Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json)
Hash identifier: sV60wFctvmGBCmD5lMStK1ao8pamxbaFVEqqqr8zpoc=
Subject key identifier: 3B:D2:6E:62:AB:5C:92:2D:0B:E0:C2:48:18:00:80:D6:C7:63:10:14
Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Certificate serial: 0197B8901093352C05769EA6CF99D54A31A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
Manifest number: 1479
Signing time: Sat 28 Jun 2025 22:02:18 +0000
Manifest this update: Sat 28 Jun 2025 22:02:18 +0000
Manifest next update: Sun 29 Jun 2025 22:02:18 +0000
Files and hashes: 1: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: V1TjwfdbQMQYQWJGtgDL4no7LdCA8hrxOs/7VazYuvY=)
2: jkQdp6EX7jHh6f31YxZYZhR0C8U.roa (hash: FmayEZ/+k7yvcImZRXEurVZdNlGpk+kZM2DFLPiqTu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:10:93:35:2c:05:76:9e:a6:cf:99:d5:4a:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Validity
Not Before: Jun 28 22:02:18 2025 GMT
Not After : Jun 29 22:02:18 2025 GMT
Subject: CN=3bd26e62ab5c922d0be0c248180080d6c7631014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:11:f7:33:9e:07:8c:2c:c1:17:b6:94:03:
0d:06:c7:bb:08:fb:d0:de:24:e1:ca:a5:00:02:20:
e2:de:8a:f0:ee:6d:6b:a5:f3:25:1a:ac:1d:9a:fe:
a8:b2:86:a4:d4:9d:95:23:33:2f:c5:ca:a4:70:60:
9c:b1:d1:ef:b2:d0:03:78:69:85:7a:8e:60:d8:b8:
20:10:8d:ac:c8:07:2d:19:bf:5b:8d:7b:2c:dc:b6:
76:5c:03:28:c5:a7:ec:81:52:a6:62:f8:e7:37:b3:
cf:62:b0:8a:20:5d:99:84:38:fe:8f:01:a6:f2:75:
86:e8:73:40:d0:cb:ce:15:c7:16:a4:0a:81:f7:bc:
a1:b8:a8:5d:9e:f8:14:1a:e1:b1:b9:d4:43:dd:59:
36:a2:c7:c6:8d:a3:62:97:0c:d6:09:5b:c3:72:40:
ee:e6:0d:22:4f:d1:21:13:fd:4c:f2:f4:44:e3:53:
a3:9e:76:2c:e0:f7:fd:c7:58:36:51:f2:39:bf:a3:
4e:e2:8f:2c:dd:c5:fb:8c:67:bc:b9:1e:af:9f:17:
e6:1a:d6:a8:d1:f7:76:97:09:e4:fb:02:f5:7c:7c:
30:a7:db:28:4c:f1:f4:54:a0:ec:f2:a2:59:92:f6:
c3:8d:38:75:00:d3:14:d6:7c:f7:9f:0d:2b:76:22:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:6E:62:AB:5C:92:2D:0B:E0:C2:48:18:00:80:D6:C7:63:10:14
X509v3 Authority Key Identifier:
keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:af:cf:7b:88:5a:9e:2a:db:ad:5c:6a:e3:72:73:c0:a7:43:
7c:8a:81:8a:62:cd:ae:ad:a7:3c:22:9c:72:2b:90:85:94:c5:
9d:4b:be:7a:a6:a4:87:5b:5d:f9:d2:20:94:1b:50:91:11:04:
eb:99:31:25:46:46:1e:c7:fb:db:9e:ba:5a:3e:82:83:07:52:
cf:89:c7:e2:0d:93:e4:97:e2:c7:4a:3c:71:7b:49:2a:d5:ad:
ef:75:1e:ac:bc:44:3c:bf:c7:00:a8:6d:15:40:15:be:38:fd:
4f:b5:b8:bc:db:63:d2:48:7b:f6:d1:5d:75:66:60:27:7d:4d:
4e:29:bb:97:31:af:6b:1e:05:dc:e6:3a:fe:8f:2c:12:44:e9:
27:8f:02:d6:38:d3:69:cb:0c:50:1a:c9:f3:df:5d:7b:77:76:
f3:56:61:fe:fe:10:e8:bb:67:18:74:a7:73:57:85:9b:46:6e:
0e:58:ab:81:da:6a:40:bb:c9:f5:e2:a2:b4:75:54:b8:2b:24:
0c:79:b4:85:4c:0f:ae:0d:01:61:ca:dc:d3:91:c7:6d:b9:58:
34:3c:dd:e7:62:ba:fb:3e:c0:7a:b1:82:fa:50:00:8d:15:cf:
01:b5:25:17:ce:2d:22:72:42:eb:6d:4f:64:b1:4c:ad:82:45:
9d:ae:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:25:32 2025 by rpki-client