Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: uuIzfANO60d053+ejZdhoB9JZvp8pWhx7czDXLvJPlY=
Subject key identifier: 0E:9A:D1:AB:10:33:1C:A3:65:65:08:25:24:58:8E:C1:7F:94:C3:81
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 0197B70E572FFB89B01910CE83189B571C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: qfFqbzbYGLzzZtk0gpRGxfjuLshCu/Z5OdnCrmJr7z8=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:57:2f:fb:89:b0:19:10:ce:83:18:9b:57:1c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=0e9ad1ab10331ca36565082524588ec17f94c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:53:21:1c:ca:01:77:8f:d1:f0:02:ba:53:
de:c7:1c:77:82:3f:50:a2:d2:24:8d:ef:21:18:e1:
90:08:8a:c6:e8:1b:b1:d1:cf:08:d4:55:4b:cd:3d:
a0:5b:d4:00:7c:67:f5:d3:33:ce:80:ea:d8:35:b8:
63:a6:bf:9a:29:4d:c8:81:7e:0c:b2:22:22:9d:d1:
6e:4d:8d:0e:40:36:4a:04:0d:cb:c9:66:f8:bc:35:
d3:1d:ba:a8:ca:7f:b0:b0:ef:3b:4f:75:62:ad:3d:
7f:8d:db:4f:2a:2d:aa:70:88:e4:17:3e:93:d0:57:
d0:42:ab:db:4e:9d:b2:c5:e3:b4:ab:de:1c:c5:45:
2a:66:fb:49:6e:e9:06:fc:3b:36:5d:e0:1d:7d:f2:
28:a5:ea:9e:c7:48:d0:cb:e8:9a:44:d3:df:3e:56:
73:51:0c:10:bf:65:6d:97:5c:a2:0b:ac:48:ee:f6:
3f:90:e4:07:bc:fc:4f:6c:8f:f5:43:c2:71:88:e3:
80:0c:e3:a9:b5:f2:fa:4b:87:6b:5e:20:a5:e5:ea:
5d:a4:e0:fb:22:33:69:f5:43:0e:1c:cf:6e:85:c5:
e1:ff:47:6c:18:bd:2f:f5:62:88:71:cd:8f:02:ee:
a9:ce:f1:61:5f:2e:d5:7e:d5:55:a1:28:fb:c7:ce:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9A:D1:AB:10:33:1C:A3:65:65:08:25:24:58:8E:C1:7F:94:C3:81
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:33:f3:ee:40:78:42:c5:35:36:59:5f:80:6b:a1:6e:4b:16:
1f:63:db:5f:26:0a:51:60:b1:18:42:8c:9a:0a:dc:e9:01:81:
02:6d:e1:db:42:0a:1d:6b:6f:e0:63:c7:c8:01:51:d8:13:73:
e4:18:99:c6:4c:95:7d:4a:39:39:59:17:98:a5:b3:f5:d6:1a:
5e:6b:df:9c:17:b0:84:02:85:29:4f:93:e4:ea:05:7b:1e:60:
8d:12:67:ca:5e:28:1f:02:c3:32:0f:1f:3b:68:a4:75:77:63:
45:ba:94:0a:b4:6f:1b:14:d5:75:ed:c6:d6:67:11:87:a2:35:
63:3a:ce:14:68:5a:f4:af:a7:ec:22:73:7c:d8:e5:d9:e4:4a:
60:12:04:9c:48:7d:3a:76:f0:e7:30:45:b3:98:5c:b0:23:68:
d4:6f:ef:e2:16:bb:d3:3a:39:68:80:fd:8d:a9:a0:a4:d1:39:
03:ea:19:86:ce:d6:fe:b8:b6:ef:4d:1f:bb:68:76:a6:dd:29:
c5:02:79:f7:d3:29:63:a5:cb:a6:fd:0d:e5:39:bb:a9:ec:f8:
d5:e2:94:e1:a8:4f:86:c3:53:2e:f7:06:e8:ef:b3:f3:90:81:
57:ab:e7:30:4e:54:46:6a:14:db:d4:0c:5a:6d:4d:9b:53:cd:
23:3a:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:47 2025 by rpki-client