Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: 6WXWgnXfFmNf9vCALDcWkIe/FbJ1688nE3p6VPlhfRI=
Subject key identifier: B4:9F:CC:54:BA:80:37:59:30:D4:F6:B6:70:C2:49:40:4B:5D:EE:61
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 01976A3C7351C925CA14E9E273705BA6FAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0D03
Signing time: Fri 13 Jun 2025 17:00:35 +0000
Manifest this update: Fri 13 Jun 2025 17:00:35 +0000
Manifest next update: Sat 14 Jun 2025 17:00:35 +0000
Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: q+TEncOcOF5tEg2RV1/9u2Y+PUnuweYlsxw+f1Q+1po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:73:51:c9:25:ca:14:e9:e2:73:70:5b:a6:fa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Jun 13 17:00:35 2025 GMT
Not After : Jun 14 17:00:35 2025 GMT
Subject: CN=b49fcc54ba80375930d4f6b670c249404b5dee61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:08:83:1a:bc:a3:8f:77:8f:93:fe:72:c7:
9e:0d:4d:fb:b2:ee:94:31:5c:5b:bb:61:3f:65:3c:
f0:8a:19:82:c6:9d:37:51:94:9f:57:2d:51:ca:4e:
7a:83:3c:03:14:08:9a:a9:de:28:d8:eb:4e:76:b6:
b1:6b:cd:3f:e7:10:1b:69:d1:91:c0:ca:76:2c:9a:
6d:e3:3d:70:5c:b6:70:3e:85:ae:6d:10:db:76:9a:
48:46:70:8d:b0:77:2a:67:de:dc:fd:d3:c9:c8:c5:
8b:0b:46:39:de:74:9b:36:32:cf:55:69:5f:22:91:
e7:3a:8b:f7:70:b1:61:f7:c2:58:c2:d3:b2:11:cc:
a9:86:67:3b:ec:35:9e:fa:03:1a:63:8c:d5:a2:21:
8a:ac:66:15:c3:65:52:b4:ff:10:99:4d:79:2a:60:
ef:42:45:f7:6f:28:20:76:da:3e:c6:40:c8:7b:57:
6b:ba:24:ba:c8:f2:b8:67:53:c4:4c:92:7e:ea:a7:
71:09:d1:ed:84:f2:96:2e:b2:b1:df:d9:cf:e0:69:
2a:69:6c:90:0e:d6:03:47:59:9b:30:cb:60:a2:22:
41:d0:1d:cd:4c:f6:d0:b0:95:d1:73:29:c4:14:99:
b8:7c:f9:4d:55:4f:e5:eb:0d:de:d6:99:7a:ab:e9:
c5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:CC:54:BA:80:37:59:30:D4:F6:B6:70:C2:49:40:4B:5D:EE:61
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4f:fd:7c:e4:f2:88:b3:48:2a:c1:52:5f:87:d9:c4:50:5a:
45:62:05:bc:4a:e1:87:91:b8:36:59:2f:11:6c:f8:6f:7e:80:
57:de:62:6f:8a:eb:c7:17:0f:a2:a3:35:30:62:a2:16:11:a3:
8e:57:9b:47:a7:cb:5e:55:d5:60:bd:b9:77:7e:97:66:82:c5:
e2:74:cb:f0:08:01:ae:ea:84:4e:34:54:1c:14:a2:dd:a6:4a:
0b:9b:77:df:d7:d4:1a:2e:a5:6b:b8:e9:9e:3b:ae:6f:e8:8f:
a3:db:99:d6:47:b1:f4:73:91:ef:d8:48:a9:1c:ed:34:53:20:
89:ed:8c:f5:85:b8:cf:e9:0f:bd:d8:a3:1d:b5:71:d5:d8:77:
b3:8e:b6:c6:0b:be:3a:13:85:04:2c:c4:4e:46:5f:b3:fb:58:
54:eb:b6:d0:0d:1c:55:ca:6a:f4:a0:af:aa:ca:00:ed:53:28:
e8:39:10:c6:76:d3:09:4c:39:1c:a9:d1:66:08:7f:0c:3f:25:
9a:6d:f5:e0:8e:23:66:5e:48:5c:0f:8f:70:63:ff:16:88:52:
20:32:09:eb:cb:eb:42:c7:37:ca:8c:70:eb:a5:0e:1a:cc:03:
56:bf:9e:f3:c4:50:58:e0:24:de:13:7c:bc:ee:8b:ac:d4:a4:
18:a2:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:24:36 2025 by rpki-client