Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: mf3tdr0I7TCHBWPIszSHFxmW6khrjkhB1TGd64r9grI=
Subject key identifier: E1:4C:14:90:36:42:CF:82:F8:77:68:AF:BB:C6:C6:0B:D9:CC:3E:64
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 019749314BDB5F0B5D60AA14A65366503938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 04AF
Signing time: Sat 07 Jun 2025 07:00:56 +0000
Manifest this update: Sat 07 Jun 2025 07:00:56 +0000
Manifest next update: Sun 08 Jun 2025 07:00:56 +0000
Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: 4scPQaJvQn5U1OOhIJCNgXGDAY4qOVzuUjNUQC+Pa3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:4b:db:5f:0b:5d:60:aa:14:a6:53:66:50:39:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Jun 7 07:00:56 2025 GMT
Not After : Jun 8 07:00:56 2025 GMT
Subject: CN=e14c14903642cf82f87768afbbc6c60bd9cc3e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:6a:97:24:91:da:b7:13:a3:29:d3:33:e1:
f6:69:af:18:3e:39:67:7f:0a:3b:84:21:f0:3a:50:
b3:89:3f:f9:03:e9:81:9d:33:ba:1a:d3:12:3a:23:
dc:93:52:97:e6:1c:af:58:b9:ec:19:49:3e:6d:73:
24:56:66:1c:db:fe:23:73:25:35:13:bd:1d:a2:a0:
2a:65:21:5f:2c:3a:b9:de:90:42:19:70:03:c1:11:
51:31:88:78:6f:2a:28:55:3f:85:8b:2b:a9:2d:06:
be:66:be:c6:1b:e5:b7:16:9a:04:6a:c6:48:43:d1:
b2:0d:d6:5b:cc:34:45:91:ae:9c:48:95:54:e8:48:
e0:0b:a3:89:ec:65:b1:00:e2:73:7a:1a:0a:cd:56:
3f:6b:79:f4:5b:56:6b:0d:fb:af:6f:ac:ff:8d:65:
f8:c3:38:ab:7c:2f:5e:ba:49:dd:6f:ab:f0:90:a3:
13:62:3d:1f:81:9b:8a:29:77:a6:96:9e:f4:fb:d7:
08:a1:e2:c2:96:c7:12:ad:5b:4b:74:48:59:74:cd:
d1:7d:a1:fd:4c:0e:fc:96:77:7a:1a:44:21:a2:de:
e0:29:51:a8:ea:cc:31:d9:b6:52:07:53:b8:7b:b8:
8f:0f:99:75:59:41:61:9f:cc:c5:95:d5:0e:78:76:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4C:14:90:36:42:CF:82:F8:77:68:AF:BB:C6:C6:0B:D9:CC:3E:64
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:49:a5:dc:27:8b:f4:d4:3b:12:3e:3e:a6:08:1a:96:a0:ab:
a4:25:14:3b:a1:75:42:78:05:22:d3:97:36:73:a5:66:4c:4a:
27:e4:36:59:15:2b:1e:60:25:61:e4:c4:94:1f:bf:1f:e7:70:
ab:66:94:34:62:5b:a7:ad:0e:bf:91:4a:94:87:6e:88:1e:d4:
44:a2:6b:e5:31:2b:c0:32:02:eb:5d:c7:cf:8c:94:b2:ba:d7:
2c:b6:fc:92:2a:8d:dc:9d:5d:5d:79:37:e2:0e:87:0f:eb:a8:
77:78:a7:13:8e:7c:ac:85:b7:12:74:38:c8:87:59:c1:cb:e5:
61:31:cb:2c:86:8e:46:c3:76:6b:5d:83:aa:e7:44:3f:24:a7:
47:99:49:7a:3f:47:9d:10:84:03:75:ed:5a:ab:10:c8:78:42:
ef:01:7c:a0:cb:81:24:01:9f:d8:e4:0c:08:d3:79:8c:8f:fd:
20:45:24:64:1b:2c:3a:83:25:fd:15:92:50:9f:f1:be:9d:48:
9f:6c:8e:d5:76:86:e2:72:0f:73:5e:a8:94:02:36:99:2a:58:
27:51:35:9c:7b:17:f0:da:5d:d7:90:05:e6:f6:5c:a1:3f:be:
33:ab:70:53:e7:f4:84:9d:bc:a7:bc:42:c6:5b:a4:80:ca:81:
9f:05:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:44 2025 by rpki-client