Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: jJ2EF/tDnjrp0pAXmCxQgHttLabbVAEO2fzFv28Yq0Y=
Subject key identifier: 2C:A4:D3:84:D1:4C:7D:AE:EB:82:FA:2D:15:73:C7:E4:09:71:CE:47
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 0197B7EA733833BE2CD68EAAC0FCB960C351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: WOU3payCk0o+Ezyu4pNj6KHxwk+hgP1ya6lCu3CN6Bc=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:73:38:33:be:2c:d6:8e:aa:c0:fc:b9:60:c3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=2ca4d384d14c7daeeb82fa2d1573c7e40971ce47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:da:a2:9d:70:5b:de:6d:43:50:41:db:28:
f3:97:0c:5e:de:c8:22:94:94:10:ff:c4:98:98:09:
89:75:51:96:cf:37:66:f7:a0:c5:52:e9:1f:ed:3a:
e3:ca:bb:b2:9b:dd:00:03:a3:e6:10:cc:94:4f:06:
26:60:94:4e:c5:72:dd:06:2b:35:e2:9f:7b:5d:15:
4c:1e:25:64:7e:33:22:4c:29:c4:2c:99:5b:0a:0a:
cf:ac:41:ad:0e:2f:9e:79:47:8c:f8:14:bf:52:6c:
d1:05:22:ee:98:bd:9b:af:c4:29:ad:38:61:00:96:
fa:18:5e:05:34:04:6c:5b:a1:aa:6d:41:b1:91:65:
e4:18:aa:2d:a7:9a:e6:08:1e:c9:48:c9:fd:f4:19:
3c:63:f1:b5:dc:6a:6d:60:90:2e:d2:16:32:05:c9:
84:42:a4:90:f4:59:44:00:54:78:95:bf:2f:c4:d6:
58:34:2d:2f:0e:44:4a:d3:a2:ea:c0:46:e1:ff:b0:
b6:f4:59:db:ab:20:e6:5c:f0:d3:91:e8:7a:d0:e9:
8a:48:b2:85:68:f1:c8:03:a3:4d:26:b6:25:e8:99:
24:b2:ec:37:f5:25:91:90:c2:0a:7c:0b:a1:db:1b:
33:6b:70:0e:e8:3a:e7:cc:bf:e3:98:41:75:4f:65:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:D3:84:D1:4C:7D:AE:EB:82:FA:2D:15:73:C7:E4:09:71:CE:47
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:82:e6:0f:cf:5e:e9:80:01:25:32:bf:f3:19:fb:08:c3:
ec:17:76:9d:b1:9f:ae:81:fa:2b:d7:14:cf:31:07:32:ca:02:
65:fa:32:ad:a5:c7:b1:8a:84:0b:ed:ac:41:65:4a:be:12:4e:
65:b5:71:99:79:40:13:a3:20:b8:d6:a7:d3:3d:65:3f:58:af:
b7:7d:80:cc:19:83:4d:80:93:1b:1a:d7:84:51:ac:d6:f1:86:
ec:c3:3d:63:b5:9d:d2:66:02:d9:2d:bf:81:84:16:28:a0:07:
90:b4:db:7c:60:2d:ea:4a:68:2c:1e:16:5f:fe:a5:42:53:6b:
33:12:32:56:73:48:67:a7:ae:fc:38:ee:17:ec:57:a4:76:74:
cd:59:c0:aa:41:d9:e5:77:95:57:ce:65:da:e0:0a:31:d0:11:
9e:a4:0f:b3:e6:b7:ce:95:c8:22:db:29:b3:48:a1:5e:4e:f9:
90:67:d1:ea:02:2a:c1:2b:ab:98:1c:ca:84:07:ff:ab:45:83:
e5:a6:47:aa:30:8c:0e:1e:8f:bb:9f:df:cf:d8:4b:63:69:c2:
a6:72:ca:73:31:9b:b0:f2:7e:fd:b3:49:fc:91:ed:fa:e0:14:
31:9d:67:cf:1b:17:a9:42:8c:ed:a3:dc:e6:af:d9:bf:5f:93:
63:ee:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:24 2025 by rpki-client