Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json)
Hash identifier: 59ZSxo61PsayPCGcloY1Zats/U9NAm9vNw92qkDTIW8=
Subject key identifier: 86:9D:A7:FD:C0:59:39:B7:BD:CE:52:D7:5A:BE:9D:EA:F7:8D:FC:4A
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 0197B6A18BE1FB235F82552214826530E142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
Manifest number: 0956
Signing time: Sat 28 Jun 2025 13:02:09 +0000
Manifest this update: Sat 28 Jun 2025 13:02:09 +0000
Manifest next update: Sun 29 Jun 2025 13:02:09 +0000
Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: pfdqUPrE+UY0CwSqTrikNIwDt1HDYhTy7+qZrJWwy98=)
2: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (hash: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8b:e1:fb:23:5f:82:55:22:14:82:65:30:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: Jun 28 13:02:09 2025 GMT
Not After : Jun 29 13:02:09 2025 GMT
Subject: CN=869da7fdc05939b7bdce52d75abe9deaf78dfc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:66:6c:b5:5d:69:b6:a8:15:18:94:e6:da:
58:77:47:e6:a8:47:18:a4:26:e8:3c:da:e4:51:08:
24:5d:6a:81:96:a7:c3:1c:8d:07:2d:5f:22:b1:c6:
fc:a4:38:c1:ce:a0:64:6f:68:7f:ae:a5:ab:d7:63:
4e:5d:d6:35:7c:de:20:fb:69:0c:59:e1:fb:54:cd:
2d:e7:37:29:b7:39:64:96:fa:4d:7e:a2:51:42:e0:
b4:b6:b2:a9:92:04:78:79:cd:e2:c5:5c:4e:e2:2f:
7d:e9:65:41:c1:74:76:bf:97:09:e5:51:8a:e9:83:
22:1d:70:31:11:0c:d9:ee:30:99:46:d2:b3:44:9e:
a1:ff:ad:5a:84:0b:a7:54:14:f4:b4:31:db:89:b1:
6d:07:a8:1c:f4:83:d3:a8:fe:17:4c:f6:06:a6:22:
0f:1f:39:b9:0c:6d:c3:3a:1f:97:0b:af:68:a3:bc:
97:3f:43:a6:5d:a2:dc:2d:02:3c:4c:60:ea:cf:c8:
7e:ef:9d:4c:fb:88:05:d0:70:4d:77:91:e6:81:9c:
a5:bd:d3:26:e4:48:e0:82:20:51:aa:6a:43:f6:22:
b5:09:f1:3a:fa:8e:fc:47:56:24:6d:ea:26:d4:16:
24:9b:b3:56:f2:7c:59:6f:9c:f0:9b:48:4a:71:94:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:A7:FD:C0:59:39:B7:BD:CE:52:D7:5A:BE:9D:EA:F7:8D:FC:4A
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5d:c4:25:ae:e0:8d:4e:fb:fe:e4:75:8a:02:6c:56:1d:7e:
09:3d:d4:9b:cf:13:be:ee:fe:c2:c0:65:63:87:36:6f:0d:5a:
93:14:ce:e3:1c:a3:8f:ba:51:6a:c5:c3:80:33:c9:47:2d:cd:
2b:99:37:b2:85:ab:4a:99:d8:24:43:76:65:55:d8:d5:4e:88:
6d:3c:85:3f:22:41:0b:55:75:84:af:38:a9:fb:96:6f:79:8a:
d4:fc:0d:61:3a:c4:b6:1b:e0:67:d1:35:47:19:6a:31:50:24:
1b:46:e1:12:a9:c6:f1:73:92:72:ad:1a:73:3c:82:46:e1:06:
c2:96:9a:74:0f:ad:9c:57:77:ac:53:54:6d:11:e3:0d:bd:b1:
0e:87:70:be:2f:7c:fa:42:ac:9a:62:90:c4:57:cf:db:a7:bd:
07:47:ed:ba:e0:a8:ef:2f:23:f4:d6:f3:cc:2c:38:fd:5c:b8:
b4:b6:f7:42:e1:73:22:66:ea:5c:ad:ec:aa:f4:2a:aa:94:d6:
ab:4b:bf:bf:d0:2b:94:bd:7e:88:0c:b3:54:c1:d1:75:fd:fe:
70:02:7f:7d:0c:4c:1a:0c:d3:46:3c:31:63:ec:e5:c6:35:11:
c2:4d:e2:2b:84:50:ea:d0:44:8c:dd:78:fe:c0:2a:74:75:dc:
2a:21:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:34 2025 by rpki-client