Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: rSEmReDrpweqWBgEBAlBPjnExAcdXekLyfNnI1Lhkig=
Subject key identifier: CE:25:30:F3:81:A1:2F:DF:F0:2B:79:0A:F5:42:C6:B0:7C:4E:D3:13
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 01974CD79ED7231CCF99154921861C516959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 1275
Signing time: Sun 08 Jun 2025 00:01:28 +0000
Manifest this update: Sun 08 Jun 2025 00:01:28 +0000
Manifest next update: Mon 09 Jun 2025 00:01:28 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: iHOR0nQZnXHQCU3a0QwyHzh2RUpPH5eGPnstRhu7OmM=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:9e:d7:23:1c:cf:99:15:49:21:86:1c:51:69:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jun 8 00:01:28 2025 GMT
Not After : Jun 9 00:01:28 2025 GMT
Subject: CN=ce2530f381a12fdff02b790af542c6b07c4ed313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:25:b6:a3:17:75:d3:45:32:d9:ce:58:7e:
19:3f:ff:d2:c1:ab:d7:bc:82:8b:fb:e5:65:76:3a:
60:ac:80:a0:72:e9:50:2f:09:34:a4:e4:82:f3:90:
85:39:1a:e0:4d:21:e7:21:9c:fc:e3:65:db:6f:ec:
40:96:09:93:3d:e5:c7:a7:99:1b:6e:69:74:bc:4f:
ae:7b:ff:6c:54:0f:c1:f4:94:b4:10:76:99:fa:89:
d1:8c:9f:c3:52:6a:28:c4:a2:57:b1:8e:45:80:2b:
8b:99:ec:5e:98:32:ff:f0:b9:df:d5:d2:10:a9:08:
70:a6:ca:96:9a:dd:1c:ea:46:cb:4a:54:19:38:73:
88:b4:98:15:0c:65:b5:ec:22:74:83:e4:3e:93:d1:
ce:8f:ee:ed:4d:2c:bf:f3:7c:ae:55:0a:d8:07:28:
c1:35:9c:7a:bc:49:0d:92:90:ef:a7:2f:ff:0e:a5:
54:e6:64:9f:48:6b:3a:06:ea:dd:4b:c1:f0:b3:7e:
d4:9b:2d:e6:4d:01:65:9b:c7:6d:bd:92:ff:e5:99:
f5:4b:b7:0b:16:3e:4b:8b:7e:3a:ce:cd:8a:84:62:
a1:73:bf:8b:f2:f7:0c:72:b0:9f:77:ab:1c:ae:ab:
5d:c5:d9:8d:9b:b5:e6:49:c3:cc:a0:c8:6a:31:11:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:25:30:F3:81:A1:2F:DF:F0:2B:79:0A:F5:42:C6:B0:7C:4E:D3:13
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:64:41:20:7d:82:61:b7:ef:cc:cf:22:ed:db:d7:c4:70:84:
37:e0:7e:63:c5:70:9a:25:d3:30:c9:a2:ed:80:5f:ba:00:a1:
39:9a:a6:45:3e:6c:fb:9d:f3:d1:38:ac:f0:a9:05:10:5c:24:
ea:73:29:b0:17:51:fc:91:23:6a:cf:0d:a8:5e:9c:e8:c8:ac:
af:51:21:17:98:0d:60:c3:a8:ee:79:61:93:ad:47:ce:1e:6a:
4e:0b:fc:d0:e1:73:70:c8:62:17:ae:a2:99:2e:0c:ff:7e:b3:
c9:19:2e:04:86:22:cc:33:f2:c6:0e:86:cd:d6:d2:41:ea:3c:
48:43:4b:38:05:69:0f:e0:ae:a8:a3:a3:bc:f2:c8:29:b8:29:
7c:15:07:a1:bd:9f:ed:f6:06:6b:a0:f4:cd:fa:27:16:26:9e:
56:e1:5a:49:27:33:d3:75:4a:70:1e:5d:dd:e4:b8:d8:da:d1:
80:37:fd:9c:80:d9:9d:51:bc:03:88:73:3e:a2:70:31:ee:94:
ee:c7:79:ff:ce:07:fe:40:b3:4e:21:6f:0d:06:8c:de:7d:ac:
d8:c1:f5:35:b7:f8:ac:15:c7:df:1b:6f:48:ed:00:80:b2:61:
2f:96:79:47:06:99:2a:bf:7d:44:04:20:a5:6e:ac:0d:ce:58:
8d:d1:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:07:19 2025 by rpki-client