Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: UlfXtrgFfsIlj8qiMj+o/aiYhdLkgLykV1BXtqDqo5c=
Subject key identifier: F4:56:53:AE:C1:62:D6:97:3B:3E:63:98:B6:66:87:FB:B8:4A:36:39
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 0197B6A1FE93A591FCEB0466AAB6B39408F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 0E9D
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: ZqGSmLDkgTHocnnWwo1cC5mhY+1OnHTUxEp1zbgo0Yo=)
2: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (hash: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fe:93:a5:91:fc:eb:04:66:aa:b6:b3:94:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=f45653aec162d6973b3e6398b66687fbb84a3639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:f5:be:cc:9c:83:d0:68:f6:d8:a8:0f:45:
c5:c9:b2:ab:d5:ce:69:e7:36:2f:fa:7f:60:5a:8e:
a6:2f:51:e8:5d:db:07:7e:b5:cf:af:f6:61:d0:53:
6a:f0:72:65:7a:1a:53:39:24:6a:dd:4c:2a:cb:0d:
75:7f:34:1f:9b:36:96:17:5d:f5:a8:5e:4e:db:8e:
ea:90:70:1f:0b:5b:b5:84:5c:27:92:e3:eb:82:90:
a9:fa:9b:e1:df:d0:0d:ac:e3:68:c4:61:72:a2:82:
7a:54:2f:1f:28:9f:0b:00:54:47:bf:00:dc:e7:61:
dc:4d:02:4d:1d:5a:95:59:6c:86:38:df:5a:77:5b:
68:ab:db:ea:60:65:67:f0:92:a7:bb:a4:ef:b6:31:
9f:aa:4a:ff:58:23:8a:2d:55:0f:31:8d:5a:d4:0d:
be:31:8b:6e:9e:53:62:1a:95:84:0d:17:38:32:fb:
0c:a6:21:66:96:c2:76:ca:b8:ce:75:8e:78:ca:a2:
ab:ed:58:62:8e:ab:b2:a7:5d:af:e0:57:54:bb:e7:
28:c2:48:bc:61:61:63:86:92:a3:1a:e3:9a:a9:63:
28:93:93:11:7d:9e:26:a3:41:e7:dd:c4:8e:83:b4:
d6:9f:64:60:a1:e7:2d:f8:e8:02:62:0a:c8:93:e1:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:53:AE:C1:62:D6:97:3B:3E:63:98:B6:66:87:FB:B8:4A:36:39
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2f:2d:d9:c1:90:63:b9:07:22:f9:8c:9e:87:9c:ae:19:29:
e9:1e:0c:1f:03:a4:b4:00:ae:57:eb:d7:83:8f:d5:c0:b0:d4:
f8:af:27:f7:70:61:96:d8:30:61:d8:bd:0e:65:43:a6:39:f8:
21:50:ba:76:6e:69:05:52:e2:c7:fc:1f:9b:be:6a:2c:12:fa:
e5:ee:7c:c6:bf:6b:e8:27:a0:40:24:72:cc:bc:e6:c5:e1:60:
3f:c9:21:96:55:6e:2f:49:2f:a8:08:16:94:81:92:d2:b0:b5:
a1:9c:68:9b:c6:77:f5:90:95:8c:20:d1:49:f5:6c:5f:a0:60:
9e:ba:65:d4:5b:22:b6:20:7a:6b:ad:47:de:81:66:d9:eb:78:
0e:e8:eb:2d:9d:c8:e2:eb:a4:04:58:70:50:a9:d5:b5:59:5e:
57:b9:53:a2:8a:86:7b:e7:66:00:b4:9c:d2:d7:84:d7:64:38:
ae:0c:68:8d:bf:8c:ca:1b:1f:58:6e:7c:50:6a:ce:44:73:f5:
ed:ce:30:f8:25:c4:a8:70:51:cf:40:c3:4a:e5:74:cb:ac:da:
53:76:7c:ab:3f:93:c5:ca:0b:ea:70:4e:24:5d:d5:96:63:18:
ea:26:5d:df:c0:70:2b:5b:55:87:94:6b:3d:62:f9:86:08:95:
fd:53:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:25:13 2025 by rpki-client