Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: 7Ehvq4QoXzg+5uXG9FVUe/pjYVFtL0dv77Ns3m01gG0=
Subject key identifier: 09:3D:28:86:C5:BD:CD:09:1B:E1:8D:BC:CE:EB:2F:94:B2:36:8C:5A
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019750458C5042888732D1A2539D1DC350B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 16:00:24 +0000
Manifest this update: Sun 08 Jun 2025 16:00:24 +0000
Manifest next update: Mon 09 Jun 2025 16:00:24 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: XWr/TN63kD+L51tl8qR5auYbXLj3jGNMbKGBIDaD+3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:8c:50:42:88:87:32:d1:a2:53:9d:1d:c3:50:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jun 8 16:00:24 2025 GMT
Not After : Jun 9 16:00:24 2025 GMT
Subject: CN=093d2886c5bdcd091be18dbcceeb2f94b2368c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:a5:89:d8:e4:ac:ca:1c:cc:0f:5a:2c:2d:
ad:21:93:8c:dd:39:08:ce:41:e9:41:96:5f:6c:65:
bf:30:fb:e5:fd:f1:44:9e:c7:7a:c2:71:cd:db:f0:
4e:2b:a8:0a:4d:b0:19:0c:05:e0:7c:0d:a1:42:c3:
66:ea:96:80:7f:cc:ad:11:13:59:57:2a:7b:e4:b9:
05:49:22:e7:84:f0:f0:93:1e:79:74:41:6a:5d:09:
17:dc:12:33:a3:a8:be:d8:94:c2:3a:11:b9:95:2f:
b3:b4:80:40:29:b8:47:7e:b4:d3:93:80:fa:43:0d:
0f:16:7a:c6:d9:9c:22:5a:7c:2c:ed:a8:c9:98:e2:
e5:24:fe:df:66:a3:bb:f3:1b:5d:a6:16:ea:86:25:
cc:a6:6c:b9:e9:49:50:b2:61:f0:cd:d3:91:8b:77:
26:72:89:47:36:af:d3:63:fd:59:e4:ca:ff:1f:b6:
f5:ff:bc:5f:78:c8:36:57:a9:22:17:1c:da:b1:86:
ea:38:01:a3:86:ea:46:72:9d:77:5e:7f:3e:f7:96:
60:16:de:ac:65:40:89:eb:16:28:dd:03:c3:ab:7e:
2a:35:56:25:46:e2:5d:8a:55:2c:73:52:00:a1:59:
1f:74:db:af:92:c1:73:d1:b5:7a:b9:0f:c6:19:02:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:28:86:C5:BD:CD:09:1B:E1:8D:BC:CE:EB:2F:94:B2:36:8C:5A
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:39:ed:a0:83:f8:11:e0:e8:69:1f:b0:2a:4b:1d:49:8a:56:
8f:20:85:8e:aa:c9:3e:dc:c4:a2:a5:6a:34:2f:3d:e6:60:20:
39:88:75:bd:1c:19:99:f4:77:7e:a6:80:98:3e:c5:f8:b6:34:
f9:45:c4:5f:99:ff:89:0f:a0:f9:dc:b9:04:67:59:77:92:bd:
4f:6e:fa:16:e8:c7:93:78:b8:ed:d5:36:75:56:45:69:10:b6:
8e:07:fd:e0:86:82:1c:02:f7:03:a2:56:84:31:e4:f2:89:a6:
10:cd:4d:35:4a:a0:40:81:fc:67:ca:b4:2b:8a:73:61:16:fd:
96:2f:ec:00:0d:86:7c:3f:6e:c7:bc:54:35:bf:51:d3:db:05:
46:b1:db:5b:49:28:47:d7:1a:97:24:62:9a:b2:8c:c0:08:8f:
38:4d:c3:1e:76:27:79:b6:07:06:14:f3:ae:45:01:af:ba:32:
19:d6:2e:f6:2e:67:0b:3c:1f:61:aa:f2:08:66:57:1d:79:ba:
ec:89:37:6f:43:5d:2f:fc:c2:ef:83:12:80:7f:93:3f:e2:46:
3b:03:ea:ed:1b:70:fd:25:ed:ad:f3:4d:dc:d3:ec:63:20:3d:
1a:68:b2:eb:8b:b2:fc:d1:e3:0b:e3:80:da:13:ca:d9:df:9b:
eb:18:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:23 2025 by rpki-client