Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: RElVyzr+nhvODplKenEqHL1wn7796qMlinbAj67AWt0=
Subject key identifier: BC:07:DD:7C:18:03:F8:59:24:07:82:8D:7A:09:EE:ED:29:9B:DD:E4
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 019749313B203955A2DBB9DDC5872E08975C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 1213
Signing time: Sat 07 Jun 2025 07:00:52 +0000
Manifest this update: Sat 07 Jun 2025 07:00:52 +0000
Manifest next update: Sun 08 Jun 2025 07:00:52 +0000
Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: ggU8kPM19aH6E/ocG2IJy3evb65x5XQp/2DhPqktnTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3b:20:39:55:a2:db:b9:dd:c5:87:2e:08:97:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Jun 7 07:00:52 2025 GMT
Not After : Jun 8 07:00:52 2025 GMT
Subject: CN=bc07dd7c1803f8592407828d7a09eeed299bdde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:05:4c:20:3f:91:10:80:82:d3:14:31:e3:
ae:32:97:06:d8:1c:fa:bc:87:06:b3:57:a6:be:80:
b8:1f:4c:b7:16:d6:3e:14:73:41:4f:3d:64:1e:85:
2b:14:d8:85:92:2f:b6:d4:5d:d4:24:80:3f:fa:ba:
3d:35:09:43:2b:ef:54:c2:d7:14:c6:94:a9:0e:71:
f3:4d:86:c4:16:62:28:94:1c:54:e4:cb:e1:ec:02:
25:24:ca:ac:f1:a4:13:11:03:11:42:76:80:3b:e6:
7c:64:f8:0e:71:b7:cd:e4:c6:b6:d8:3f:64:9a:7c:
ff:d2:61:e4:d4:e3:a1:ca:e3:88:a2:f6:f8:d9:ed:
07:c1:90:0a:f4:ee:14:5a:b6:e7:a6:98:29:c9:11:
77:ac:25:c1:d7:23:be:0d:7a:e8:fd:30:ce:d7:ee:
51:9f:b8:cc:d4:a2:28:41:50:fc:05:a6:09:28:d2:
c7:fd:c4:80:1e:a6:8d:e4:81:5f:0b:b3:ae:8a:c7:
65:88:ba:77:84:6e:7f:32:c9:44:81:d4:ac:88:06:
25:a0:49:22:5d:80:47:14:25:a4:bc:4d:67:93:f4:
08:e2:9c:c1:9c:55:58:e4:04:32:b1:0c:af:c9:45:
7b:8d:3d:1a:c3:b7:fc:31:80:6b:c7:27:8b:82:f7:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:DD:7C:18:03:F8:59:24:07:82:8D:7A:09:EE:ED:29:9B:DD:E4
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:00:05:b2:16:0a:25:f7:61:85:da:49:65:e3:0c:cc:02:66:
77:c1:06:34:15:e1:e4:ce:ce:88:04:9d:cd:97:5c:37:d1:9c:
6d:74:19:3a:a5:1a:06:f8:78:5c:65:c8:ce:5a:9c:4c:8e:07:
75:e5:41:d6:59:67:40:5c:18:96:38:f4:21:e8:7d:db:6c:88:
75:59:82:e9:03:72:cb:22:53:a8:08:83:ed:18:d9:67:ea:7b:
1a:0e:10:a1:4b:e7:78:a0:01:ad:de:af:06:c6:1f:b5:98:30:
ce:84:80:4f:87:9f:65:9c:af:43:a2:a2:f9:17:ac:b7:64:65:
3b:81:65:77:9f:0a:71:53:53:63:b8:a8:03:8d:31:05:d2:3f:
8b:8c:37:4b:6a:c8:23:62:7b:c2:16:5d:75:d2:a1:ec:c0:1f:
73:f7:cd:7a:b2:86:0e:cc:42:9f:05:23:aa:6b:b1:fe:73:fa:
9d:7f:a0:6f:90:d2:68:9d:56:0f:7b:00:1a:79:03:7d:96:c5:
94:5e:fd:6c:6d:14:d1:79:4c:22:2a:e3:d5:74:b7:41:a9:69:
7b:34:32:0f:dc:09:b5:34:a0:ac:a9:d0:cb:bd:4e:d3:4e:9c:
53:4c:7b:83:32:73:dd:cd:07:fc:62:75:90:1b:07:8e:ec:19:
1f:c9:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:53 2025 by rpki-client