Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier: WHCHtEFOIlbrYGETrgYnXl5qi02rqVP8xYPK4OpK4VY=
Subject key identifier: 12:6B:AA:67:EF:1B:1A:3E:A0:3E:66:44:90:53:F7:51:E7:60:E0:A4
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial: 0197458B666B870F6DC7AB0318FD81931D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number: 88
Signing time: Fri 06 Jun 2025 14:00:52 +0000
Manifest this update: Fri 06 Jun 2025 14:00:52 +0000
Manifest next update: Sat 07 Jun 2025 14:00:52 +0000
Files and hashes: 1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=)
2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: QWss3/tFIS12eNKKrlzdSBp7r3EYLfrAV29zKUXxqpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:66:6b:87:0f:6d:c7:ab:03:18:fd:81:93:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Validity
Not Before: Jun 6 14:00:52 2025 GMT
Not After : Jun 7 14:00:52 2025 GMT
Subject: CN=126baa67ef1b1a3ea03e66449053f751e760e0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:20:1e:4f:4a:ad:82:60:99:03:7c:d5:c4:
69:43:53:49:2c:89:d2:cc:59:f3:5a:ac:32:7a:47:
61:ea:6d:65:d4:ff:72:f1:58:4f:b1:92:58:6f:de:
54:c7:83:e8:6d:73:bf:6f:b8:03:31:da:97:c5:58:
fc:22:04:80:72:6d:74:5c:91:f3:67:50:50:1c:02:
40:db:6c:33:0b:79:ed:82:e4:e0:47:27:84:0c:a8:
06:90:9e:4f:4a:31:cf:f3:fd:fe:d7:d5:66:c0:dc:
cf:39:e9:7a:a8:33:fd:48:63:66:25:35:22:7b:04:
6d:74:f9:12:a7:e9:98:f7:4b:c4:97:98:ed:ba:ca:
d5:87:46:b5:6d:22:66:c2:02:32:1a:a3:50:89:f8:
c2:72:c8:35:d9:dc:ab:fd:fd:5c:27:50:96:03:4a:
56:67:19:8f:a1:6c:8c:6b:28:85:c3:07:2d:10:4e:
08:98:a1:41:63:49:de:f3:64:44:8f:da:c7:4e:d4:
37:6d:6a:13:9b:39:c4:a4:a6:4e:ff:d5:6c:35:39:
6d:7b:f4:31:f6:0d:77:a6:77:9c:9c:01:ce:02:04:
6f:f4:61:84:8b:9b:f9:b6:5f:a0:5e:12:a0:ba:dd:
cf:c5:59:ff:0b:12:1c:5c:6d:b6:22:e3:f9:78:70:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6B:AA:67:EF:1B:1A:3E:A0:3E:66:44:90:53:F7:51:E7:60:E0:A4
X509v3 Authority Key Identifier:
keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:88:b2:66:57:7e:06:3c:d6:96:4c:11:7e:51:b2:b9:40:ff:
38:d3:de:40:c2:65:c7:3d:1e:d7:be:53:2a:a3:07:50:cc:80:
76:0d:94:a7:11:af:2b:1a:19:78:58:a8:e7:8c:32:fa:8c:6f:
9c:05:55:97:83:86:98:6e:23:3b:e0:01:a7:55:d3:6e:27:fb:
98:02:a2:d9:74:b9:e7:66:d7:56:b8:61:2d:50:32:b8:e4:73:
52:a8:99:fa:14:89:61:15:65:9f:6b:21:a2:5d:c0:6b:6c:58:
72:98:65:ed:2a:36:85:65:8b:ff:38:48:5c:bd:5b:64:fb:99:
50:8f:3f:ce:94:40:f7:b3:9c:63:ae:53:10:cb:70:ab:a8:61:
da:94:e9:9f:89:1c:0a:33:28:aa:02:16:76:3f:80:ae:2c:16:
85:4f:03:1a:6b:87:1a:6f:37:1d:39:7b:7e:5e:61:6d:ad:a9:
77:f4:e7:3d:4f:0b:8d:16:aa:e0:ae:d5:9f:99:cd:15:f6:7f:
bb:2d:ce:56:0d:68:3c:d8:1c:80:6e:00:c1:55:82:a9:cf:65:
ab:24:af:cf:37:71:8a:6d:9b:90:90:9e:a6:2b:97:69:83:bc:
d1:1f:13:fb:34:a5:28:84:c3:51:10:b2:76:33:af:f8:80:8b:
9f:1d:32:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:25 2025 by rpki-client