Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: YKYHI3EaCSk8ExgPGH9BJayGEUARkCy5N+IjiDwXRcw=
Subject key identifier: D7:D1:1B:F2:39:E7:64:4A:06:9D:1F:D8:12:27:F9:4D:7C:33:BD:40
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 0197B88F2C428D0797697DAC14D0B080180D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 0299
Signing time: Sat 28 Jun 2025 22:01:20 +0000
Manifest this update: Sat 28 Jun 2025 22:01:20 +0000
Manifest next update: Sun 29 Jun 2025 22:01:20 +0000
Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: qsOImVS9hWDvR+J6Pk76mkfroyfxvwoY59N+mgGCvkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:2c:42:8d:07:97:69:7d:ac:14:d0:b0:80:18:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Jun 28 22:01:20 2025 GMT
Not After : Jun 29 22:01:20 2025 GMT
Subject: CN=d7d11bf239e7644a069d1fd81227f94d7c33bd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7a:ca:30:40:2d:96:3c:e2:2e:b5:09:a6:1b:
77:e5:cc:5d:54:f1:54:fd:06:d6:f4:1f:c2:79:d5:
83:f5:f5:a7:54:b4:3f:b3:68:68:d5:36:a3:3b:9b:
88:19:a9:81:8e:a2:7c:16:37:92:84:5c:a2:d1:fb:
04:25:ed:ba:cd:af:c3:3c:53:62:79:26:39:1c:b7:
c3:f7:41:79:d4:4a:a7:48:e7:cb:a0:35:78:27:e7:
20:76:49:8c:be:c3:65:0d:4a:37:45:4e:82:d4:9c:
ef:12:6e:08:e7:0f:4b:27:79:8a:c6:f4:18:c1:b4:
a3:97:f9:09:02:c2:05:ba:f8:f4:79:9a:85:86:e4:
6d:7b:5f:14:f0:a3:8d:24:f5:bd:ca:86:0d:50:1b:
3c:7f:01:5c:fe:f0:e2:d0:66:83:69:b6:f6:ba:bf:
a3:8b:bc:1c:e5:a5:2c:23:ae:ac:b1:5a:9f:ae:22:
3e:b5:3e:06:c1:3d:6b:55:16:71:5f:60:43:e6:f6:
62:21:6b:71:5d:be:b3:d6:85:97:92:04:61:a1:5d:
c2:8f:aa:c4:63:e0:3b:70:a1:3f:00:78:ce:80:5c:
a9:21:75:7f:86:9e:ea:09:cd:4d:4d:1e:66:37:27:
05:fe:98:93:81:7a:d0:c0:fe:c4:69:2e:43:43:b6:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D1:1B:F2:39:E7:64:4A:06:9D:1F:D8:12:27:F9:4D:7C:33:BD:40
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4e:d9:3b:8e:9b:ab:70:1c:f9:10:0a:c2:27:55:84:c7:da:
ef:63:a5:5b:1d:39:e4:1d:bb:d5:f0:77:43:9c:99:55:01:6a:
66:08:96:a6:e8:f2:38:03:ac:75:d1:49:55:c2:1d:ba:83:a2:
5a:0c:3e:55:e8:e0:55:db:3b:4d:fc:52:7f:4b:51:89:d1:95:
06:bb:78:0c:ec:2b:cc:20:9f:19:23:ef:dc:33:9f:16:56:3a:
43:94:a9:d4:6a:60:3b:98:4f:f2:91:92:ff:91:31:ce:9a:09:
b9:5f:3e:f2:a0:b6:ee:36:7d:9e:c4:67:7d:81:1a:86:19:6f:
2c:4a:3f:a0:12:eb:a0:85:5b:ac:7b:94:d6:23:b7:e8:d0:61:
8b:bc:c7:5f:b5:d1:db:1a:c7:b5:8b:1c:6f:47:0c:e0:36:22:
0b:bf:fa:06:67:2c:20:e4:72:cb:cc:bc:ee:4b:b4:49:f9:47:
b5:90:25:47:42:22:2e:10:24:d2:23:47:16:44:c8:ad:d6:16:
58:d3:cc:9c:d0:2e:94:bb:bd:cc:a4:9e:c4:1d:b2:8e:bd:26:
e4:a4:dc:52:cf:e7:c4:65:71:0a:41:b6:8b:7f:d3:3a:4d:3b:
a0:ae:72:8c:8b:fa:88:70:98:10:8c:24:6b:5c:02:54:6a:4c:
70:6a:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:03:58 2025 by rpki-client