Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: Ia/f7Zva5fVh594I1UlKG6HG2V4josjn55CW1oUzvBM=
Subject key identifier: 7C:B1:C8:93:3C:A9:EE:9B:B8:50:38:49:2B:7F:B2:D5:5F:27:6B:7E
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 0197470B73BEE97B1CDFB057E51674A9C9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 06D9
Signing time: Fri 06 Jun 2025 21:00:22 +0000
Manifest this update: Fri 06 Jun 2025 21:00:22 +0000
Manifest next update: Sat 07 Jun 2025 21:00:22 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: CUD+gPz3Yg3R2LfAXZYsQvIr0dBp6fkx5jxq/Mr0IFE=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:73:be:e9:7b:1c:df:b0:57:e5:16:74:a9:c9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jun 6 21:00:22 2025 GMT
Not After : Jun 7 21:00:22 2025 GMT
Subject: CN=7cb1c8933ca9ee9bb85038492b7fb2d55f276b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:d9:14:e1:7d:08:1c:7b:01:c9:57:b6:76:
c2:4f:c0:17:64:f4:ab:96:42:6f:1f:93:8b:1b:49:
84:89:be:e0:84:68:22:1e:a8:bc:3c:a2:03:1a:1a:
21:ff:2c:e8:5b:8e:75:72:da:d1:78:e7:8c:ea:45:
0a:d5:16:70:13:fe:a1:ab:4f:43:c5:5e:e1:d9:f7:
7b:c1:68:64:b3:5b:af:1b:70:fa:c5:aa:bc:d8:3e:
ea:73:24:41:44:6e:24:dc:e8:29:86:23:f4:58:ad:
32:cb:f7:76:fa:b5:ae:23:0f:ac:c6:07:f9:8f:6c:
f7:d7:3e:e7:ea:41:a7:54:60:7a:5d:a9:e6:1b:76:
1b:31:e3:d8:75:3b:a6:8f:df:5a:3e:f3:6a:54:6d:
e5:d3:1c:06:ce:74:63:76:31:7d:79:82:bd:47:13:
bd:6f:53:53:78:0b:46:11:f3:0e:23:ea:d0:8c:30:
a1:0c:22:2b:42:19:f3:81:80:d6:7e:2d:0b:b5:fa:
2d:e8:c6:c1:9e:37:be:16:0f:ca:84:dc:f1:1b:5b:
aa:71:15:85:06:43:52:7a:fc:a6:4b:55:5f:fa:db:
6e:3c:42:4f:3c:8f:2e:53:15:c3:8d:22:76:38:62:
e9:86:9b:16:8b:6f:de:aa:29:56:c0:34:37:a6:c2:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B1:C8:93:3C:A9:EE:9B:B8:50:38:49:2B:7F:B2:D5:5F:27:6B:7E
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:53:ea:48:a4:cf:e4:ca:af:2c:1d:cc:5f:9a:9e:06:5f:0e:
38:97:8d:36:af:f6:96:02:3e:e5:00:c2:a2:c5:21:31:64:ac:
71:4c:32:08:c0:e0:b5:96:26:5f:39:d0:eb:06:f2:35:bd:00:
ee:8e:ca:06:70:ed:0d:10:f8:ab:bc:b9:6c:5a:e2:bd:9f:18:
23:b3:8b:27:b8:55:7b:86:6c:21:4b:50:9d:ac:87:9a:5d:2a:
ff:03:99:ea:34:a2:e4:8a:0f:53:26:c7:e0:e5:ca:63:20:c1:
17:0c:6c:d2:29:07:70:21:49:c7:c2:fc:34:c4:66:29:8c:56:
53:21:2a:f6:1e:5d:34:75:85:92:69:f5:31:21:95:4e:12:3d:
c0:82:1a:58:f5:80:f0:fe:1f:26:92:0b:71:18:ff:91:f1:ef:
68:43:58:40:42:b5:fe:89:0c:d5:5d:ef:4b:9b:e1:65:01:eb:
66:87:9e:be:b7:b9:01:90:19:4f:33:1f:a9:6f:5c:06:c2:7e:
e9:37:3f:f9:30:00:62:71:33:87:6a:f5:d2:90:c0:d9:37:0f:
73:82:ff:2a:57:b2:58:15:71:57:d5:0a:e1:b7:e5:d0:95:6b:
2a:9c:b1:c5:61:54:30:4d:8b:53:2b:fa:ab:20:f0:fb:05:e0:
d8:b1:bd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:15:58 2025 by rpki-client