Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: D5I8ilQvr59r/POVupv4sKys74Z4ttBzd2TMnbB+xPc=
Subject key identifier: 78:92:00:84:38:39:81:7F:3D:2A:E8:54:28:52:3E:5F:19:54:E3:BD
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 0197499EEE526724C2D4189431B6F7F573D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 09:00:41 +0000
Manifest this update: Sat 07 Jun 2025 09:00:41 +0000
Manifest next update: Sun 08 Jun 2025 09:00:41 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: 958BIKB85p0C4ZuUVIPjwdv34pjpQKOKGCIgYY6HtaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:ee:52:67:24:c2:d4:18:94:31:b6:f7:f5:73:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Jun 7 09:00:41 2025 GMT
Not After : Jun 8 09:00:41 2025 GMT
Subject: CN=789200843839817f3d2ae85428523e5f1954e3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:eb:32:42:59:dd:80:3b:15:e9:9d:81:3d:
82:0b:6b:b6:ef:8b:47:1f:d2:20:79:fa:55:b7:e3:
b9:a5:21:9d:94:6c:09:4c:6c:d3:b1:b9:35:4a:d9:
44:1c:a1:ff:e7:93:28:99:fc:0e:65:50:29:8a:1e:
80:de:d8:12:f6:1f:46:f4:28:fa:fd:3b:85:f9:82:
cf:a7:56:a2:78:6c:9c:e9:24:b4:55:74:d7:4d:06:
f8:87:0b:90:a8:a6:23:4a:90:a8:6a:80:23:5b:ed:
e0:e6:46:e5:f6:2b:9c:cb:c6:ec:c3:b3:ac:2a:da:
eb:9d:7e:62:91:da:6d:f7:74:04:9b:d3:2c:a3:f3:
a1:17:62:fc:af:d1:77:b1:df:e5:21:04:9a:92:fe:
48:b2:07:c2:30:ba:c0:fa:45:02:8e:e1:b6:1e:62:
16:af:cd:bc:6d:5c:dd:23:5e:ad:88:c5:40:1f:2a:
d8:b5:89:b4:13:4a:f1:79:d2:ce:77:9b:a8:07:ba:
30:49:a1:d3:3c:44:36:29:7b:3a:9f:e8:da:f0:04:
11:84:01:01:f1:82:21:37:46:5c:ee:44:70:22:4a:
4d:f7:b4:bc:21:de:14:18:fd:e5:a9:f3:9a:eb:4a:
79:0b:c9:e6:99:6a:a2:a3:f5:4a:c7:a0:db:c3:d4:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:92:00:84:38:39:81:7F:3D:2A:E8:54:28:52:3E:5F:19:54:E3:BD
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a5:46:55:db:9b:2a:85:03:cd:ae:a9:a8:76:c2:05:54:4b:
b4:b8:9d:99:23:2a:07:88:8f:ba:e6:24:eb:0c:f3:76:bd:66:
3b:b8:b9:4e:95:f3:ab:a9:ec:11:9f:6b:aa:a2:72:1c:4f:6f:
16:31:dd:85:98:6d:ff:24:3a:79:56:5d:dc:11:d3:07:d0:a9:
23:3c:47:77:8c:f2:66:ef:ae:19:dd:33:71:98:e5:e4:4f:47:
35:83:70:a0:db:6b:43:6d:ec:95:53:37:2c:f8:b3:78:05:25:
ca:55:ef:a9:d2:5e:75:06:a2:fe:94:0c:a2:5d:61:32:f6:41:
b1:c4:3c:78:11:01:9e:6a:3a:6e:3a:94:a7:ef:86:ce:a4:c0:
fc:27:49:84:43:fb:f4:8a:b1:c6:d4:d2:ab:57:72:2b:5b:8f:
a5:7d:7e:21:15:f3:84:a4:74:27:6f:67:b6:03:fc:ac:b2:34:
ec:e0:0f:20:0c:be:c3:b0:ae:5e:b8:df:b3:4f:5f:ef:a4:9a:
14:c7:0e:7a:cb:22:38:c0:84:18:1f:7f:a2:30:c1:ea:d2:3f:
1c:0d:6f:7e:ed:1d:c5:32:8a:07:df:a3:8a:44:f1:52:21:83:
d0:af:f1:63:46:ce:1b:e9:23:b8:ad:96:26:0f:a4:53:1b:e2:
37:72:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:05 2025 by rpki-client