Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier: QjQrGO6u6p5BMU8uFycKKxteG2Lhg2Ll8NYYNd7EcAo=
Subject key identifier: 1C:DE:2F:0A:52:35:E8:5C:D2:2E:76:91:69:95:86:67:F5:C5:A6:93
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial: 01974B1F3198B59ABBCFC894E06A2B08E4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 16:00:24 +0000
Manifest this update: Sat 07 Jun 2025 16:00:24 +0000
Manifest next update: Sun 08 Jun 2025 16:00:24 +0000
Files and hashes: 1: Al5XA-JtcwQZgxg8lrEchelWFKc.roa (hash: awq0OKEpSlRcquvq5uS+1UqeIOS4jFcQD5+W9s9X3Ag=)
2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: /tDhr+bFT+Sa1s1b1mlgKavoxojae8OgSoxpYbuTzUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:31:98:b5:9a:bb:cf:c8:94:e0:6a:2b:08:e4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
Validity
Not Before: Jun 7 16:00:24 2025 GMT
Not After : Jun 8 16:00:24 2025 GMT
Subject: CN=1cde2f0a5235e85cd22e769169958667f5c5a693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:11:e0:33:78:8a:c3:c3:aa:35:0c:22:b5:
89:04:06:38:d8:7e:6d:2c:b7:6e:c6:31:8d:1c:31:
42:ec:4c:3f:f0:3c:6c:ae:59:b6:af:5b:23:49:51:
c8:2a:28:32:2a:3b:32:39:25:ed:1a:f6:c1:f0:3d:
bc:73:b5:45:18:b9:6d:9e:f9:bd:eb:65:c1:90:ab:
79:32:7c:a7:30:6f:4a:5d:3e:f7:ac:07:08:1e:19:
8b:60:c7:ba:48:1a:8d:57:4c:9b:a7:4e:27:73:ea:
21:9f:a4:3f:87:3e:b6:ef:3c:cf:55:0d:24:9f:f7:
94:ec:b9:eb:50:18:98:f4:26:64:4f:fa:14:73:49:
f5:4d:53:8d:ea:02:47:0c:94:41:fa:cd:f9:e8:94:
7d:cc:d7:c1:bf:db:9a:5d:38:2b:ee:ae:4d:c4:3c:
cc:dd:cf:b7:63:42:b3:60:1c:78:59:d5:5a:2c:89:
97:e6:8e:40:f2:37:b1:54:e4:1a:99:3e:6f:56:c7:
20:a0:04:b8:02:da:2e:23:39:95:f1:b4:20:2f:86:
65:b2:bb:1f:65:5a:82:d4:29:dc:9a:c7:d6:c4:08:
9d:d2:e5:9d:00:50:b1:71:21:9e:dc:dc:1a:e5:6f:
6e:9d:9d:80:f5:c6:fb:7e:26:c3:98:94:7f:54:97:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:2F:0A:52:35:E8:5C:D2:2E:76:91:69:95:86:67:F5:C5:A6:93
X509v3 Authority Key Identifier:
keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a3:73:23:6a:7e:4d:1c:d7:9c:9a:93:58:3f:40:44:71:ba:
f5:a7:dc:10:3e:68:61:3a:99:e3:ff:f3:00:60:ec:64:5f:46:
90:22:fe:0a:1e:2b:0a:14:2b:2b:2b:ed:3d:9e:1e:2c:90:f5:
94:65:9d:5a:46:e2:f1:8c:cd:cd:49:40:27:f4:73:c4:d1:88:
92:fb:30:96:f8:92:e4:98:b1:7f:9d:88:19:1a:09:79:d0:77:
42:f1:07:3f:a3:f2:ae:b7:a4:9d:28:83:5c:18:1a:63:0a:36:
6d:5a:c5:44:92:75:ac:1d:ce:21:3c:61:8c:bc:cc:e7:aa:f2:
59:0a:11:a9:6e:b6:4f:eb:c8:5c:86:28:8a:cc:31:f2:7e:fd:
2c:f3:f5:21:68:ce:02:ee:28:f9:7c:c3:f6:41:e1:80:68:63:
62:85:f1:1b:96:81:43:18:ad:80:94:ed:19:3e:83:fa:76:9a:
ee:fd:b6:18:c7:80:cb:df:86:5d:ac:00:fa:b9:ea:c3:54:1a:
3e:1e:76:95:f0:82:b5:b6:67:e6:df:16:e0:b6:49:de:be:86:
c4:c1:a7:ae:9a:e4:b4:57:5d:49:ac:cc:4d:13:54:70:0d:0d:
24:3c:fd:9f:81:0f:00:06:ae:7e:72:f6:62:5a:e2:c2:b0:dc:
85:6c:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:18 2025 by rpki-client