Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: 3KoX2hiw61nfOJnn+JEM8DpGhTyI8OSoTkQlPBtu418=
Subject key identifier: E0:1F:B2:6F:3F:8B:48:79:11:DB:DF:65:47:97:10:A2:74:6B:41:5C
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 01974A437881C476A6316167A73B6440E7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 12:00:25 +0000
Manifest this update: Sat 07 Jun 2025 12:00:25 +0000
Manifest next update: Sun 08 Jun 2025 12:00:25 +0000
Files and hashes: 1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: xZeJ5wytAq6qg3C3MMb3qRINs1Q3NN44wNcUSRX7mKA=)
2: koGXGlmTeestynS-D79F1iRgKe8.roa (hash: t/wGg6Ba4t68swMex8wPDhVXcBtDTQUAFrp4xf0H+oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:78:81:c4:76:a6:31:61:67:a7:3b:64:40:e7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Jun 7 12:00:25 2025 GMT
Not After : Jun 8 12:00:25 2025 GMT
Subject: CN=e01fb26f3f8b487911dbdf65479710a2746b415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:6d:7e:4a:29:c5:3e:9e:62:1e:e3:83:e9:
0b:4f:1c:0d:c5:f7:fa:9b:db:44:5c:d4:4b:35:04:
38:5c:90:5e:62:cc:c8:aa:f7:40:3f:84:8d:be:a2:
a1:6a:f3:12:6c:68:77:4d:ee:fb:34:65:81:21:a8:
3b:e6:ac:88:34:78:86:4d:bf:ea:54:c9:3c:36:0f:
af:a6:ee:af:5e:d6:0e:d5:be:11:86:73:0f:35:dc:
dd:46:80:ae:31:02:46:1d:fa:5e:21:ea:2b:c0:0d:
4b:1a:cf:89:80:4c:f6:4f:a9:f5:17:13:57:fb:4b:
aa:49:a2:6f:8a:59:5b:b8:5b:15:9c:50:a6:2b:c9:
b3:e9:3b:4a:0b:a9:ea:8e:0f:95:e0:58:b8:9d:c4:
42:28:9e:82:b2:cc:64:3f:d7:01:d9:e4:14:3d:fa:
2c:2e:1e:a3:25:66:d8:e2:58:42:1c:82:a9:05:6b:
d6:00:b0:1a:35:15:b2:ee:bd:50:59:e9:c2:e1:96:
ed:23:97:f6:af:5e:1f:ac:ee:40:d3:a1:69:24:56:
73:97:f0:f2:1f:d0:a8:10:74:44:3c:9a:4c:0c:2f:
93:ad:47:9b:66:69:49:51:ac:a4:fb:8d:e0:99:34:
1f:06:13:fa:7a:fd:d6:54:a8:eb:14:24:bb:4b:f5:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:B2:6F:3F:8B:48:79:11:DB:DF:65:47:97:10:A2:74:6B:41:5C
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a3:b8:3a:8d:42:bc:ef:58:df:3a:23:7b:44:97:99:57:51:
64:10:47:33:4b:e7:bb:37:4f:f4:73:40:ed:c7:c3:29:e3:18:
2b:3a:cf:8f:c2:3a:85:54:9f:08:bb:34:79:5e:e6:9f:6d:b4:
01:b4:1b:95:b0:f9:d5:db:e4:a0:ef:06:26:81:62:34:f7:8d:
b4:d3:90:34:ea:2c:ad:7c:34:0e:9e:38:b7:97:41:8f:0b:e1:
2f:e8:a7:72:25:a3:8a:20:5a:a9:4d:88:cb:cd:bc:ef:60:d8:
77:c9:fe:67:78:cc:98:c0:1a:7f:99:22:41:0b:04:0a:d1:1a:
84:73:2a:2c:ed:9e:be:a5:fd:73:24:31:62:23:04:6e:84:f0:
01:94:dd:76:35:ac:a6:c0:1b:cb:1e:36:0c:b0:27:7f:ac:e8:
cc:22:5d:ee:90:6a:70:70:73:93:78:4c:de:91:c4:14:26:66:
35:98:c5:39:76:84:19:4b:f2:62:d3:cb:8d:7d:9a:0f:e8:bb:
8c:77:f9:7a:c7:bf:78:5c:f0:9b:8d:06:6d:47:3d:8c:a2:e8:
45:20:fc:14:a9:c0:72:67:ed:32:83:1f:07:54:b3:dd:85:99:
e6:af:97:a4:cf:07:aa:fc:99:6f:16:28:a8:fd:0f:e7:cc:9a:
85:da:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:09:44 2025 by rpki-client