Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File: aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier: rknNcdKBTgczzSWQTH2TjlE6w4Go0QJbU43Wd5cWE54=
Subject key identifier: 8D:04:DA:21:EC:76:D7:F2:A0:28:03:13:2A:C7:B9:EF:E0:74:B2:9D
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 01975F81E2964C568E6177B8C67C3F04D148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number: 158C
Signing time: Wed 11 Jun 2025 15:00:37 +0000
Manifest this update: Wed 11 Jun 2025 15:00:37 +0000
Manifest next update: Thu 12 Jun 2025 15:00:37 +0000
Files and hashes: 1: PXiDqudXgKmzyY9YiAzq4s46dWE.roa (hash: 5TBNAVFbP2ChjbJK1BJdzLBXEkgEKjRymZk/TEDkDEM=)
2: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: 8cdkjqtV9pJ0yuOT5wqBzPLlQo1GNgYCCon9NNrw+BQ=)
3: q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa (hash: acnCrGpXIM7lWKiBoJxoUduhJbjnt+3LzoU7dLDO7Fo=)
4: yX0Sl7S1CDrX-G7aHHH7HF-0TIU.roa (hash: Y4Ls4yPY2OiPCKdVraBwQCc1dEKhm1VWZBF9yLJSXfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:e2:96:4c:56:8e:61:77:b8:c6:7c:3f:04:d1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: Jun 11 15:00:37 2025 GMT
Not After : Jun 12 15:00:37 2025 GMT
Subject: CN=8d04da21ec76d7f2a02803132ac7b9efe074b29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:ae:9b:d2:24:d6:41:7e:79:01:e4:cc:53:
ba:06:0a:5b:3a:32:c7:b9:a6:d7:fa:f9:50:65:bc:
c1:3b:c7:48:39:ab:f8:73:b9:29:65:3f:0f:ab:01:
80:eb:e0:b5:7f:b8:ae:7b:7a:9e:0b:c1:34:51:92:
07:a0:3a:af:0c:cf:2f:b3:13:ed:2a:32:a5:5c:bb:
88:da:ca:60:1a:9a:55:79:c7:b9:da:b1:4c:b8:22:
38:4a:12:3a:9c:7c:93:a6:a8:68:56:7b:60:49:53:
a9:f3:9a:e6:d7:1f:dc:5b:eb:a8:8a:ac:6c:06:f8:
7a:56:b1:76:10:3a:c8:bd:83:34:67:f0:2f:40:f0:
6c:b4:35:3b:50:69:67:6e:5d:93:d5:37:78:ab:69:
7a:3a:8d:51:65:a5:1b:8c:3d:d1:c2:e6:81:b1:8a:
08:27:ae:90:5f:26:5b:77:e8:6e:f8:ec:12:d7:8c:
d7:35:00:32:fd:d2:50:a9:56:80:32:fc:12:48:d7:
2a:b0:af:1f:fa:d0:2c:3b:31:d6:2d:79:02:74:e0:
dd:e6:ac:c0:c5:3c:5f:02:5b:b6:05:ce:a3:68:76:
e7:08:0e:86:48:79:4b:8b:c5:e1:d6:f0:10:94:fa:
2f:be:9d:5f:f4:97:8c:69:74:88:7a:4c:c8:72:4d:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:DA:21:EC:76:D7:F2:A0:28:03:13:2A:C7:B9:EF:E0:74:B2:9D
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c0:59:10:ff:e2:dc:6c:d5:ea:60:99:de:c3:14:35:0f:be:
37:f0:a5:4f:81:b4:ca:c2:9d:c4:c0:77:72:80:bf:04:bc:58:
f4:a3:38:20:69:60:73:70:7b:4b:27:5c:55:4c:4b:47:75:37:
fb:fa:48:30:70:a1:1c:4c:2e:ab:d8:51:86:78:7a:d4:a0:7f:
06:15:b4:b8:e0:0d:99:a1:25:da:3c:de:cf:83:3e:23:78:21:
92:12:fe:b4:f5:ea:36:83:3b:eb:eb:e0:bc:c1:41:09:c7:50:
32:cc:55:cb:30:d3:4f:6f:13:7e:85:e5:6f:74:c2:be:da:97:
09:ef:67:39:4f:7a:73:d0:d0:63:32:0a:fc:46:04:c0:1f:87:
a6:86:32:81:14:fc:f0:5e:df:c6:33:a9:91:e2:0c:33:73:f6:
81:97:df:4d:65:1a:8b:5d:38:7e:5a:f7:94:5d:3a:62:64:3a:
d0:96:d5:fb:93:a3:f4:b3:6c:ce:4d:50:ec:2f:05:1f:57:55:
28:9b:3c:d5:81:00:c3:a1:22:07:e9:d1:01:16:6a:27:1e:55:
62:c8:26:5a:7f:78:9c:b0:c8:47:f8:06:a5:00:57:2a:2b:15:
8a:5a:04:4d:b1:0d:f7:96:4f:93:cc:2c:01:ea:fd:11:cd:5e:
8b:d4:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:41:44 2025 by rpki-client