Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: rVfgemLAAIWPwbPUlZsczv4TpBHiKz2HN544hXMIhc0=
Subject key identifier: FD:0A:5B:83:7E:8C:86:98:D3:04:56:76:10:DA:9B:0A:E4:BA:CD:97
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 01974BC40489EF7B057C391E7D6621600609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 09EA
Signing time: Sat 07 Jun 2025 19:00:26 +0000
Manifest this update: Sat 07 Jun 2025 19:00:26 +0000
Manifest next update: Sun 08 Jun 2025 19:00:26 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: 1g2lVkGxi1Ba/CtDGoaSqRVjJ8XJxo0mlcLi2yMxrR4=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:04:89:ef:7b:05:7c:39:1e:7d:66:21:60:06:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Jun 7 19:00:26 2025 GMT
Not After : Jun 8 19:00:26 2025 GMT
Subject: CN=fd0a5b837e8c8698d304567610da9b0ae4bacd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:6e:3f:bd:e8:ec:cb:0b:0f:dd:d7:dd:4c:
2f:da:54:f2:da:da:31:c8:3a:f2:f8:54:dd:af:b5:
b1:09:94:44:3d:98:3d:ed:af:2d:77:be:34:60:a0:
6f:42:d1:e3:2f:91:22:2d:75:0a:2d:7c:91:51:9d:
35:0f:bb:42:f8:fd:6c:d8:d3:50:cd:a0:ab:77:83:
0e:2e:32:02:9c:65:93:87:7c:ea:88:83:4d:5b:37:
8c:03:c3:5a:a9:15:c9:64:6a:d0:db:70:7b:73:9f:
16:8d:73:9c:62:eb:20:e8:56:68:8a:41:5a:49:9e:
b9:3a:fa:d0:40:b3:fc:38:ac:b4:f3:75:26:2e:bd:
76:67:f1:fc:16:33:1e:c1:50:90:27:5c:96:20:5a:
3e:18:3c:35:d1:92:be:4d:f2:9a:ce:19:f8:21:a4:
e3:45:b8:80:4b:b6:eb:9e:36:a0:e3:98:c1:89:54:
22:56:a0:42:f6:35:db:fa:2d:47:a0:08:58:d5:29:
bf:47:7f:fc:41:0e:cb:84:22:cf:5b:41:cc:01:18:
c9:3e:b7:ca:d1:c6:e2:33:cb:53:0a:af:67:44:5b:
93:ab:ab:da:74:82:05:aa:6f:d3:c9:da:b6:55:cc:
63:f6:b8:84:a1:66:e0:e8:a4:bd:a9:1d:7f:bb:ad:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:5B:83:7E:8C:86:98:D3:04:56:76:10:DA:9B:0A:E4:BA:CD:97
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7f:49:64:f6:5b:eb:fa:02:20:52:d9:8f:59:3d:be:b3:8d:
66:fb:75:6e:fe:6c:b9:43:30:52:fb:c4:9a:38:f0:c9:aa:db:
f3:dd:f7:fa:5c:ea:92:93:e9:29:4c:cc:07:3d:ce:02:f0:92:
b9:83:45:3d:e2:b8:42:19:ed:c3:07:d8:b7:05:a9:91:c7:3b:
02:f0:2e:ee:8a:5e:59:9b:ed:a6:ab:3d:bb:b8:7a:24:0d:09:
0b:87:73:da:3f:97:8b:38:e7:03:d9:4a:77:24:e7:56:4c:a7:
ce:fc:a3:6e:2b:c1:c4:74:d1:5d:0e:f7:a1:3c:75:2c:d4:e4:
69:62:22:b3:3f:6f:b5:3c:b0:e2:99:8d:0e:6b:94:02:a4:54:
aa:ba:56:fd:01:ba:91:6c:78:72:d4:7f:1f:51:61:f4:01:e8:
ae:e3:5b:ba:0f:c6:8f:66:a7:0b:e0:87:55:af:ee:72:61:d9:
7a:b4:fb:a0:35:6b:ff:62:14:9a:47:03:26:7c:b8:bf:4d:59:
ce:ed:67:77:98:16:26:45:04:6b:e7:13:4c:da:be:89:37:42:
34:d0:e3:28:00:30:ef:c2:31:f8:dc:5e:88:60:5a:2e:2e:9b:
49:f8:5e:b5:0f:b7:07:d8:70:a5:64:b7:b1:5f:06:af:52:87:
95:1f:93:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:52 2025 by rpki-client