Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: xB0DEUVCwDKvIe2F/sAqFvUJobmpYH+/3mVdRXR5X20=
Subject key identifier: 1A:C9:52:61:E1:FC:35:DA:67:BF:85:6F:67:A1:59:07:7F:4D:B1:51
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 0197474280A457B01E6F4346480138F22C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 22:00:29 +0000
Manifest this update: Fri 06 Jun 2025 22:00:29 +0000
Manifest next update: Sat 07 Jun 2025 22:00:29 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: Q4ZSvZZMghQZyyPe5XQomJbmvLk1N+1WrkKbeVXWtD8=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:80:a4:57:b0:1e:6f:43:46:48:01:38:f2:2c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jun 6 22:00:29 2025 GMT
Not After : Jun 7 22:00:29 2025 GMT
Subject: CN=1ac95261e1fc35da67bf856f67a159077f4db151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:a3:66:75:d7:4e:95:b5:a0:5f:94:dd:b8:
a0:6b:0a:81:6c:61:6f:7a:77:04:dc:c9:25:27:45:
2b:11:e7:f8:5a:74:02:5e:17:65:db:4e:46:7f:86:
13:4e:c1:83:6b:6d:d7:58:f7:7a:ce:5b:63:90:ce:
46:3d:13:84:da:f9:f5:7c:c9:35:b0:43:3c:80:50:
91:4c:a5:48:7b:0a:19:8c:73:7d:54:05:b8:3a:75:
4e:88:77:82:b0:c5:cd:e1:08:dd:b7:c7:08:75:ad:
c2:ba:40:70:d9:7b:74:a3:0a:d2:40:af:36:03:fc:
98:d3:40:63:05:25:cd:0a:37:be:bc:d9:70:4a:ce:
b6:3f:20:7c:91:a6:61:a0:a2:8b:d1:6c:18:c7:c1:
c8:59:b5:6e:87:84:ab:f7:91:9a:0f:a1:0e:01:ce:
56:6d:40:03:3f:d8:6b:f0:09:0f:49:c1:36:02:67:
9a:6f:c8:bc:5f:52:01:c6:a7:0b:20:3b:2d:c9:e5:
18:1b:53:5b:3a:29:32:e9:d7:40:85:54:52:e7:0f:
64:3d:0f:19:bc:69:2d:a1:fe:8e:ee:48:ff:62:e5:
15:68:b2:1d:41:36:4a:01:25:f4:7e:48:8a:a8:b5:
5a:29:5e:30:a2:eb:a6:86:e7:f5:c2:be:de:d7:3a:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C9:52:61:E1:FC:35:DA:67:BF:85:6F:67:A1:59:07:7F:4D:B1:51
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0a:b9:8f:26:e3:39:fa:34:90:43:9c:b8:6d:ba:f4:87:36:
8b:f6:34:c0:a9:06:5d:df:80:1a:65:f3:89:36:de:fb:5b:a0:
21:05:fb:cd:be:1a:ac:19:01:d1:ff:be:91:80:82:e5:ca:f3:
de:7d:d6:04:f9:7a:d2:dc:3f:b3:06:0c:ce:d1:18:96:d2:c3:
38:01:b6:a5:8b:00:1d:dc:f8:7c:c5:2e:e3:5b:71:53:a7:2a:
10:18:da:5b:ae:2e:4b:91:a7:e9:96:16:5a:81:fa:c4:e5:a6:
93:5e:27:d3:93:cd:3e:0a:7e:33:8d:38:37:4c:50:82:5d:b9:
68:5e:66:a3:3e:d5:92:cd:60:b3:aa:6a:58:b1:96:e6:5e:c2:
14:48:c0:63:5b:08:80:39:35:80:94:d2:e9:8d:23:23:4c:75:
6e:eb:b0:6d:4b:7c:b5:61:96:dc:b6:1b:0a:a1:d8:94:2d:07:
e4:cd:2c:9e:f7:d3:6e:4b:2c:67:1c:ab:08:a6:12:1b:41:f8:
7c:85:e6:01:09:88:94:af:9c:58:cf:41:6e:b9:2c:91:52:22:
b0:a9:ae:b5:fb:49:b0:49:d6:f0:e9:a0:89:59:e1:3b:db:23:
de:a7:be:de:7a:97:4e:00:76:5d:f2:f7:1a:e8:86:0b:c7:d5:
e3:49:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:22 2025 by rpki-client