Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: CJNr8rlKwe0z3ockHYICBprRvfc0QljYx5/ETzkhbio=
Subject key identifier: 20:50:1A:FE:3E:7F:AD:B0:DF:58:F8:74:C7:72:69:1C:2D:EE:1B:97
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 0197580008FCCFA66B34775BDE17C318F161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 07E3
Signing time: Tue 10 Jun 2025 04:01:26 +0000
Manifest this update: Tue 10 Jun 2025 04:01:26 +0000
Manifest next update: Wed 11 Jun 2025 04:01:26 +0000
Files and hashes: 1: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (hash: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: m+hbqRT892FwDZkzBtHHqbv67jsX0g11nGEuYVfFaIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:08:fc:cf:a6:6b:34:77:5b:de:17:c3:18:f1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Jun 10 04:01:26 2025 GMT
Not After : Jun 11 04:01:26 2025 GMT
Subject: CN=20501afe3e7fadb0df58f874c772691c2dee1b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:f4:fc:4a:f0:fa:58:fb:28:71:29:d9:66:
c3:8b:d2:64:e6:50:38:fa:72:6f:59:45:ef:ea:75:
ad:00:7d:fb:20:85:6e:a4:37:47:3a:a0:8e:ae:09:
0f:a3:58:01:d5:67:6b:4e:e2:5f:41:bb:e8:af:97:
3e:5e:a3:0f:9e:dd:87:c0:4d:c5:cb:ab:f2:92:66:
e4:54:f9:f8:19:99:ad:95:45:45:9b:ea:2f:71:9c:
48:c7:b2:08:de:9b:23:cf:39:51:34:f5:7a:5f:02:
6e:c0:74:df:ad:c2:5e:a5:45:8c:c4:fc:09:61:f2:
c0:05:9e:e8:e5:1c:91:e3:23:4b:71:81:da:17:c3:
80:6e:a4:ea:96:b6:a5:1c:4a:60:cd:ae:aa:cd:2d:
e2:75:ce:64:4f:15:b1:92:68:c8:1e:fd:ba:6d:2c:
90:9e:d5:6f:84:76:de:8c:f2:1b:9d:6b:86:53:ba:
f9:b9:e1:58:24:d5:ea:09:8c:99:5d:fd:ce:89:f7:
d2:b3:6f:6c:d1:b0:ff:80:9d:9c:ea:09:5d:eb:34:
22:2d:28:51:98:27:39:83:83:ca:04:6a:f3:ca:a3:
8f:4a:87:66:a9:a8:89:b7:61:82:69:7f:03:40:d6:
21:9c:36:df:ea:e8:29:c3:51:5a:4a:c5:5f:8c:2c:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:1A:FE:3E:7F:AD:B0:DF:58:F8:74:C7:72:69:1C:2D:EE:1B:97
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2c:7f:22:67:1c:45:11:07:aa:14:aa:af:0d:6d:33:8a:b1:
40:42:bf:42:8a:a2:9e:40:43:a5:63:48:6b:e6:d3:98:a2:0f:
68:b3:1c:8d:bc:4a:7e:b7:d2:be:4a:6f:be:05:ec:b2:80:55:
a1:df:b7:12:77:f8:c9:a7:de:65:a8:e7:b7:53:7c:29:a5:0f:
8c:d1:6a:6e:98:79:4d:00:4a:4d:6e:b4:49:bb:63:d6:9f:b1:
9a:e1:3c:0c:d7:09:e5:9c:a8:61:1a:84:36:94:44:e7:f8:00:
00:47:31:07:fe:66:1b:61:12:bc:90:cc:32:a0:e0:a1:a0:d0:
ed:79:e3:11:ee:e2:0e:d2:81:6b:53:d4:95:04:48:01:b0:80:
af:59:90:fa:86:2a:6d:25:d3:a6:21:d9:2d:cf:1f:5b:04:d6:
37:ae:46:a7:aa:a8:19:c9:8c:5e:e2:1b:4a:d5:8b:ec:c6:ec:
56:77:79:ce:62:1e:94:61:39:2b:be:c5:8c:76:a1:cc:f1:ab:
67:74:b9:e7:bd:cb:82:c6:0a:b8:73:4c:bd:c6:ae:05:20:21:
51:c1:2b:a6:c8:4b:2b:59:be:01:f9:7d:6e:5f:c3:da:39:31:
86:cb:98:8d:77:b2:e4:b8:05:fd:7c:25:f1:29:46:b3:0f:35:
3d:e5:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:33:18 2025 by rpki-client