Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
File: aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json)
Hash identifier: InaggKoXVIL1PB+QBTXJPUCUCebHJGAbcTamxZTGULk=
Subject key identifier: DC:DA:4D:A8:D8:C9:F1:40:3C:AE:BC:80:E9:25:17:45:BC:45:43:20
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial: 019748FA4B6D452DDE68C3DE0FD00FC8EB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:00:52 +0000
Manifest this update: Sat 07 Jun 2025 06:00:52 +0000
Manifest next update: Sun 08 Jun 2025 06:00:52 +0000
Files and hashes: 1: QIpPOWuJUQR17x2KgabcF3hdBpY.roa (hash: DGCugI0Fd9+HXtUvL1bfCetCLc7iYLKfDAKTqy9sWJY=)
2: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: UDK2TjSK0uU3uzqhJoI72euCDVLfu5bThh9/9Xt8iVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:4b:6d:45:2d:de:68:c3:de:0f:d0:0f:c8:eb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Validity
Not Before: Jun 7 06:00:52 2025 GMT
Not After : Jun 8 06:00:52 2025 GMT
Subject: CN=dcda4da8d8c9f1403caebc80e9251745bc454320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:dc:db:37:a3:a4:3a:3e:a5:82:78:c0:bc:
30:c9:7b:46:0d:ae:4f:78:17:95:7f:82:8d:b4:6c:
aa:4c:4e:4d:4d:f8:89:40:67:49:d0:35:8f:0d:c8:
63:b4:08:9f:ba:49:ba:98:59:c0:75:36:85:f2:a1:
65:ea:a7:e6:4e:63:38:ef:68:8d:f3:da:1c:74:de:
d0:fe:c0:5c:41:79:d3:fb:f3:10:36:d4:0b:27:ab:
54:b5:15:78:60:fe:07:13:14:c2:dc:ca:42:2b:2a:
25:95:c7:ec:a8:c5:2e:5b:24:44:bc:92:6e:ef:72:
4a:a0:6d:65:3b:24:60:0f:ae:e8:ae:a9:df:15:74:
f6:a9:d0:8d:24:f6:43:39:91:84:3d:a7:44:77:82:
59:6c:cf:76:7b:e9:3f:8b:63:56:de:54:62:c3:12:
be:cf:ca:fe:e4:db:f2:7f:7a:8f:14:52:7b:16:43:
ea:a3:a8:88:a8:d7:86:8b:7d:a8:96:4e:01:56:9a:
b1:38:74:25:64:d9:5e:0a:25:93:68:b7:4b:1a:3f:
c6:8d:46:79:26:fc:27:eb:e6:e5:33:23:21:3c:18:
d2:62:10:79:53:94:b9:99:df:de:b4:65:a3:03:ac:
09:cb:23:17:16:23:77:73:19:cb:c6:f2:0b:f9:df:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DA:4D:A8:D8:C9:F1:40:3C:AE:BC:80:E9:25:17:45:BC:45:43:20
X509v3 Authority Key Identifier:
keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:62:e7:f7:da:27:f6:83:c0:dd:6f:0c:3c:b8:9b:f9:f2:ea:
7a:7a:36:86:4d:38:87:41:77:1a:8e:89:97:20:48:f1:f4:d1:
ce:5c:a1:bf:98:b4:bb:8b:96:6b:c0:ee:52:53:f6:c6:65:95:
26:22:66:d7:5c:e7:71:86:da:d7:69:a0:86:91:6a:98:3c:95:
54:ae:2d:02:5a:2b:a9:45:bc:fc:55:d0:83:1a:1a:e4:14:47:
9d:a4:9a:af:bc:39:2e:bd:2e:44:0a:c3:aa:6a:e3:6d:6f:9a:
4d:84:7b:c1:32:15:a8:1b:1f:59:96:d9:a8:f7:65:39:e0:39:
43:36:39:24:c6:95:fb:f3:d5:de:44:8d:65:3a:89:ac:2a:60:
52:3b:09:54:f1:ae:0b:50:3e:eb:03:c6:f1:68:f1:12:cb:bd:
e9:3b:56:4e:e6:0f:0f:34:01:ac:68:4e:0c:e1:8d:b0:09:0e:
c5:58:d2:33:87:45:f7:61:c1:31:7f:e9:f8:82:d7:67:c6:aa:
cf:44:61:d9:19:de:07:cd:49:f2:6e:a4:cd:2c:9a:7d:d5:14:
13:49:56:cb:63:7d:89:75:de:b9:8d:86:22:bd:f3:2d:2e:dc:
66:8e:f3:5c:f9:a0:4e:f3:a5:3e:dc:c7:b0:28:58:95:3b:8d:
bb:6e:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:35 2025 by rpki-client