Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: TqBRI34FlTwaaD0FbX/StxkCNadbpY1jvA/Tdm+xaxE=
Subject key identifier: 40:78:92:61:BD:9C:4F:A5:30:6F:FE:4A:85:65:EA:2D:51:99:86:CF
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 01974FA0E7A7013F38BCE5BFBB7EB9E7D0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 0D6F
Signing time: Sun 08 Jun 2025 13:00:34 +0000
Manifest this update: Sun 08 Jun 2025 13:00:34 +0000
Manifest next update: Mon 09 Jun 2025 13:00:34 +0000
Files and hashes: 1: TPjf70pa6qBZmpfYB0iX9CcL4Y4.roa (hash: swAbvLbVBmlLATlL/hX7o87L+INYtKkOcONzc8lraTI=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: eu3ZQRLt4narqWTk1y+RYiTOGrjKA8RskKnrk2QKW3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:e7:a7:01:3f:38:bc:e5:bf:bb:7e:b9:e7:d0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Jun 8 13:00:34 2025 GMT
Not After : Jun 9 13:00:34 2025 GMT
Subject: CN=40789261bd9c4fa5306ffe4a8565ea2d519986cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:22:df:71:e0:6d:67:6d:27:4f:fe:dd:11:
0a:f2:63:86:1d:65:d1:8b:86:ad:5b:c6:7c:73:88:
41:38:c3:d3:a4:bb:03:c0:8f:b6:42:e3:7c:45:c9:
98:f7:67:48:9e:f2:9d:7e:13:ff:69:52:aa:04:51:
11:21:05:13:26:90:31:2d:13:6a:a0:aa:b6:7f:49:
2d:03:76:81:36:8c:43:09:f3:1e:3b:72:02:3f:7e:
73:23:b2:36:c8:cc:ef:0a:25:bf:fc:7e:d2:9d:1c:
e8:3b:61:3a:cb:66:85:47:d0:17:a7:7a:13:62:5d:
6e:4d:f0:69:27:c8:ae:8c:03:9e:85:7c:30:b1:9c:
33:93:03:d0:a0:ca:60:a2:b5:5a:55:62:c4:f1:5f:
df:eb:90:45:67:62:90:ce:1a:83:e5:ba:34:db:68:
e4:b0:db:35:11:39:f5:e6:b4:62:10:58:01:6d:bb:
b6:23:30:9b:65:67:ab:fc:94:9c:25:82:4f:ab:23:
bc:aa:43:58:2c:0b:f1:8f:5e:77:17:28:e6:3c:5f:
98:70:66:4f:28:da:37:1c:25:6e:89:7b:a8:db:79:
d5:e3:0d:68:0c:84:43:48:22:24:e1:f9:1b:f2:3a:
aa:64:1d:03:64:9c:71:3d:61:7b:28:92:1b:01:b6:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:92:61:BD:9C:4F:A5:30:6F:FE:4A:85:65:EA:2D:51:99:86:CF
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:95:87:3a:a9:cf:8f:c9:6b:e3:fe:45:95:39:67:5a:27:a9:
20:49:14:23:c6:67:e0:7c:3c:d5:df:68:cd:72:04:6f:c2:10:
09:b4:17:ff:d4:b2:f8:c0:2b:90:52:3e:a4:9c:58:69:3a:26:
76:4c:7e:f1:f9:bb:e6:2e:e8:7d:4e:1e:33:62:88:a7:a6:47:
35:0d:bc:c9:41:3f:66:29:ea:76:07:c8:43:0b:ad:31:a6:79:
a4:d3:7e:fc:3a:5d:ec:84:bb:13:e2:38:b5:6d:02:e7:01:97:
27:ba:1f:a0:a8:c8:24:26:56:0e:b5:b5:3a:ea:11:6f:1f:d3:
b7:e5:73:cc:fd:c5:d5:cc:1e:a7:d3:a8:7d:00:5a:0e:e3:3c:
25:90:c0:ec:d1:51:7b:1a:1f:96:3d:9a:8e:44:ef:6f:da:46:
1f:5a:35:d5:c1:15:cd:01:2f:2e:69:08:13:81:09:78:ae:65:
e2:08:99:c6:9f:21:d8:ae:46:9e:ad:64:8a:48:02:fb:d5:6e:
bf:39:81:23:49:fb:63:78:d1:75:0d:bd:e6:de:8a:bb:32:27:
3d:b9:ac:58:92:e0:b0:e3:0d:53:15:af:02:4f:a5:e2:0b:0a:
0b:e5:75:d0:bf:a5:19:b3:07:a8:10:c8:00:2b:3b:64:d3:cd:
91:73:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:28:32 2025 by rpki-client