Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier: jj4RpiOGSXETnUczWNmx6x2a2M7sE7t0czsEbLhO//M=
Subject key identifier: B8:4B:83:5E:03:E0:EF:D5:DA:50:26:F7:10:55:BE:67:0C:F1:77:F6
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 019748C33D1F90BF261F0C0860F3E22DDA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number: 3F
Signing time: Sat 07 Jun 2025 05:00:44 +0000
Manifest this update: Sat 07 Jun 2025 05:00:44 +0000
Manifest next update: Sun 08 Jun 2025 05:00:44 +0000
Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: OklVpRD+8iAqN+KCnY+R7HD/qZCkftcVcJpzE9ELekU=)
2: tFY_1oU9xNxzF5JnlbdrLi4cQ9A.roa (hash: Sxl+M0Cfp0KqUWFjQhEzTtXSwHwXwN4AdOusnlZXPTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:3d:1f:90:bf:26:1f:0c:08:60:f3:e2:2d:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Jun 7 05:00:44 2025 GMT
Not After : Jun 8 05:00:44 2025 GMT
Subject: CN=b84b835e03e0efd5da5026f71055be670cf177f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:f9:67:54:29:25:11:f5:98:8e:80:4a:ca:
b3:9e:2d:05:8a:65:a4:c1:0b:a9:94:62:3c:31:86:
e6:35:a8:95:9b:c7:57:c2:eb:bd:cc:05:2f:8b:74:
ea:5b:e4:66:12:05:58:f0:a5:b6:1e:c6:3a:64:fd:
b2:0f:96:df:5c:bc:e0:e0:3c:7a:d1:72:25:de:c6:
60:85:bf:6d:58:42:d7:4d:71:8d:df:29:54:ec:b7:
8d:52:dd:a9:4e:83:d0:4f:aa:96:1a:ba:f0:fb:f6:
20:79:43:21:7c:00:a6:41:1e:06:ae:64:e1:19:00:
a5:14:0c:a6:69:bb:73:78:9a:27:e8:ca:71:63:f3:
17:44:88:33:f7:28:76:5e:ea:4b:6d:a6:b7:ea:a1:
3a:55:a1:82:c3:72:1a:2b:b7:68:62:d0:fe:6d:af:
85:68:e2:bf:9e:e9:93:b0:53:90:9c:76:37:24:be:
f2:4d:a6:20:e6:e5:90:89:92:c0:6f:f9:33:f9:2f:
45:14:02:0b:53:d5:4b:24:da:76:8c:86:a6:8c:42:
ae:3e:6d:b9:3c:50:08:e8:c0:9d:d3:30:e8:eb:60:
3b:98:d3:2e:85:18:f7:64:0a:d3:8b:3b:c9:ec:36:
47:e3:79:22:3e:24:ad:f8:26:af:f8:c2:6d:c7:f4:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:83:5E:03:E0:EF:D5:DA:50:26:F7:10:55:BE:67:0C:F1:77:F6
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5c:84:2e:1f:62:9d:eb:5a:09:b4:ae:5e:f7:23:53:2e:aa:
bc:94:00:94:ba:5f:44:7b:b7:96:ab:33:82:98:8c:6e:e1:92:
54:18:f5:d9:19:a2:e7:19:c4:2a:6c:2f:39:8c:2e:8d:37:a5:
fa:11:89:96:4b:94:6f:2a:dc:ab:ec:4b:a1:26:36:c9:4d:47:
1b:50:b8:27:21:fc:a9:17:d8:50:6b:08:c3:3f:02:ea:99:8b:
1c:4a:f5:7c:ce:bc:99:33:e6:ab:ce:a6:e7:d4:35:d3:17:9b:
ef:83:35:69:08:23:6d:8c:c9:34:c3:6b:7d:57:18:3e:a7:d9:
8a:2c:de:82:9d:b4:ed:ff:1f:52:4e:77:1f:fc:27:37:7c:d9:
63:2a:86:11:14:e2:43:b0:5a:4a:8b:d6:07:d9:4d:24:84:71:
dd:c8:1c:dd:14:4d:12:cd:c1:ed:a0:ee:a7:27:b5:04:6f:49:
4b:04:2f:d9:24:d8:43:f0:7a:1f:87:ee:17:ab:e5:d1:24:fb:
6c:2a:18:68:14:1f:75:ae:49:62:6b:04:37:c3:c2:8d:85:43:
0a:ea:e0:8a:86:a5:72:9c:a7:ea:0e:7e:fe:de:6d:40:f4:59:
d6:6e:9d:cd:24:e9:ed:f6:75:d0:ee:63:af:90:fe:65:bb:71:
3d:43:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:11 2025 by rpki-client