Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: heu3mJSpgWYyBWYW8aib2y0HumbmpetQP+6iApTZWV4=
Subject key identifier: CC:82:6E:09:97:F6:B1:0A:18:EA:19:03:95:7C:13:A1:76:BF:CE:77
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 01974AE915F0A10A86D21C6065D27D3F248C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 06D7
Signing time: Sat 07 Jun 2025 15:01:18 +0000
Manifest this update: Sat 07 Jun 2025 15:01:18 +0000
Manifest next update: Sun 08 Jun 2025 15:01:18 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: HfbGM4FiOj0fx22J89h2aFG028yxYe92LxpoEY5WhAA=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:15:f0:a1:0a:86:d2:1c:60:65:d2:7d:3f:24:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Jun 7 15:01:18 2025 GMT
Not After : Jun 8 15:01:18 2025 GMT
Subject: CN=cc826e0997f6b10a18ea1903957c13a176bfce77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:af:62:b6:30:bd:67:cc:e5:fe:15:17:b0:
3b:99:49:30:f1:c9:c2:de:21:63:1b:81:87:ae:dd:
85:2c:2d:d4:79:bd:56:e9:00:1c:3f:02:68:3c:3c:
fa:c6:85:ad:c7:61:8b:86:7c:87:e4:74:fa:30:3c:
3e:a3:7b:fa:aa:0d:f0:b8:2d:28:d2:3a:21:02:e3:
59:5e:cf:6f:ef:fc:c0:8f:bc:0d:90:a6:48:67:fe:
db:a7:8c:a7:dd:67:16:51:82:55:b0:5c:67:18:a1:
ee:f8:72:49:e5:32:5c:6f:15:6d:5c:57:9d:b1:25:
60:7e:31:3b:13:46:fc:a5:3b:59:3c:55:ce:db:a9:
9d:33:6f:a1:dc:0d:db:5e:b8:64:9c:3a:da:10:c3:
ac:8f:a5:be:11:11:c0:e5:4f:1e:e4:bd:77:4f:80:
ce:f3:32:c5:8d:d5:eb:df:02:6d:77:36:78:87:b9:
fb:6a:3b:ea:24:b6:1a:94:23:27:1a:f5:38:70:6f:
d7:47:68:1c:73:2a:74:78:6b:6e:59:9e:a2:3e:6a:
aa:bd:c4:d3:94:5e:aa:0b:d7:07:23:1d:d8:8d:da:
75:32:c8:0c:aa:84:df:14:74:92:39:19:a1:5b:72:
2b:16:3e:58:2d:04:96:53:0d:30:07:c2:d1:f0:f4:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:82:6E:09:97:F6:B1:0A:18:EA:19:03:95:7C:13:A1:76:BF:CE:77
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:78:3a:f0:45:2b:e7:19:89:73:7a:46:0e:fc:2a:6d:3c:24:
27:6a:c8:51:38:a6:29:24:b6:8b:79:94:91:be:34:cf:4f:40:
65:04:85:62:61:d3:92:ee:9e:9e:08:76:c8:bf:14:04:48:b2:
a7:cc:d2:7e:49:67:b0:a9:34:69:b5:af:6c:97:bc:d3:01:5e:
35:45:4a:63:e1:df:2d:fe:db:ab:3d:24:59:a1:ff:4d:65:d3:
a4:ef:34:71:41:43:68:8b:80:15:99:58:6c:1b:49:d0:99:aa:
14:bd:4a:c1:ac:d4:fa:27:11:96:c7:c2:97:0c:14:45:45:d3:
c5:d8:e4:8d:ab:38:81:05:f2:3a:0e:5f:c3:8d:a8:2c:77:01:
ca:26:0e:aa:fa:9a:20:61:d4:39:7d:12:d0:20:f6:12:65:79:
53:af:89:99:ff:94:b7:9e:6e:cc:65:a7:29:2a:0a:d4:38:c7:
26:76:c5:f8:b8:ec:32:b6:d6:55:fe:83:17:17:1e:62:9e:e9:
d0:0e:e8:d2:16:29:6a:db:ab:4d:28:6f:66:17:9c:8b:60:2f:
a2:21:8f:90:cf:08:e2:35:80:38:7a:9c:4f:01:5c:48:b7:a1:
69:ae:78:b9:57:60:2c:40:32:54:bf:5c:53:6b:10:5a:57:9c:
5a:7b:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:00:14 2025 by rpki-client