Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
File: aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft (raw, json)
Hash identifier: 6FXXuDniy/66RxfaOTwQ5xzVAVUcQdNsv6s6QjV7+eE=
Subject key identifier: B5:E0:BF:20:13:29:54:F0:2F:38:99:E1:64:F5:A7:50:B4:DC:C7:43
Authority key identifier: 69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
Certificate issuer: /CN=6987d0047fb1d8912c63f911305a714f438b1e71
Certificate serial: 0197B70EEA4C57BC0A77BF156EF579284E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: Atkr4h8_-iWKS-lQ1C-yvRl84ME.roa (hash: 2T7HRH5eHvmAemXfiDHO7EMODqi7SWlhFBBbiZ8y44c=)
2: aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl (hash: RQcSJSBI9Bo4FQz9Y7wWxUiZ1Ex4F4W6Gaocwh6OPkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ea:4c:57:bc:0a:77:bf:15:6e:f5:79:28:4e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d0047fb1d8912c63f911305a714f438b1e71
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=b5e0bf20132954f02f3899e164f5a750b4dcc743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:9e:9c:69:5d:56:3f:87:15:44:7e:41:5c:
2f:0a:a3:ee:4c:f3:32:87:11:ac:e6:d6:95:f9:88:
61:3a:54:da:2b:cc:2d:27:ec:76:44:15:be:dc:e0:
b5:92:fe:51:1a:df:8e:df:97:bb:f3:cc:a0:dc:5b:
9b:30:e7:b0:09:61:49:f1:7c:03:76:c9:0f:27:99:
8b:59:7d:a6:5e:35:e4:7e:e6:2c:21:77:e1:90:3d:
3d:0c:4c:c8:68:a5:4f:96:1c:af:bd:1b:83:9e:ba:
b8:40:27:1e:2e:9a:79:dc:29:99:d3:90:90:4c:2c:
44:1f:19:e9:8f:a6:1f:36:56:4d:c0:57:a5:c3:dc:
cb:b2:32:07:47:b2:ba:fe:8f:fc:bf:dd:ea:93:55:
60:26:87:26:4f:e0:30:51:63:f0:0a:25:31:2a:73:
fc:d9:00:59:02:e5:ae:bd:1b:5f:67:6e:d2:bb:38:
4d:e2:ab:de:b1:d0:6d:7f:b1:97:4c:8c:dc:c9:e3:
f1:25:9f:de:46:84:95:43:dd:24:43:6a:72:81:d1:
2d:a2:55:f3:c4:76:eb:e5:8f:cc:b9:7a:23:5e:60:
86:49:32:01:f3:2d:4f:a0:e8:de:88:10:88:20:d1:
4e:1b:b8:ef:dc:82:73:f3:e4:aa:ac:51:30:6e:0f:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E0:BF:20:13:29:54:F0:2F:38:99:E1:64:F5:A7:50:B4:DC:C7:43
X509v3 Authority Key Identifier:
keyid:69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3d:d2:c4:1f:73:a7:69:ab:8e:c4:9e:07:5e:ae:11:92:95:
0d:08:39:27:66:52:fd:b5:51:94:bb:a8:ec:c0:96:4c:7f:55:
0d:a8:f2:37:a7:7d:92:57:10:bb:4e:5d:e2:18:ab:a9:c4:4c:
76:cd:53:8d:8c:c3:5f:37:51:b3:4f:98:44:55:2a:19:5a:58:
0c:82:61:cf:18:0c:e7:06:68:e9:61:d3:4b:ad:0c:cb:9a:f3:
69:83:81:8a:c8:f7:e8:97:78:7e:0e:ff:c7:06:00:e7:7c:a3:
c2:3a:88:46:fe:8c:ac:9a:8a:16:4e:9e:72:a3:88:fa:0e:ed:
59:e9:3a:6d:8a:39:5f:de:b5:c1:bc:c2:1f:af:8c:39:74:eb:
00:22:d2:54:af:35:ba:47:c0:a0:9e:54:34:2a:8d:86:66:32:
54:1c:ec:67:11:1f:c7:25:9a:ad:eb:84:d9:59:72:29:75:62:
52:41:16:80:72:4e:5b:02:28:60:4b:51:6c:ea:7d:05:ab:5b:
b0:f2:a6:6f:6c:8c:66:a0:70:09:41:71:24:b9:3d:75:94:3a:
ca:85:3f:07:f0:94:58:cb:3e:d2:b0:32:f1:e3:76:0f:88:0e:
30:07:b4:fd:ec:52:65:f1:51:bd:7d:a1:9e:4a:c5:48:23:4f:
a6:37:37:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:25 2025 by rpki-client