Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: AncXhVXtQsJL2zJkpYrEPMQomDZosd+Dh1Nn8n1e29Q=
Subject key identifier: FA:6D:C1:44:72:2F:11:C2:94:C2:FD:F5:D1:80:C4:77:55:EF:E8:17
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 01974AB155B00CE3D4268DD1508CA715746A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 14:00:25 +0000
Manifest this update: Sat 07 Jun 2025 14:00:25 +0000
Manifest next update: Sun 08 Jun 2025 14:00:25 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: 1HstVxIXiwDkW9JVDeSkcBMyK/ZD9ifoaRHJ9CGhH8U=)
2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:55:b0:0c:e3:d4:26:8d:d1:50:8c:a7:15:74:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Jun 7 14:00:25 2025 GMT
Not After : Jun 8 14:00:25 2025 GMT
Subject: CN=fa6dc144722f11c294c2fdf5d180c47755efe817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:3a:f5:22:12:31:66:27:40:88:01:81:e1:
12:7d:d9:a0:c3:08:8a:43:38:aa:01:26:d2:0e:95:
5e:3e:02:5b:fa:7e:32:a0:c9:7f:77:85:01:94:7c:
5e:17:5f:6e:96:a3:3c:a9:52:84:02:18:9a:74:c8:
e3:1b:0f:c5:6a:91:11:85:ec:ed:84:3e:c3:97:38:
05:e5:bb:49:f1:89:e4:38:9f:84:c2:84:58:36:01:
64:82:75:23:3b:87:d2:7d:d5:9c:ee:fa:fb:0f:84:
ec:f1:35:f1:1a:71:ed:e9:5c:25:fb:b1:05:e1:15:
05:22:59:a9:a5:1e:ea:23:ba:40:d0:a3:45:a4:a9:
1f:34:9c:c2:26:cc:a7:bb:b4:b1:3d:9c:91:58:39:
a0:05:8a:c4:78:b3:13:4c:a9:da:a8:d2:b8:4a:ba:
66:8e:9d:79:e4:cf:e5:6c:6a:2a:7c:20:69:07:80:
17:53:c7:dc:ac:d3:5d:0c:46:28:bd:26:77:42:f0:
0d:8e:db:e1:f3:c9:c6:6a:32:6d:1c:17:b5:cb:4c:
e4:fa:35:bd:e5:d0:4f:df:e8:b8:f9:ed:f4:b5:57:
b7:be:88:78:02:40:63:dc:8f:e5:c1:4d:a0:e8:e5:
8c:12:9c:bf:6d:26:9a:ff:d1:75:4f:2a:49:02:6c:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6D:C1:44:72:2F:11:C2:94:C2:FD:F5:D1:80:C4:77:55:EF:E8:17
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ac:76:9e:d4:2f:08:88:ea:7a:80:63:b2:2e:45:5e:4d:f0:
c8:a3:98:4e:56:cd:f1:05:93:fc:54:a0:67:3a:8c:4a:77:00:
f4:4b:07:3d:9f:72:c1:99:25:57:06:96:45:48:59:e0:c8:70:
47:7b:79:96:ad:22:f5:24:f0:3a:58:df:b1:81:47:53:da:46:
1c:40:60:85:c9:02:6e:a5:cb:34:59:33:8d:0c:03:50:6e:34:
bf:37:44:48:f6:59:2e:28:e4:91:8e:e8:39:6f:1b:13:3e:27:
ea:a0:11:77:3a:d2:80:7b:36:d3:63:87:94:86:24:9f:ab:0b:
92:07:0c:1b:d4:d4:fa:a7:79:83:a8:59:10:b2:b4:35:ab:02:
e9:fd:67:aa:74:70:52:d0:a0:a2:c7:6a:b7:7f:12:78:68:59:
3d:9b:39:6f:40:df:45:f6:94:96:df:e1:14:68:2f:a2:ce:7c:
67:ac:50:9f:a3:97:7e:04:72:5f:cb:e8:6e:2a:6d:47:27:46:
12:bd:ea:74:02:1c:0d:79:58:c5:34:75:a6:57:88:93:bb:ef:
09:a1:ee:9e:03:b3:33:cf:70:5d:88:ad:60:2f:03:3d:a6:f4:
b3:22:4d:5d:19:5e:e0:9a:b2:8b:a2:17:3c:60:42:4c:ac:cc:
bd:bc:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:48:40 2025 by rpki-client