Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: z/XzF0vM6VclL9V4UXu7LdcxZNs6JxbZzt4jUBY5DZY=
Subject key identifier: 53:7E:65:1C:C2:51:16:61:61:50:41:62:94:2E:94:2F:41:47:6E:B4
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 0197B77C3F56DBA27C0F03936E049214C2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 0209
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: afHtZH7LvKZDE/d1C10392zByPj/vNmNoJk0tjQJ9xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3f:56:db:a2:7c:0f:03:93:6e:04:92:14:c2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=537e651cc251166161504162942e942f41476eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:4c:29:49:ba:fe:84:c5:3c:f6:f4:8b:55:
80:2f:e1:56:ae:0a:68:80:97:02:8f:e6:78:f5:13:
78:f1:a7:15:e0:2e:5c:1c:9a:1b:29:1c:b3:7e:92:
6f:c9:e6:e4:00:ac:9b:2c:e0:38:b5:eb:d4:a0:fb:
53:d3:93:3a:c6:19:9e:07:c8:80:48:2f:0f:27:f7:
1e:39:88:ef:98:fd:fc:02:49:df:c8:2e:37:c8:d5:
97:bf:bd:65:5b:3f:6e:a0:94:f9:48:83:af:ce:0d:
13:10:20:60:73:d4:e1:f9:31:fb:82:c8:1d:12:dc:
a5:13:ba:7f:13:44:a0:bc:09:9f:11:3e:59:c4:8d:
48:f0:7d:5f:84:d1:21:f6:d3:ad:35:97:89:84:25:
dc:21:f4:02:f7:45:e2:66:e1:12:84:f4:69:9d:b2:
18:75:d4:94:94:0d:b2:70:46:c0:18:4d:8e:52:6b:
24:76:c5:8f:1c:7b:04:01:6a:7a:cb:6d:93:15:01:
b9:39:aa:7c:4d:c8:39:8f:26:89:ae:bf:55:70:37:
97:a1:d2:1d:67:9e:6f:15:ce:08:62:9e:29:c7:5c:
f3:16:4a:ff:03:eb:9b:da:d8:13:f7:64:4c:45:ce:
76:8c:7a:48:ab:b3:b2:13:13:d4:3a:b4:32:7f:59:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7E:65:1C:C2:51:16:61:61:50:41:62:94:2E:94:2F:41:47:6E:B4
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:61:09:6a:34:bf:61:b1:4c:c9:d2:37:27:82:4c:38:b4:43:
0a:d0:de:d9:ff:72:25:f5:bf:19:b2:35:f0:f4:92:d7:fc:97:
51:7c:5f:09:7e:c0:3b:53:d7:a0:ee:ac:16:6c:9e:67:3e:02:
cd:63:2f:08:7a:c0:b7:3d:64:23:d5:14:3a:3d:ee:aa:4a:75:
c1:96:30:00:5d:13:a4:83:46:87:2a:bb:2c:46:ba:ac:fb:53:
9a:26:e9:9a:cf:eb:2e:0f:7c:0e:81:7c:e0:6f:96:b4:78:90:
ed:bf:39:06:d0:17:44:3a:17:c4:b1:5c:4c:81:a0:55:4c:50:
d9:8d:e8:b1:04:5c:04:5b:af:d4:5d:0e:e2:4a:07:e4:24:f3:
32:d5:7a:43:2f:5c:17:06:42:3d:dc:1d:77:a7:cc:46:26:0f:
bd:2a:4b:1a:4b:78:06:53:99:bb:4e:2a:10:ed:70:96:db:7c:
0a:64:86:06:04:d7:06:a4:8c:a4:ca:26:c3:fe:47:c2:00:fb:
48:9a:5d:8b:20:c6:88:e8:ad:7b:12:9c:38:57:58:81:9b:6b:
3a:ac:5b:34:4f:68:8a:7a:54:da:b2:b1:3a:3f:23:c2:d0:a0:
d2:be:fa:4c:6b:86:d4:0d:28:3b:45:10:be:3d:7f:08:9f:dc:
d0:e6:69:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:03 2025 by rpki-client