Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File: AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier: gXymlVhBMCcMD5gx38rSKMm5nmvM/LALunEW5/a0ukE=
Subject key identifier: 1E:6D:60:DE:17:E6:63:AD:61:22:D4:55:C7:03:A2:1E:3D:A7:5A:B1
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 0197B5FBDEEF10A8B7C7FF61D226A28ABCFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number: 0AF0
Signing time: Sat 28 Jun 2025 10:01:12 +0000
Manifest this update: Sat 28 Jun 2025 10:01:12 +0000
Manifest next update: Sun 29 Jun 2025 10:01:12 +0000
Files and hashes: 1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: veteaRK8zmG/TCZzuLMU7eMqtCTppAk61YXcgu7tYqY=)
2: IXB7KzKujGJB9qHSV-0muRiEa80.roa (hash: BqHzdDeRfi2F8mGR+zPLtSwSdgCJjnyKcweTv1mlvB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:de:ef:10:a8:b7:c7:ff:61:d2:26:a2:8a:bc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Jun 28 10:01:12 2025 GMT
Not After : Jun 29 10:01:12 2025 GMT
Subject: CN=1e6d60de17e663ad6122d455c703a21e3da75ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:62:ed:79:78:2c:4a:25:6a:91:b8:14:5f:f0:
de:f8:2c:de:a7:2b:03:6f:aa:0a:8a:ee:75:ff:2f:
e5:7b:5d:55:b4:0c:32:f1:66:97:87:cb:83:f0:23:
0c:f7:4e:74:22:35:21:4f:9a:1e:5b:15:72:ba:52:
c6:cb:f7:1b:9e:76:4f:8d:46:df:44:ca:7b:3e:ce:
b6:9c:69:65:ec:65:93:2a:dc:53:97:fb:43:29:c2:
64:ff:13:f5:13:23:c9:b4:f8:76:ca:00:72:85:b6:
29:03:27:15:56:20:71:ec:fc:52:51:ae:cc:36:70:
08:09:ba:4e:dd:84:76:c2:8b:41:84:37:12:67:18:
69:cc:b9:7b:fd:57:5c:0b:1e:21:b5:d4:13:ce:8e:
cb:57:c5:41:05:19:49:fe:18:b4:6d:b0:f3:a1:b1:
68:72:13:86:16:57:eb:1c:22:c2:25:7a:76:f7:d4:
af:d6:e2:15:a8:46:e5:59:a3:6d:cd:e3:dc:60:11:
bd:9d:a3:2e:6f:0c:31:99:78:f0:73:de:1e:77:bb:
96:02:0b:f3:8c:aa:f8:57:dc:13:ed:85:8a:42:c3:
fb:9b:ad:87:a9:da:ff:58:bf:2c:29:b4:46:fd:b3:
c8:bd:19:06:60:be:9a:eb:fc:c1:a2:b0:a6:45:22:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6D:60:DE:17:E6:63:AD:61:22:D4:55:C7:03:A2:1E:3D:A7:5A:B1
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:10:e0:51:15:15:cc:6b:56:e3:7f:c4:6b:12:8e:49:e8:84:
4f:57:4f:1e:bd:26:2d:ef:66:91:73:82:9b:a4:18:1d:7d:08:
3c:7f:0c:72:0f:bc:ae:80:a4:3e:95:b7:4b:73:2f:b5:5f:0c:
2c:59:b1:71:7c:78:79:ce:7d:8e:66:25:46:ba:12:a5:43:8b:
60:18:55:af:1a:3b:46:eb:53:0c:6f:a7:62:20:34:d2:8a:0b:
8c:cc:ef:61:4c:a8:71:a1:ce:62:60:8c:9b:94:dc:00:30:5d:
b2:ec:7b:97:56:ec:05:be:15:2b:e0:a0:40:8f:96:f3:dc:a2:
2e:9e:e2:31:76:a9:19:58:d4:18:df:fe:a0:56:66:0b:d6:40:
4b:ba:fe:ed:73:dd:40:0b:73:b2:a8:63:ff:c0:8b:08:69:e7:
98:77:fd:96:b0:95:6f:1b:8e:d7:c5:92:3e:bc:1e:e0:da:a0:
d5:06:89:4d:06:19:4d:d4:8e:02:55:bf:b8:d6:18:4a:ea:46:
67:d4:72:c3:b5:33:c1:5e:56:8d:06:84:f2:da:c2:ed:f0:d5:
e7:d3:b9:46:28:bd:cc:b8:26:7a:b3:71:6d:b1:cd:5c:02:d8:
b5:d2:b7:75:cc:df:4e:05:19:1a:ea:7b:e9:6f:76:9b:95:9e:
5a:3a:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:04 2025 by rpki-client