Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: zjZ3TXaqQuGhspYYIW/odtbYfpQU9YyZnuPDNvh1mSg=
Subject key identifier: 10:19:17:FF:04:8D:B7:D7:92:BF:E4:27:FC:8F:D7:7F:AB:C3:DD:7C
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 01974C324887A6FCB0FD5EC91B8F39B3A5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 093D
Signing time: Sat 07 Jun 2025 21:00:53 +0000
Manifest this update: Sat 07 Jun 2025 21:00:53 +0000
Manifest next update: Sun 08 Jun 2025 21:00:53 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: yIBvPoJa7lLYymK+NARj2ktHM4V4npcObo1aPm0GZr0=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:48:87:a6:fc:b0:fd:5e:c9:1b:8f:39:b3:a5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Jun 7 21:00:53 2025 GMT
Not After : Jun 8 21:00:53 2025 GMT
Subject: CN=101917ff048db7d792bfe427fc8fd77fabc3dd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:d8:95:b3:82:bb:ac:b4:32:e1:dd:6d:83:
e7:bd:0c:d5:bc:e0:66:0b:5e:74:3c:73:96:0c:20:
07:04:f8:43:a3:75:0b:3f:5c:c8:70:e2:5d:bb:9a:
af:df:b3:94:c5:6f:65:cd:f0:0e:e9:1e:64:53:9e:
a0:ee:6a:f8:50:39:9b:40:e3:b0:26:5c:2e:49:95:
ef:4e:69:78:f2:df:ef:97:ce:ce:a3:84:ba:ce:32:
04:3b:69:ec:1d:25:73:de:10:d4:f0:64:6e:c8:b1:
2b:4d:5e:eb:f0:1f:22:4a:f1:80:94:3a:4b:d7:b4:
56:73:90:88:af:31:03:9f:ad:fa:74:62:07:da:f2:
9a:b0:ee:af:85:7b:8c:05:82:2b:0e:81:16:2d:91:
b8:10:9c:6c:88:39:8c:17:4e:81:62:6d:66:89:75:
ce:2c:5b:3c:4e:07:8b:be:58:bb:2f:39:f5:85:cf:
34:c1:2a:67:b4:0f:7c:72:ff:15:ae:14:c6:59:c6:
68:a7:1d:2a:50:ab:d5:fd:1c:a4:e1:05:5f:b9:c0:
04:06:e4:e4:aa:b9:de:20:c6:8a:84:ff:2d:4f:92:
89:2e:b5:d0:b8:b8:96:70:27:57:c3:31:11:d4:1c:
15:f8:26:dc:1b:32:1d:24:8b:00:30:d4:9b:89:7a:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:17:FF:04:8D:B7:D7:92:BF:E4:27:FC:8F:D7:7F:AB:C3:DD:7C
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:1c:0c:d1:22:22:d2:4d:51:53:9b:83:1c:55:91:89:bc:
e3:7e:3c:79:c3:1f:64:e8:6f:14:da:5e:e3:bb:b7:a6:a2:44:
b8:d4:7f:48:40:34:ea:be:1a:7d:ea:e9:aa:ed:b2:c3:d7:9d:
65:d3:c4:e4:ce:97:26:78:32:7f:5c:33:b8:8f:94:10:f3:a0:
70:61:f8:3d:0b:62:7a:88:b0:ab:24:2c:d1:f4:43:2d:59:60:
96:31:d9:23:83:be:83:af:3d:b6:40:22:2f:47:84:bd:d9:68:
7e:61:0c:84:11:98:4e:6b:ae:54:28:07:00:b7:60:cf:71:57:
26:20:67:32:7a:46:e8:ae:20:72:3d:ff:58:ca:1b:88:9c:e1:
d5:92:c4:7b:08:c2:80:14:59:7b:64:cc:ef:64:d0:71:14:f9:
97:76:72:88:f2:7c:d6:66:9e:34:ca:26:76:8d:70:4f:20:8e:
bf:bb:a9:5e:90:2f:90:10:fc:7d:a4:04:45:d4:f1:bc:6e:e4:
40:ac:85:df:89:64:1e:27:81:de:9b:2b:79:3d:aa:41:48:a1:
23:66:68:79:c0:01:47:65:6f:0b:db:09:bd:f4:f7:16:f3:1f:
77:f4:91:5d:d3:e3:87:38:94:3f:fd:ff:e9:de:c3:df:5f:57:
8f:ed:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:33 2025 by rpki-client