Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: /o75XiDMSmVDOaf2kqXRz2tUV6lVbQA+z3mAM0Zue80=
Subject key identifier: BD:00:45:F4:2B:55:CB:CA:25:1C:6B:8F:17:25:5C:CE:76:3D:3B:DE
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 0197B6A239992690D546C41382F91A8DD910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0CD1
Signing time: Sat 28 Jun 2025 13:02:54 +0000
Manifest this update: Sat 28 Jun 2025 13:02:54 +0000
Manifest next update: Sun 29 Jun 2025 13:02:54 +0000
Files and hashes: 1: Hk8OntQ5zqlTFn040DQPSldzYiE.roa (hash: KP+8WLsncYNj0fRydYrCKf8Ah12qAHLXgrBdfpvlTN0=)
2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: HNQVX72ww0OikAk2Xpfva4XIqLqIZc22mKbGUZzJf8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:39:99:26:90:d5:46:c4:13:82:f9:1a:8d:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Jun 28 13:02:54 2025 GMT
Not After : Jun 29 13:02:54 2025 GMT
Subject: CN=bd0045f42b55cbca251c6b8f17255cce763d3bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:09:d9:67:eb:21:30:af:c6:9c:21:7c:32:
2f:0a:15:a5:be:72:54:21:e1:5b:82:46:ea:df:07:
d9:18:23:57:44:4f:1f:0c:bf:e9:20:5f:29:a9:fd:
f7:b2:34:d7:14:23:06:9f:a1:a7:67:2b:75:6f:f3:
62:f3:d5:48:21:de:d0:93:5c:61:fd:9c:de:ba:25:
88:12:6e:b0:07:5a:ca:a6:92:c8:ad:f9:6f:4c:8e:
cd:65:3d:e9:36:40:50:50:61:5c:69:29:6f:a1:31:
7b:31:28:c9:45:8a:11:8d:0f:e9:eb:7d:94:5d:e8:
63:fc:73:0c:1d:98:12:4a:0e:9d:f1:ae:b9:a1:75:
f9:2a:41:2f:97:31:8a:37:69:eb:4f:50:72:e4:44:
80:4a:ee:54:63:e3:1b:16:cd:75:8d:1a:bc:f7:18:
5a:09:5c:1a:54:57:69:00:39:0e:16:54:4c:26:2f:
66:7d:49:e5:a5:89:4c:0a:fb:6b:8d:be:f7:5e:20:
44:06:0a:21:df:44:3a:ea:ae:c7:bf:6a:42:3d:7e:
be:95:98:c3:20:c4:4f:02:d7:fe:99:b2:b8:3f:26:
05:0b:80:01:4d:61:63:c2:85:36:d2:3c:bd:7b:05:
e6:ab:73:e5:a4:55:ef:f3:83:f7:c0:30:81:a1:7f:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:00:45:F4:2B:55:CB:CA:25:1C:6B:8F:17:25:5C:CE:76:3D:3B:DE
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c5:65:2c:fc:ff:3f:26:8c:52:42:a9:da:1f:48:03:13:24:
5c:a4:47:fe:ea:1d:af:ec:0b:82:0b:2e:f6:e8:a9:57:b4:52:
dc:8c:53:7f:f7:94:71:74:ca:35:ca:4b:b5:c5:8e:6e:27:14:
d9:ff:6e:5d:52:60:c0:9b:18:15:4d:d9:af:c4:c4:27:3b:c9:
e4:83:33:11:35:a3:49:31:f4:f8:14:54:7f:1b:44:11:b2:44:
d2:90:85:6c:f7:ce:da:d5:3e:38:99:94:10:2a:68:47:68:e1:
5d:8a:a7:ba:53:b6:da:12:21:4c:51:9e:39:4e:31:6b:c1:38:
8a:07:5b:6d:13:91:11:da:1b:dc:63:e9:df:26:ac:20:d2:0d:
c1:19:2f:85:3a:80:d6:a1:ac:d4:b5:41:88:a4:90:73:a1:bf:
37:0c:0b:fe:db:a9:ec:60:c1:e4:46:c4:9a:23:4e:b5:4b:16:
8d:8c:52:e4:28:9a:1f:d9:76:f9:ae:0b:57:5e:63:22:d8:cd:
f0:43:41:73:38:86:fb:bd:5f:76:3e:5e:d8:f8:76:43:a1:a6:
7d:c5:ef:cf:7e:4b:40:1e:dd:5c:66:d6:b6:52:b7:a2:ee:f2:
e1:07:d5:d9:48:ca:08:86:fc:a5:77:1b:04:1d:96:76:af:e8:
9c:c0:0e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:59 2025 by rpki-client