Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: uezQDIefeneoTBiV2IcUUutm47yoIGxE6fdBaRsiDw0=
Subject key identifier: CE:3A:47:DF:82:74:BE:F0:6B:5D:53:1D:5D:5E:20:CD:65:D1:9F:6F
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 019748C3489573ACE0C627711CC9250AB1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 1265
Signing time: Sat 07 Jun 2025 05:00:47 +0000
Manifest this update: Sat 07 Jun 2025 05:00:47 +0000
Manifest next update: Sun 08 Jun 2025 05:00:47 +0000
Files and hashes: 1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: 6pRogDLH7TPBrylGFhysTQQQEg1bTP97jjw7HdKibXQ=)
2: bjnOU2JwIyBhG3a2k5FUAWGDatE.roa (hash: qBdlY6EWSQACgnafmgz/gnCk4zq1L3YPmsFgf+M1bHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:48:95:73:ac:e0:c6:27:71:1c:c9:25:0a:b1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Jun 7 05:00:47 2025 GMT
Not After : Jun 8 05:00:47 2025 GMT
Subject: CN=ce3a47df8274bef06b5d531d5d5e20cd65d19f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:db:cd:00:ca:a7:40:b5:57:ec:47:85:41:
50:5e:78:08:00:85:4e:5c:fa:01:7c:10:84:9d:d5:
db:2a:5e:1c:c9:64:65:d3:16:18:a7:36:7e:f6:81:
20:99:98:9e:60:f1:88:0f:79:3d:a2:95:1c:af:60:
9f:c3:57:84:a4:bb:80:d7:39:3d:42:20:0b:de:95:
36:fc:3b:be:e2:30:2b:b8:08:08:d5:f1:a6:d3:8c:
34:72:97:83:6a:b2:4b:3e:b0:0c:b6:f4:3d:66:15:
86:b1:ac:3d:25:d9:d2:89:b4:4b:74:3a:0a:06:51:
1e:02:75:e1:ad:ae:f4:00:9e:d5:b5:29:67:9e:2e:
67:46:e7:8b:07:5e:fd:f3:a4:7d:27:d1:0a:5e:65:
28:c4:37:7f:23:6e:b8:d4:54:ff:f1:4e:38:a0:38:
14:e4:7c:52:91:4f:97:6e:d5:31:cd:0a:06:15:d3:
57:da:e5:83:e2:9c:9c:1c:a4:be:5f:e2:4d:78:68:
ba:2f:58:23:52:98:4b:1f:ec:c4:8d:27:18:66:3d:
48:83:df:e3:a3:a9:1f:26:c0:69:23:1f:f0:0f:fb:
e5:e8:6d:37:4a:50:23:af:e7:3d:d8:0e:ac:db:d6:
d5:5f:91:cb:b7:b6:77:97:d4:0f:8a:60:7e:c4:2f:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3A:47:DF:82:74:BE:F0:6B:5D:53:1D:5D:5E:20:CD:65:D1:9F:6F
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c7:a9:5f:f5:85:36:0f:59:8c:c6:24:5f:73:94:fa:aa:b6:
88:e7:f3:4c:2d:a8:1f:1c:e3:69:37:ff:72:da:01:fe:fd:30:
48:94:4c:1d:fa:72:23:f5:8c:77:8e:3e:b3:0a:1f:9b:b5:26:
c7:4a:8f:01:57:45:9e:b9:03:48:38:38:2e:f6:06:b8:62:34:
16:a3:9d:fb:84:c9:86:de:c9:f7:fa:8c:3d:2b:4c:62:d8:7f:
00:55:7c:9d:92:04:be:ef:60:be:3d:3e:85:3e:b4:27:77:07:
7c:05:89:c6:41:d3:8a:67:27:0a:68:06:ac:bc:88:01:88:e6:
c9:ae:25:6a:6c:fb:12:88:71:54:72:63:d3:55:6c:de:05:4a:
22:ae:c0:08:92:0a:5c:51:d2:17:c3:01:2f:bf:06:12:15:cc:
16:b8:c3:cc:35:e0:b6:10:0d:cf:ab:3f:26:c0:db:fb:e0:85:
02:be:fe:3d:4d:13:6e:22:01:50:7d:8a:37:2e:bd:7a:d0:a9:
51:88:3b:e9:c4:05:f3:d6:fb:a2:c6:85:99:6d:ef:2f:50:43:
48:0f:58:64:4c:12:20:d0:28:a7:44:e0:09:ca:97:10:dc:a9:
19:15:c6:14:aa:08:74:5b:99:4b:be:16:45:25:7e:7b:35:a0:
62:e6:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:14:29 2025 by rpki-client