Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: wRI948blMCyPT1yXxm9zMi7rQEueYMKfY2olQjhOYTc=
Subject key identifier: 6A:87:1E:34:C0:7E:BB:78:DD:2F:F7:43:A3:5F:82:B1:53:83:CF:B1
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 0197C8DDBB1A3331171D54734F7205B4F53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 1048
Signing time: Wed 02 Jul 2025 02:01:03 +0000
Manifest this update: Wed 02 Jul 2025 02:01:03 +0000
Manifest next update: Thu 03 Jul 2025 02:01:03 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: 0hn6QMP0OnSNq2cveKTBDrQWiT5+c0JzzLRBLCA2NC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:bb:1a:33:31:17:1d:54:73:4f:72:05:b4:f5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jul 2 02:01:03 2025 GMT
Not After : Jul 3 02:01:03 2025 GMT
Subject: CN=6a871e34c07ebb78dd2ff743a35f82b15383cfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:f0:35:68:49:8d:bc:4d:45:d0:0d:6a:4a:
7d:c8:39:18:0b:df:85:5c:f7:5b:52:40:fa:8d:a3:
51:e3:ab:22:4f:0a:76:b9:36:ae:e1:7f:6e:6b:2e:
dc:18:f2:bd:95:06:bc:fb:6a:1e:4f:7f:88:9f:41:
e0:46:33:78:8a:0b:3d:66:38:62:bd:25:62:ca:7d:
ec:f5:03:29:fa:60:9d:b5:cd:c3:e0:b5:30:88:08:
5b:b3:64:d8:b3:e3:bf:48:18:03:20:4b:06:f0:47:
81:f7:56:79:58:12:00:74:5e:46:be:97:a5:f9:4c:
c1:ad:21:34:e1:db:6c:88:72:52:69:5a:ea:42:cb:
cb:20:e8:fa:b2:d5:6d:c5:5a:d5:84:36:4f:98:5b:
d1:59:06:5d:62:66:3c:58:96:00:97:18:f2:11:bb:
15:63:b2:da:87:07:5f:79:65:6b:87:bd:73:ba:fb:
ae:4e:e7:45:ba:e1:52:5c:ec:72:90:c9:c2:4e:e1:
44:31:c7:da:da:7b:14:ae:5a:bf:39:f8:1f:8d:9c:
0f:67:18:b6:6a:f3:c8:16:31:24:87:78:60:f8:e4:
bb:b7:66:48:5a:0d:ce:15:22:12:82:bb:9a:75:cb:
70:3b:2f:25:20:f5:cc:0a:5c:70:64:59:61:5a:c8:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:87:1E:34:C0:7E:BB:78:DD:2F:F7:43:A3:5F:82:B1:53:83:CF:B1
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3b:0d:d4:f3:44:8a:60:fd:3b:90:aa:72:55:87:95:ae:68:
e0:ba:20:89:4f:a1:f2:18:cc:66:4f:dd:8c:3a:00:df:65:0d:
09:eb:5f:06:86:86:ad:74:97:4d:3d:b3:f2:51:ca:93:af:39:
27:79:2f:5b:14:04:3e:d1:a8:52:30:e8:f1:44:5a:de:29:30:
8b:2e:65:ec:6b:e2:9a:05:42:b7:9b:c8:40:f6:29:e6:ec:35:
42:32:c9:32:eb:45:39:80:d2:e2:5a:18:b2:fc:ba:37:94:50:
71:13:c0:13:a8:8f:53:e8:f1:93:87:69:47:91:8f:bd:d9:1f:
b7:03:70:a2:61:77:6b:17:ae:b0:f4:19:08:76:2c:20:73:c8:
4e:37:2c:7e:ff:26:43:36:ac:5e:30:9f:af:d5:3a:f5:5c:3a:
44:bc:b0:f2:cf:50:c8:11:36:0c:f6:f9:40:b2:50:e8:98:26:
e0:c9:4d:ef:98:f6:a7:61:e0:53:0f:24:58:03:23:20:43:82:
91:78:b4:1b:e4:7c:73:58:44:3a:b4:0d:19:2e:a2:c8:a6:e0:
77:f2:7d:6c:95:16:87:c5:d9:7e:a4:cf:30:48:5d:2b:ac:0c:
9a:df:a8:da:b3:23:18:8b:b5:10:65:6c:7b:a2:01:3e:48:72:
78:d7:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:38:57 2025 by rpki-client