Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: GQofJsHMGwR6qqmiLDBNTE2J+Y8cze+v+y5fd+14T4g=
Subject key identifier: 8B:30:CB:6D:29:AE:CE:07:4C:6B:D0:DB:A0:3D:F9:1A:70:9B:BB:EB
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 01974B5646F68FEBD2946B2C16F4EDCA35B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 0EA8
Signing time: Sat 07 Jun 2025 17:00:34 +0000
Manifest this update: Sat 07 Jun 2025 17:00:34 +0000
Manifest next update: Sun 08 Jun 2025 17:00:34 +0000
Files and hashes: 1: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: WP0VgAlfd195SWPzk9CdiKQUy9D+PrHbVbONGSSPBus=)
2: g6aF_sPRUTumEgKyygfiqs9RnAY.roa (hash: rvpq14gdtNJHSBubmTdr4iiG6SshNjIec7cz2rKU0Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:46:f6:8f:eb:d2:94:6b:2c:16:f4:ed:ca:35:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Jun 7 17:00:34 2025 GMT
Not After : Jun 8 17:00:34 2025 GMT
Subject: CN=8b30cb6d29aece074c6bd0dba03df91a709bbbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:df:01:23:76:20:da:5d:ad:92:d3:62:ae:
2c:26:06:6b:ee:c5:52:3c:eb:96:fc:62:57:45:fd:
33:e7:7d:4d:3d:82:d1:ae:c0:7d:d1:9d:c3:ba:37:
54:22:d3:26:ba:18:ee:fc:5f:39:56:36:e6:20:e0:
ce:14:fd:66:ef:35:1a:b4:3f:3c:8c:ee:53:40:62:
d7:7f:c0:d3:90:18:08:05:69:ad:9f:a4:0e:38:00:
34:96:cc:04:07:0e:8b:26:23:7e:4c:bd:4a:25:40:
73:dd:9a:0c:f3:05:bb:6a:87:2e:85:3c:5f:60:99:
bc:f5:f9:0c:26:ea:67:8b:14:16:4f:d5:a4:5b:51:
ee:4d:63:3c:6a:9c:7b:15:cc:7d:04:9f:18:df:0b:
6f:39:3d:53:58:20:dd:b6:9a:15:26:41:b4:c3:a5:
0a:eb:85:59:34:7c:c7:85:ea:ed:bd:f3:0e:67:4c:
66:0a:81:50:4c:07:2c:30:3f:2f:d9:15:48:bd:5e:
e2:e2:6e:01:10:40:fb:51:61:0a:09:82:f8:e1:7c:
06:3e:9f:de:9b:0d:50:57:89:9a:36:61:4b:2a:96:
c4:31:e0:f3:79:99:61:57:a4:75:30:d3:3e:c0:42:
70:51:5b:36:71:ce:f1:8b:3e:64:a7:f2:89:2b:28:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:30:CB:6D:29:AE:CE:07:4C:6B:D0:DB:A0:3D:F9:1A:70:9B:BB:EB
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:bc:fa:b5:27:8d:03:7f:74:78:e3:d0:05:45:db:e1:07:
48:02:3b:eb:e1:ae:7f:1f:89:2f:4c:28:ae:4c:3f:01:83:c3:
a6:a9:43:a0:a9:b3:84:2e:f9:c2:ad:ef:ea:73:da:32:a4:b3:
06:22:2c:94:04:01:fe:9d:4a:57:2c:0b:36:76:58:5b:8c:af:
9a:b6:8a:29:a7:70:10:1c:5c:6d:94:d5:e0:6a:78:d2:bf:a9:
2d:71:e8:a0:50:90:f5:09:f7:6f:00:fb:9a:dd:3a:64:86:3b:
11:af:da:d6:5b:a4:7a:35:23:55:a2:fd:cc:0b:c3:29:3d:93:
5b:5e:45:88:4e:9c:f8:05:3e:2c:a1:84:4a:c8:8c:2c:16:e5:
05:a1:5f:a7:a8:7a:08:de:ba:2c:e7:2c:c4:6f:d9:85:2e:fd:
38:01:47:ac:52:cf:20:99:d5:7a:5e:7c:b6:40:09:c1:85:bf:
81:1b:71:56:cd:79:fe:75:2b:ca:bd:d9:39:cb:5c:f9:91:ff:
21:c6:a3:1f:33:8c:a0:af:56:25:9e:fe:d5:84:7b:e0:60:eb:
d3:bd:be:a2:97:9b:eb:98:0b:a0:2f:87:74:9e:46:27:2d:5d:
12:57:69:0d:4e:3b:91:d3:5e:17:f9:d8:41:9e:3b:af:b0:3a:
95:24:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:46 2025 by rpki-client