Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: 9Jpcc7QFSZGsls98O+OmoP9095MxYna19hBG5r9dyJw=
Subject key identifier: 75:73:10:FA:23:3F:3E:12:8C:E0:B3:1F:6C:21:90:F0:47:DB:AD:BF
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 019751C626BABEA89250BE136C0E5A1B40AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0AF5
Signing time: Sun 08 Jun 2025 23:00:29 +0000
Manifest this update: Sun 08 Jun 2025 23:00:29 +0000
Manifest next update: Mon 09 Jun 2025 23:00:29 +0000
Files and hashes: 1: 7TO4e8lijWMlxMa1DByMrXD5jOw.roa (hash: cDwhkc8bh/DTSiy1V4KBQ3fFakHZ/iT/sbs5LQBmNws=)
2: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: +bD0pxeQDfesLQuKMCEORBYhI7L5MePtWU2mL8zjdgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:26:ba:be:a8:92:50:be:13:6c:0e:5a:1b:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: Jun 8 23:00:29 2025 GMT
Not After : Jun 9 23:00:29 2025 GMT
Subject: CN=757310fa233f3e128ce0b31f6c2190f047dbadbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:d3:28:72:39:ff:39:e1:fa:6d:be:ab:10:
8f:82:16:df:ff:56:b0:3c:b1:b0:42:38:8f:7d:05:
6b:46:c8:5e:8d:f8:77:59:8e:ce:90:b1:20:42:d0:
6c:e6:e7:49:d3:4d:cb:ae:69:03:57:90:0c:c6:76:
bd:4c:03:c3:64:24:8f:86:52:79:1c:21:af:fa:31:
c3:d1:fe:2d:7b:81:81:56:b7:8d:26:9d:bb:8a:c1:
0f:b1:5d:e4:a0:f5:4c:04:be:29:d1:3b:31:6f:9e:
8f:65:c4:4e:d9:ab:43:60:4b:3a:52:2c:ac:fc:9d:
53:ff:d7:3c:c3:99:06:70:f2:5c:95:a7:ef:fc:ea:
2e:4b:c2:b3:c3:16:41:11:df:1f:23:55:f7:07:dc:
99:60:0f:d4:03:f5:f0:5d:a0:76:19:35:2d:68:30:
7c:dd:aa:23:51:7a:cb:ee:60:56:44:d0:bc:b7:c8:
3c:dc:a8:48:74:ac:71:1d:27:8f:5c:2a:d3:26:80:
fd:63:7d:3c:6f:ea:d5:3b:bc:af:5f:fa:97:3c:10:
4b:53:88:d5:19:1a:77:60:aa:3d:a7:2f:96:ce:7a:
22:6e:f9:e7:92:fa:d5:36:56:73:ea:c2:c0:29:58:
fa:7d:05:1d:50:3d:d9:92:5f:2d:8f:fb:2f:68:07:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:73:10:FA:23:3F:3E:12:8C:E0:B3:1F:6C:21:90:F0:47:DB:AD:BF
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b9:72:33:92:e1:91:84:37:72:13:cf:05:4b:15:e3:49:87:
81:b7:8d:dd:c5:78:8e:cc:ca:58:8e:61:eb:fe:8b:7d:b7:df:
26:7d:3d:99:fe:ef:ac:09:42:78:8a:15:ec:8f:45:9f:88:a6:
ab:08:5d:ab:ff:08:4c:3f:7f:7d:d5:be:f1:0a:01:d0:46:ab:
3c:9d:c5:1b:05:14:45:09:44:16:f4:c8:d3:05:de:6f:5b:25:
29:e6:7f:32:aa:e5:f9:99:e5:db:13:17:cf:be:36:84:72:02:
98:1b:8c:e4:cf:e9:c5:ec:b0:b2:2b:fc:05:1d:14:e7:4f:70:
bc:e7:97:a8:94:9f:2e:3e:03:11:01:2c:0d:a9:92:13:ff:9a:
99:94:ea:3c:19:c4:28:16:c4:8c:c5:97:c8:e0:90:46:86:4a:
fc:0f:ea:f4:f7:5d:c7:e3:8a:00:bc:84:1c:29:42:41:f2:8e:
3c:90:55:5a:3f:d5:40:66:7e:f9:52:46:7c:6b:6b:aa:fc:cc:
7e:81:bf:66:a9:e1:fc:f9:47:a9:bd:80:7e:7d:11:e9:d1:cf:
a0:80:1f:ce:4f:0f:96:a6:71:9c:2f:a3:25:6c:43:49:af:e6:
a6:8a:d8:7d:50:7b:39:d2:ce:40:b9:4d:ef:57:1e:4a:97:c2:
b8:99:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:35:19 2025 by rpki-client