Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: 4ZrYeWOX55HFDyGspgDg6MTQK54BjaHBDeMLlrmdm8I=
Subject key identifier: 19:52:F6:09:ED:91:DE:17:2E:E3:84:40:24:C8:F9:84:17:22:82:77
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 01974967DA2BEB69D870E9AC7F639E6C2387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 08:00:32 +0000
Manifest this update: Sat 07 Jun 2025 08:00:32 +0000
Manifest next update: Sun 08 Jun 2025 08:00:32 +0000
Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: BfF6jgIRrP7gZGw6l1vzfOLoGa4Bo025SRKF7u8MK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:da:2b:eb:69:d8:70:e9:ac:7f:63:9e:6c:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Jun 7 08:00:32 2025 GMT
Not After : Jun 8 08:00:32 2025 GMT
Subject: CN=1952f609ed91de172ee3844024c8f98417228277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:55:84:c6:59:37:07:c6:87:92:bd:6e:b8:
c4:21:55:79:58:ed:ed:d3:5e:6d:46:a4:79:59:5b:
a4:df:98:ad:b0:5a:61:67:a5:fa:f2:1d:e6:55:f0:
1d:f6:fe:aa:41:07:bd:06:6f:6f:e8:a2:5f:9a:3a:
18:ee:8e:95:29:a6:d7:4b:4f:08:40:29:5f:3f:6e:
fa:70:9e:26:c2:25:1e:82:9d:56:c1:9b:b6:f3:bf:
46:5f:e6:2f:a4:f7:73:56:d8:59:c3:18:8c:5a:8a:
04:15:67:22:bd:c5:7d:0d:5b:a3:43:58:c5:c9:1a:
d1:66:95:9d:30:72:86:fe:ab:9d:c7:7f:75:39:0e:
3a:c7:15:fe:7e:0a:ac:ab:ca:c6:6e:07:1a:c6:0f:
6f:5a:40:c4:02:52:2e:e5:46:34:a3:37:48:b2:ad:
2b:d4:dd:55:2a:7c:c2:7d:9f:83:53:08:f1:71:69:
91:e1:7c:1f:0d:19:76:51:d9:95:5d:2b:d9:c6:84:
f4:38:69:45:4f:4c:66:ad:2e:4a:e2:c8:1a:df:b4:
5a:cf:47:8d:3f:b5:26:28:40:c2:15:a1:01:82:16:
47:ba:da:6e:58:61:3c:cb:d5:6d:01:46:5e:19:48:
8f:c5:89:b0:39:69:53:74:79:22:90:34:b7:fd:e9:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:52:F6:09:ED:91:DE:17:2E:E3:84:40:24:C8:F9:84:17:22:82:77
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bc:d3:86:1a:9f:6e:2d:da:2b:2c:70:f0:ba:88:87:f0:ae:
78:7b:60:ed:49:09:2e:90:2e:38:4d:39:62:24:d3:4e:9a:4c:
7f:6a:2c:a3:64:12:0e:9e:91:86:c1:c8:1b:7b:13:8f:ac:25:
9a:e5:a4:c4:f5:d4:e5:0f:82:50:77:3f:3e:a4:a5:a1:8c:b1:
63:58:18:ba:b5:da:de:d8:78:dc:0b:21:6d:f2:08:3f:4f:d0:
4b:8b:24:80:b3:38:c8:c5:9e:b3:c4:ab:bb:05:2f:14:ed:06:
b6:da:a4:f1:9d:60:4b:c4:6f:0e:7f:0f:33:81:ad:54:1c:e0:
d7:b0:4c:4d:60:b7:a7:2e:33:90:96:7c:eb:e9:4e:7b:87:42:
c9:de:f0:f1:70:99:8f:b6:5c:62:08:ca:fe:6d:bd:6b:c3:45:
d3:bc:45:62:49:7b:03:fa:06:bf:9c:3f:4a:2e:48:dc:7b:19:
16:1d:f5:c2:8a:f8:42:05:c0:ed:a2:a0:4f:1b:94:90:d1:fc:
b8:79:b3:bd:33:99:be:b4:5e:34:64:7c:86:29:b4:ff:82:2a:
70:9d:2f:82:4a:35:4e:c8:e2:8a:f8:db:71:70:a8:e8:a9:38:
34:57:0b:d3:b8:a6:f5:e9:65:bc:be:38:8b:18:d4:d9:65:c9:
c1:3a:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:33:46 2025 by rpki-client