Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: qKWkAjvxMOy/nPRqz4kPGNl1ZX9jeuvmrePl/bttlT4=
Subject key identifier: D5:B6:03:25:74:57:EA:A1:84:9B:BD:F5:23:BD:B5:D0:74:59:63:63
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019742F804FE5A9BECF2D796D62CECA84567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 0EFA
Signing time: Fri 06 Jun 2025 02:00:39 +0000
Manifest this update: Fri 06 Jun 2025 02:00:39 +0000
Manifest next update: Sat 07 Jun 2025 02:00:39 +0000
Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: WPbJjDfBye4T/lFuJnJaM/38BRAY1CqYhFxxfo6nCmg=)
3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:f8:04:fe:5a:9b:ec:f2:d7:96:d6:2c:ec:a8:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Jun 6 02:00:39 2025 GMT
Not After : Jun 7 02:00:39 2025 GMT
Subject: CN=d5b603257457eaa1849bbdf523bdb5d074596363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e5:28:60:56:e2:48:b1:9c:d1:52:a6:b3:8c:
ac:cd:67:7c:15:bb:0f:74:ad:ad:8b:c0:c5:e8:e5:
6f:93:7b:8c:88:4a:fd:7d:a9:b4:50:46:c9:4a:e3:
55:f1:48:57:a5:97:8d:8c:92:40:1f:fa:0d:c1:2f:
ce:4d:53:a1:9a:17:61:82:d5:0a:c8:0f:4d:c4:10:
01:23:3c:38:44:d8:71:49:a1:24:94:b8:08:8d:a2:
5d:65:1b:4f:8d:b0:c3:3e:f6:27:78:66:31:3e:50:
fd:3e:57:0a:d3:94:35:d3:f8:42:46:e8:49:0b:f2:
b5:c5:96:d6:78:50:99:2b:a3:ad:c8:1e:77:6f:6f:
6d:96:dc:45:cf:c3:fc:2f:c9:3d:c9:64:d0:82:6f:
db:e9:11:53:7f:4a:f6:c7:2b:21:b9:37:e4:b3:7d:
48:73:cd:c4:75:61:cf:1b:66:6c:a3:bc:9e:94:ad:
3a:ad:92:53:65:db:fd:0e:af:24:1b:77:89:88:77:
86:42:5e:6e:00:2e:c4:32:30:1b:1c:96:12:91:2b:
e0:fd:55:0f:09:33:ff:a9:fc:55:07:03:65:b6:66:
5a:dd:f6:cc:20:55:1c:c2:f9:1c:16:95:52:e4:e1:
3d:a9:39:0c:f0:e7:dd:a4:81:c6:34:e6:3f:35:8e:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:03:25:74:57:EA:A1:84:9B:BD:F5:23:BD:B5:D0:74:59:63:63
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:90:9a:36:dc:06:31:21:d4:a8:16:d0:5b:df:09:ea:59:0c:
25:91:72:b9:5b:8a:88:d6:5e:df:6b:1a:51:88:70:ac:7d:b6:
b9:53:2d:8d:ab:48:5b:5a:f7:1a:59:9b:14:b1:72:35:63:36:
c0:1c:9f:2a:04:5f:dc:95:cf:9f:0d:bd:2e:a3:de:9b:f0:fa:
7a:1a:5f:94:8b:d2:c2:f9:c5:e6:f6:a4:bb:46:36:eb:2a:8b:
7a:08:13:41:a3:46:a8:95:6a:af:3d:c4:0e:33:f7:7e:16:24:
33:07:e7:f0:3f:cc:e4:ff:9e:30:1d:d8:68:23:22:26:2e:6c:
22:64:e6:8c:49:f7:13:b9:cd:18:6b:22:0f:6f:40:ad:81:88:
1c:c4:e5:8c:5f:02:0c:d5:37:4e:ed:ab:e2:ff:06:ae:f9:72:
49:c3:11:b7:23:db:f0:0b:24:79:7b:ad:9a:3d:5d:f1:10:e8:
53:9d:ed:a1:8a:e1:2b:49:79:5f:9f:9f:f1:fa:d5:ba:18:3d:
e0:6d:d6:56:da:8c:e9:2a:82:a7:a5:7f:a8:7f:c0:f4:4e:cb:
9d:30:04:c9:dd:4c:ef:3e:6f:de:83:d2:3a:10:cc:93:1d:fb:
29:a1:d4:27:a3:79:9f:48:ae:04:06:71:3b:39:af:82:7a:1c:
94:63:a0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:45:56 2025 by rpki-client