Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier: pTFkR9UyAgE0sU8JV34uNO3p0+EwcTEehuZyjauvBT8=
Subject key identifier: CA:25:AC:7B:B6:39:45:62:7A:E2:A4:52:4B:DC:5E:4B:4F:33:70:BD
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 019749D5E06EE11979666552E23844FA2A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number: 1443
Signing time: Sat 07 Jun 2025 10:00:42 +0000
Manifest this update: Sat 07 Jun 2025 10:00:42 +0000
Manifest next update: Sun 08 Jun 2025 10:00:42 +0000
Files and hashes: 1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: xpSz4YW7W0hWfPtGyULq9TZcd7GGiYtWDQOaJ2L9q+s=)
2: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (hash: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e0:6e:e1:19:79:66:65:52:e2:38:44:fa:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Jun 7 10:00:42 2025 GMT
Not After : Jun 8 10:00:42 2025 GMT
Subject: CN=ca25ac7bb63945627ae2a4524bdc5e4b4f3370bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:53:8b:5f:82:6d:84:9e:28:bc:5e:4c:a4:
4c:38:45:84:92:53:47:42:ed:ad:06:50:22:a2:78:
cc:8d:a1:ff:8c:48:89:44:b5:0a:43:3c:06:fd:32:
b6:63:3a:00:c9:89:f3:2d:e2:c3:64:c6:d3:d6:81:
0d:f2:da:08:85:2f:bc:cd:c1:da:c3:85:e6:b4:fc:
6f:fd:b5:a8:28:56:8c:ac:07:b5:6a:c0:e9:28:bc:
a4:98:8e:f5:c9:33:93:62:13:7d:a5:0c:b2:16:ce:
e7:56:8e:3c:d9:ba:8d:ef:f3:ec:54:c3:0d:35:4b:
04:35:d9:3a:95:16:e5:f1:1f:96:38:18:a3:1e:f4:
a7:51:b3:3b:dd:be:a4:ce:87:a1:dd:3c:0a:88:ab:
8f:37:02:aa:d5:8e:a0:f0:32:58:6d:fb:95:59:fe:
62:2e:a1:bc:ac:0e:9b:c7:23:43:03:5a:99:07:00:
0e:cc:a6:92:e0:ee:fa:ed:73:e1:5e:af:f0:83:12:
f2:5c:35:e1:c1:64:77:f7:4f:cd:b8:84:bf:4d:e1:
b0:90:cb:ac:1b:f4:08:aa:04:85:ca:7f:ed:ff:55:
ab:55:fb:7d:5a:3a:c8:b1:0a:31:56:17:c2:41:07:
e2:19:95:54:d4:e7:69:ee:87:b2:41:45:1b:85:62:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:AC:7B:B6:39:45:62:7A:E2:A4:52:4B:DC:5E:4B:4F:33:70:BD
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:49:6a:e8:c5:46:e1:f7:07:f8:89:3f:9a:19:cb:b0:69:4a:
67:4f:11:a1:f9:79:47:0e:f1:28:67:6b:c2:25:90:5c:2c:ae:
c4:3f:5e:94:6b:d7:3f:b4:94:12:6f:8d:49:23:e0:0d:37:30:
88:40:bb:9d:ac:9f:2b:70:67:08:ce:15:1c:49:6c:6e:87:eb:
1f:22:c6:11:ad:7c:a2:5a:e0:f0:46:7a:11:44:c9:ea:db:b7:
6b:30:ea:a4:85:58:26:78:eb:60:fa:e0:a7:a3:31:14:3c:2e:
4c:76:ae:bc:f5:4f:50:31:73:00:24:20:33:e9:4a:22:98:1f:
51:c9:a7:88:57:4c:4f:83:20:b4:2f:dd:a5:3b:a3:cb:b8:53:
ad:2b:31:20:9c:51:ce:b5:f7:3b:38:69:11:40:9a:0c:ae:b0:
70:31:4e:57:ac:85:a0:00:bf:9d:d7:09:1b:98:6c:2a:c5:49:
d5:26:3d:6f:e0:e4:e1:3a:42:37:bf:ba:d0:8e:0b:50:dd:f9:
34:eb:4e:31:3b:3b:cf:8d:74:65:b2:42:d5:43:03:a6:67:04:
ba:0c:c4:28:ed:a0:1d:cd:76:a4:14:fa:f1:82:0a:59:8e:d6:
8a:8d:d5:f5:f5:24:14:fd:03:a3:9b:86:52:b1:44:ee:91:b7:
ff:fa:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:06 2025 by rpki-client