatMItwO22pR8n+t2F8kb+g2w=)
2: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)
3: USUwNqXAmKM8gCgpmaifdth2hJ4.roa (hash: dUbC8Qp7CGpNXjvMgeVikpMPAaWUU03LQwDK+csc06U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:67:b4:72:8c:4c:19:93:33:ba:db:b8:38:7d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Jun 7 01:00:37 2025 GMT
Not After : Jun 8 01:00:37 2025 GMT
Subject: CN=44b3ba7af5bbc905cc3121a4c29e55310b371893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:fe:0e:e7:96:8f:da:4e:0f:cc:30:2c:1d:
07:43:19:c5:81:8e:93:75:3d:0e:5d:7f:95:fa:18:
cf:d3:c8:30:e6:8b:a5:31:7a:a1:4e:4f:92:1d:72:
b3:e8:19:fa:6a:7a:41:de:b0:6b:65:85:56:f0:62:
14:14:f2:b2:7b:6f:1e:8f:5f:96:45:3e:03:06:46:
e3:72:45:93:33:70:89:c0:f5:55:1d:8b:a0:95:37:
4c:9d:98:cf:3d:5d:a6:bd:88:34:4c:56:05:c7:1e:
ec:cc:e4:36:04:f3:0a:10:c9:e0:31:90:25:f8:4f:
5f:06:58:c7:e6:03:45:19:3f:f4:c3:c1:06:d2:bf:
83:ed:98:f3:d9:1c:32:40:ca:8b:d1:35:39:f2:79:
99:db:b0:c8:b9:aa:16:9a:a9:ba:b2:43:6d:3a:b4:
1b:b2:07:5e:cb:12:ba:a8:c0:5b:78:cb:5c:62:21:
d3:3d:ac:8e:65:1f:27:bc:61:17:6f:9b:41:8e:65:
8f:69:d5:ef:b4:95:9d:7a:c2:d4:65:6e:75:ae:a2:
27:9d:73:cb:51:cc:58:ce:c7:a5:6d:83:6c:5e:6a:
a4:88:9b:f0:4d:12:0d:ad:18:46:9f:69:53:50:5c:
11:57:08:b0:f7:2e:c3:a3:fd:cf:1b:be:fa:6d:3a:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B3:BA:7A:F5:BB:C9:05:CC:31:21:A4:C2:9E:55:31:0B:37:18:93
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:06:72:ea:a7:3f:c8:e2:64:d1:4a:e3:d8:33:69:b0:40:c7:
da:60:01:a7:42:2e:d8:9b:07:58:72:e6:4c:f1:78:07:4b:cf:
d6:4a:b2:1b:10:02:ce:9a:c1:12:c0:0b:da:8e:f3:27:c0:98:
99:dd:e9:c6:39:1a:a3:9d:c6:58:76:30:4f:75:b7:4e:ae:f2:
8b:ec:98:50:b2:74:c6:c0:28:ca:a6:4a:81:cf:64:a0:ec:02:
8d:d9:92:95:35:2d:31:10:0c:ca:f1:e7:f0:1f:bc:0d:8f:d9:
6e:e5:00:9d:7e:ee:61:ee:11:90:87:dc:eb:13:25:2f:61:1e:
10:f5:f6:c8:72:f9:1a:3d:13:71:b4:1a:22:47:f6:dc:51:65:
9d:18:40:13:e3:d1:db:4e:18:6a:c1:ff:2e:06:dc:dc:3c:05:
41:d8:d5:ed:4f:5f:a7:c7:8b:a8:4f:91:79:2c:cb:6d:1b:72:
07:5f:00:e7:30:3d:30:03:6f:03:0c:3e:63:62:28:8e:07:2f:
91:6d:06:d8:82:b1:dd:6d:1a:84:cf:8c:df:fc:65:8e:3f:d2:
86:a7:26:c6:a0:a5:d3:7d:81:be:1e:36:92:ea:9b:2b:28:f8:
d7:91:ac:a9:36:e9:8f:f3:21:29:d7:6e:24:b1:45:c6:ea:f7:
3e:33:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:33 2025 by rpki-client