Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier: UuhhlUEmW53WRKiWWjotH6O40bfLkQR0vwTkTaL5vGk=
Subject key identifier: 0A:8C:E5:9A:BF:B8:E8:1F:DB:5C:DC:BB:B4:A0:DA:E2:47:96:6C:DA
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 01974A0CFB29DDEFAB49FE6C5BB7A2E8470D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number: 12BF
Signing time: Sat 07 Jun 2025 11:00:53 +0000
Manifest this update: Sat 07 Jun 2025 11:00:53 +0000
Manifest next update: Sun 08 Jun 2025 11:00:53 +0000
Files and hashes: 1: 0dT9gx4qOXkpqZlNkbev_-uBl0c.roa (hash: AhSSJUvXXS4MCpfi02OS/Sl/WMScliKSAGKKpGr/omg=)
2: Jqr-CXHYnZmzg_xVdImaXbMmVEI.roa (hash: XvpOhA/u1tpu0r7xTILje32qKTHGeywG7gPta8XZExU=)
3: S7cvUB4j_UAWLlorKkQpKplvSek.roa (hash: BzDMJKCxDcsJF5G/pnwJpmaeHc/VSanQaPg+mRpgeIU=)
4: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: WtVfZRs/pcVXQZfng2fTJKwIFPgCB5Eu0/F7XIuQMy0=)
5: p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa (hash: 8XfSlLN4HMzOCIW1k555GHmyKjvtxd9c3WvZ5/ZNc5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:fb:29:dd:ef:ab:49:fe:6c:5b:b7:a2:e8:47:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jun 7 11:00:53 2025 GMT
Not After : Jun 8 11:00:53 2025 GMT
Subject: CN=0a8ce59abfb8e81fdb5cdcbbb4a0dae247966cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:42:ba:b1:3a:97:2a:72:d5:cf:7a:2f:7c:
1d:3b:3c:70:4e:3b:73:70:1e:99:86:a4:bf:af:fe:
a1:41:63:a0:05:15:e2:8e:20:9e:4a:c1:ef:11:88:
01:7e:be:6a:6d:ee:41:fb:33:ca:29:10:1d:6c:ec:
ef:99:06:9d:20:fd:6f:15:be:3c:28:e0:48:70:84:
27:fa:11:cb:e1:71:a2:4b:e4:73:cd:6c:05:1f:79:
14:63:2c:08:d9:67:87:07:f3:72:94:72:6f:9f:9c:
ee:4e:8c:17:dc:d7:c2:11:c1:11:14:61:64:e4:99:
ab:b2:b7:1a:4b:e4:b7:aa:c5:c4:e2:e9:c6:28:a2:
3e:31:03:f4:e9:c2:99:1c:92:56:e7:04:5c:df:53:
21:68:9c:11:6b:e3:e3:e4:54:d4:6f:a9:91:1e:1f:
12:a0:94:9b:34:33:05:16:aa:d9:11:dd:6d:5d:f6:
f7:6a:a6:9b:55:f7:81:45:36:4b:7a:45:14:88:34:
c6:fc:6c:8d:e1:ba:00:c8:15:1f:25:a1:31:1f:ea:
9c:16:a7:ee:54:91:44:89:05:d8:db:14:78:d1:10:
b1:a6:62:a9:44:33:86:fe:9c:f3:93:5b:d0:17:eb:
71:5d:ce:b0:21:3e:3a:2d:f6:ff:d3:a2:5a:4f:6e:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:E5:9A:BF:B8:E8:1F:DB:5C:DC:BB:B4:A0:DA:E2:47:96:6C:DA
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:38:de:95:9e:82:d1:5c:4e:66:41:ef:a1:e9:4a:e6:f8:a8:
8c:d6:63:4a:67:c6:ac:13:df:99:e3:e6:86:da:59:c9:a0:1c:
66:fc:57:9e:2e:dd:68:a6:47:85:f9:b3:2a:5e:19:d5:dd:69:
f8:67:37:4c:24:87:a2:e4:a0:5c:eb:b3:c0:a0:ba:e5:7c:f0:
91:7e:e2:9c:fe:6c:a8:77:f1:41:c6:78:76:d9:30:4e:05:36:
e4:ce:e4:d5:f0:c9:79:06:b4:a3:e0:6c:7e:43:54:67:4c:39:
b8:99:c6:a6:b6:5a:02:4e:45:8d:d8:37:49:bb:ad:e2:13:1c:
0d:50:ca:33:19:0f:45:c7:2a:7e:db:3c:a0:24:ab:06:1f:fb:
72:7f:e0:df:4e:89:91:04:13:2c:23:e7:ac:a5:9f:ef:d5:aa:
79:a3:28:01:ca:32:c3:1b:89:58:00:fe:96:5b:29:db:c0:07:
dd:b9:70:d9:84:59:a6:87:6e:f7:22:29:b4:92:b0:dc:dd:1e:
82:15:6a:ea:a9:a1:aa:d0:9e:6c:a9:b5:94:95:8b:80:e8:d6:
52:4d:34:e8:d3:2c:6a:17:33:ac:8a:53:30:bc:08:c3:7e:20:
98:41:42:1a:24:0d:2a:fb:65:67:f9:90:d5:91:53:51:0c:cb:
75:44:6d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:44 2025 by rpki-client