Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: qcDOiGj35mcH09VQbJ1DIBrrw8pA8rGJYO/wK1pdSeQ=
Subject key identifier: AF:32:9A:D2:05:30:D7:09:37:83:3F:6B:16:BA:99:49:C3:B8:3F:6F
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 0197499F68A7D62AA8F301912120833AA6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 09:01:13 +0000
Manifest this update: Sat 07 Jun 2025 09:01:13 +0000
Manifest next update: Sun 08 Jun 2025 09:01:13 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: x6QOtBwlbbiYmVvMLnLZ2wYrkv/QbkWevYJycXD5XIs=)
2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:68:a7:d6:2a:a8:f3:01:91:21:20:83:3a:a6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Jun 7 09:01:13 2025 GMT
Not After : Jun 8 09:01:13 2025 GMT
Subject: CN=af329ad20530d70937833f6b16ba9949c3b83f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:30:04:b3:12:82:86:42:f3:5e:03:de:72:
48:61:25:12:2c:5e:13:67:eb:be:59:e4:06:41:33:
da:82:c6:7a:a2:10:be:5d:83:d1:b1:1a:6c:ad:07:
8c:91:71:a5:84:fa:e2:de:3b:0c:6f:30:2c:b8:36:
44:4a:d9:76:fd:a8:91:ac:92:12:d3:89:c2:e8:bd:
e7:f1:0d:8c:8a:1e:e7:76:3f:cf:26:38:49:a1:a4:
9d:2b:56:07:de:b0:19:3a:43:1a:57:15:e7:23:37:
a1:38:4b:d4:a0:45:a7:96:8a:b3:ec:bc:0c:74:c3:
85:9e:32:dd:66:13:5e:a6:53:bf:55:51:a8:d3:35:
45:70:6b:47:da:4b:02:44:e0:a1:8e:a5:ae:ca:73:
74:f3:b4:fb:2b:d5:d3:58:94:fc:0d:ed:57:00:70:
bd:38:e1:e9:18:9e:7a:77:51:14:58:e1:1b:d2:96:
b4:8c:9c:a1:4c:e5:b1:4a:ed:3c:13:98:a0:9e:36:
42:33:a7:52:00:b9:09:31:42:04:1c:c0:0a:56:5d:
d8:d7:e2:04:11:52:56:4a:73:0e:a5:f3:7b:a6:68:
bb:1a:ce:f8:06:39:e2:f1:d5:05:db:ff:4b:14:f8:
b3:cb:3c:6a:12:86:33:87:31:08:c8:ed:22:81:a0:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:32:9A:D2:05:30:D7:09:37:83:3F:6B:16:BA:99:49:C3:B8:3F:6F
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c4:ea:3e:d2:c7:05:9c:cb:b2:59:16:40:a6:17:3d:eb:69:
99:01:b3:48:bf:4c:37:ff:84:7f:8e:09:18:87:15:3b:dd:e4:
6a:2b:8f:f9:41:39:4c:a5:f4:38:7e:c6:90:35:cc:2e:ba:5b:
20:75:eb:16:32:8b:94:c6:f0:e1:e3:9e:2c:41:06:b4:6b:2d:
b3:34:2f:5c:92:3f:8d:87:03:e2:72:a8:94:da:8b:55:0c:c9:
41:5b:54:15:70:06:7a:75:d4:07:4d:ee:c0:31:a2:52:b5:56:
0e:80:b7:7b:4d:cb:4c:60:0f:12:dd:75:d9:49:7e:3a:41:7d:
2b:80:5c:f9:c7:70:ef:84:6f:8e:b6:ef:7d:fb:ad:61:e5:f6:
a6:d6:dd:d3:54:8a:f4:cf:12:e0:87:b2:a4:bc:a1:f6:f1:a4:
ff:2a:e9:cc:7d:47:50:a6:d7:8b:02:54:a2:4a:74:af:84:86:
a1:1a:69:9f:ea:7c:f1:d3:a7:a2:5d:3d:83:32:b8:33:f5:0b:
5e:1c:8b:00:4a:35:78:ce:65:35:21:e9:c6:f2:33:36:8d:85:
b1:27:85:a0:a7:8c:c8:66:4a:c9:db:42:02:10:ae:ce:65:c8:
38:af:9c:18:28:38:2d:03:79:e1:f8:b4:ff:37:c3:b0:11:fb:
ec:21:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:03:06 2025 by rpki-client