Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: 30WfQiBLHqM7eYCW2ZztzPwoD8a9/3zX6l5EangoBBo=
Subject key identifier: D4:2B:FF:67:FC:4D:6B:E6:C1:7F:B2:1E:7D:DB:6F:CF:9B:D0:BD:0C
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 019747E79A61707398226FC38FD955E2F1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 01:00:50 +0000
Manifest this update: Sat 07 Jun 2025 01:00:50 +0000
Manifest next update: Sun 08 Jun 2025 01:00:50 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: NGx5lssr7gr//obQU4N9ntfjJqnVRdZZ8FlWPLXJMBc=)
2: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (hash: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:9a:61:70:73:98:22:6f:c3:8f:d9:55:e2:f1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Jun 7 01:00:50 2025 GMT
Not After : Jun 8 01:00:50 2025 GMT
Subject: CN=d42bff67fc4d6be6c17fb21e7ddb6fcf9bd0bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e8:cb:3f:c6:fb:d6:12:94:4a:74:e3:97:c3:
8a:01:b1:1f:ef:07:e4:c5:b0:87:f1:0d:fc:f0:62:
22:1e:97:bc:fc:ad:94:57:a3:d3:da:34:4c:40:1a:
e0:5b:0a:9a:1a:19:fd:97:46:b5:28:22:10:bc:4a:
86:e9:d2:2c:9d:97:62:99:fe:41:0e:ef:bb:12:06:
85:7c:13:99:66:7d:bf:ce:09:c8:9a:90:cc:86:8d:
39:6b:32:54:02:60:b0:7e:67:c0:2d:28:74:c6:17:
bd:bd:43:7e:9f:1b:50:25:1c:6b:1c:7c:50:af:06:
af:4e:6c:bb:5b:6f:c6:a1:5f:1d:1b:f2:de:91:32:
ea:fc:a5:4f:70:71:f8:a1:32:0c:05:d2:5e:a1:d2:
19:8f:ac:50:40:0f:08:7f:af:d7:c3:5a:3e:78:56:
21:23:c2:82:18:82:17:9d:76:13:71:a7:1f:f4:9e:
3b:53:62:55:b8:e7:91:fd:2b:17:72:55:d3:d5:e1:
e1:40:02:27:3a:0d:82:00:3f:26:95:22:c2:d0:3a:
4a:73:0c:ba:68:04:96:bb:fc:51:38:93:fd:26:73:
49:82:8c:ff:7c:30:b6:06:4d:38:e1:9e:3e:f8:5c:
55:20:49:25:1a:fe:7c:68:27:ee:7d:b5:05:66:43:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2B:FF:67:FC:4D:6B:E6:C1:7F:B2:1E:7D:DB:6F:CF:9B:D0:BD:0C
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:83:6e:55:c3:a3:02:55:5d:89:19:6e:a8:f7:87:5d:69:27:
e9:59:b1:fc:82:ef:0b:c7:5e:ec:cb:8d:2c:bc:64:cd:c5:3b:
66:34:ff:37:e1:77:48:76:76:65:94:43:d6:77:ff:ff:e4:f9:
91:ba:47:90:d5:88:8f:67:37:b1:de:08:90:13:69:d5:b2:77:
44:14:b9:1e:8a:9b:df:88:e2:d5:f3:3b:54:17:5b:5e:49:c8:
68:57:ed:e4:01:3d:c9:61:9a:ce:26:07:68:c8:fb:12:7c:dd:
a2:17:69:82:04:97:bd:0a:47:de:c4:9b:f9:69:e0:85:da:02:
3b:ba:19:8f:66:22:f0:e9:06:e2:33:5d:bc:e5:5b:61:be:7c:
6a:ee:1e:0d:71:ad:34:e8:25:6a:ab:e2:40:0c:38:eb:74:00:
c3:f5:ad:b0:15:88:c7:e0:9f:54:ad:fc:25:6e:f0:7b:f6:13:
81:c4:07:22:55:03:a8:4a:57:04:30:f0:9c:ee:3a:de:25:8f:
b7:43:93:1a:f5:28:2a:24:d3:13:8a:4b:e0:a7:75:81:19:d5:
32:1a:e9:95:77:3a:1f:a6:7c:e4:e8:6b:31:30:ce:79:be:df:
75:aa:4e:c8:6d:eb:f7:6a:8a:61:cf:2c:cd:61:d1:a9:88:01:
d0:b4:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:17 2025 by rpki-client