Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: PhBKeDfD/JtWhbchlGRz26nKwFG8HNlIer83DwTe0kE=
Subject key identifier: AC:3E:43:64:21:56:81:07:27:AB:DE:69:6C:D4:C2:D9:90:F4:78:54
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 0197B6A1D4FF05D7BBFA003A4971B2D7D696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: ERpdJ34tjFGF/645FRLVJQ9AybvOCvx2nYtAD9CfKpQ=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d4:ff:05:d7:bb:fa:00:3a:49:71:b2:d7:d6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=ac3e43642156810727abde696cd4c2d990f47854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1d:21:4a:b3:88:02:82:c0:cc:b9:b9:2a:4f:
58:e4:66:bb:8a:cf:8d:9a:f3:28:ee:0a:75:34:79:
e9:ee:1b:2a:00:8c:b7:45:8f:4c:47:86:b3:c6:42:
2d:7d:ee:57:35:3f:7c:c3:cd:ee:8e:e9:0c:9b:6f:
22:31:e5:63:35:3d:3b:70:2a:26:9d:a4:57:f0:c3:
d5:3c:15:c7:91:e4:f3:79:34:02:c4:d4:22:c1:c6:
7b:9f:5c:24:0b:c3:6c:08:ec:9a:a7:78:b8:10:5d:
b5:70:76:fa:2a:22:8c:85:7f:f4:af:46:88:1d:4d:
c9:59:05:65:c7:fa:55:87:28:4d:a9:93:be:46:87:
7b:5b:18:16:95:e8:9b:b1:c2:73:b1:27:a0:b5:a8:
89:15:2e:ca:f5:81:7c:fa:e4:8b:8b:94:0d:d2:a3:
c5:b6:ef:d2:ed:ff:0a:53:92:d3:37:92:46:9d:d4:
49:d4:76:6c:12:78:89:52:af:bc:e1:7c:43:5b:f5:
02:22:29:c9:07:f9:21:52:04:8d:01:ba:7c:51:c0:
11:37:8d:44:b4:00:56:d6:dd:15:a7:23:00:00:ea:
2d:8c:6c:c9:ff:58:7b:03:78:fe:87:dc:ca:3d:51:
5c:be:8d:80:d4:df:9e:a3:a9:85:ed:b1:8a:7b:97:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3E:43:64:21:56:81:07:27:AB:DE:69:6C:D4:C2:D9:90:F4:78:54
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:46:50:2a:0d:cd:62:6b:1b:7c:ac:5a:ab:3d:fa:4e:4a:8f:
15:6d:cb:28:32:8d:63:aa:9b:46:a4:a2:38:22:29:28:32:f2:
93:92:79:f5:7b:4f:70:ff:3e:62:65:ac:20:d4:6f:ae:25:d8:
c3:8f:77:de:97:7e:fd:bf:21:ac:db:77:3b:d9:6e:ac:0a:a9:
5b:31:59:8d:b7:66:3c:3b:c8:c5:84:3f:84:f7:8a:a6:ad:be:
85:db:bf:a7:c8:c0:e0:2f:0d:b2:30:7a:a2:48:bf:d1:c9:61:
57:85:c0:87:9d:c2:91:5f:86:b6:a7:da:d9:b0:4c:93:23:0b:
6e:2e:16:60:7e:17:9b:4b:77:40:86:75:a6:18:76:b9:71:d1:
df:fe:15:a3:e1:c8:8d:c3:2c:45:b2:c6:56:a1:91:79:7e:ec:
ef:23:9f:66:e9:39:cc:83:7a:a7:2b:75:b3:a7:8d:25:ce:52:
03:cb:9a:fa:f5:44:d7:fa:14:ac:16:6e:29:e5:84:57:e8:6b:
80:ec:dc:c2:eb:a1:7d:05:a9:c2:cb:ae:5d:66:f1:91:3a:39:
18:03:6c:a3:d0:52:be:44:22:fd:d7:a9:7e:59:3e:70:cf:6a:
20:15:d9:0a:21:ed:2b:dc:fa:b2:09:8d:e7:37:32:9d:1a:92:
2b:bb:ce:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:41 2025 by rpki-client