Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: 7ep0e3k7BNSGpizI9rLrExQghNgW+0ZjgOl8DaGDAWM=
Subject key identifier: 2A:A8:BF:53:24:43:A2:1E:B5:E0:C9:21:9C:68:60:A1:6F:85:4F:F5
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 0197D0CDFE301B8AC18EB97B584CF8B88529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 13BE
Signing time: Thu 03 Jul 2025 15:00:50 +0000
Manifest this update: Thu 03 Jul 2025 15:00:50 +0000
Manifest next update: Fri 04 Jul 2025 15:00:50 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: VzRa8HCG0jKVMCFaGIyFAODdlrd9gEQOt7iQchGduu4=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:cd:fe:30:1b:8a:c1:8e:b9:7b:58:4c:f8:b8:85:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jul 3 15:00:50 2025 GMT
Not After : Jul 4 15:00:50 2025 GMT
Subject: CN=2aa8bf532443a21eb5e0c9219c6860a16f854ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:88:f6:6f:d9:bc:7f:cb:f6:02:25:bf:9e:
b7:65:c7:1c:92:81:f2:96:ad:23:26:2f:5e:f9:19:
3c:76:a5:ae:45:24:86:14:a1:00:36:8e:e2:87:d1:
0e:29:64:00:bb:01:26:40:2a:34:e3:c4:83:13:41:
1b:d4:d7:ff:6e:9d:1b:7e:e8:36:f7:a0:07:6a:c3:
e1:15:b4:4d:1f:16:0c:10:45:06:68:0c:e6:d0:89:
7f:e8:8c:e4:6d:a2:56:63:4d:1b:ff:0e:e1:c5:b5:
67:83:be:93:f7:55:f8:01:25:3e:75:e1:10:04:e8:
2f:5e:96:2f:73:52:55:5f:87:69:3a:ab:97:ad:05:
d1:67:b6:89:06:0f:75:e2:58:c6:18:d6:cc:e4:87:
ab:ae:d9:0e:0f:46:ff:c1:bc:01:27:38:18:7e:b4:
22:77:8b:f3:7f:3c:17:ae:69:c5:a0:ff:6f:2e:bf:
03:47:64:e6:73:5e:18:02:5f:ff:cc:34:b4:01:bd:
86:20:98:4b:52:94:2d:e1:55:01:98:c8:23:29:d7:
ff:ed:31:4a:e0:4e:e3:02:9e:20:db:62:b0:73:4a:
cd:33:25:3f:71:70:ca:08:53:cc:4c:d9:4e:23:48:
2f:a4:77:cd:29:7b:e9:fb:eb:7b:b2:2e:43:cc:b8:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A8:BF:53:24:43:A2:1E:B5:E0:C9:21:9C:68:60:A1:6F:85:4F:F5
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:33:40:3a:2c:43:92:51:38:52:66:7c:77:5b:06:75:50:d2:
59:ef:0a:c7:1f:80:6a:7b:15:23:e2:7e:ce:9f:82:2d:e6:06:
98:36:73:05:bf:68:3d:6f:6e:e6:4a:09:42:d7:79:b7:b2:9c:
fc:ab:ce:d4:e8:21:37:b0:d7:d6:aa:6e:56:94:9f:88:5f:fc:
00:3d:9c:3f:4d:d7:cf:fa:b8:b7:37:d0:31:7d:a9:bb:6f:0a:
6b:b9:04:88:e8:5d:37:4a:91:35:80:ef:d0:82:1c:ad:5b:11:
27:ec:39:5c:e8:5b:d5:17:9b:99:80:df:1d:e7:5f:bb:bd:f5:
94:f4:d7:6f:c5:40:05:85:b4:c5:00:d7:f4:46:47:ec:ec:65:
35:30:6a:12:2c:a1:91:11:8f:df:ff:25:29:3a:2c:40:94:65:
0e:e0:99:1d:42:ac:51:42:18:bb:1b:59:03:5f:7b:5b:48:d0:
7a:b9:fc:ae:85:20:c3:e5:6d:e4:c7:36:df:1a:b8:24:af:e1:
35:39:15:0c:b4:d2:98:4e:24:58:cd:85:87:7f:db:ae:c2:90:
7d:ac:7a:43:dc:54:e9:34:fc:7e:40:80:86:9e:c3:8d:8d:b0:
47:da:e9:63:7f:57:2a:60:50:8c:6b:c0:d9:f0:58:89:d2:0c:
ff:5a:a3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:23:33 2025 by rpki-client