Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: DOPhcmC6O1PQQpexETVMk0QxxFxMfB8ppkiOU2O21G0=
Subject key identifier: 28:CB:08:5A:57:E3:00:A7:79:2B:78:7D:9A:E7:C7:44:0B:CB:98:F8
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 0197B6D7557E9EA092B2C7159F8BAD061FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 10F4
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=)
2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: ZS827N1GG4oTJfDcXqGGYfJQBIaCnFSXpJqoJj/53kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:55:7e:9e:a0:92:b2:c7:15:9f:8b:ad:06:1f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=28cb085a57e300a7792b787d9ae7c7440bcb98f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:ab:d6:b9:bf:3b:96:a8:f9:96:f5:42:bd:
37:15:25:05:47:97:ef:55:4b:03:ad:26:31:da:aa:
1f:79:55:03:fa:32:90:85:e1:be:a6:d6:fa:e5:70:
16:c7:57:1a:75:8b:8f:20:25:db:63:e3:fe:76:1f:
d6:16:90:54:82:9e:67:f6:72:76:25:f5:39:de:48:
e3:e9:37:fb:98:ac:f3:98:47:f4:66:b5:0e:ea:02:
dc:8e:99:5e:39:fe:95:20:13:79:ec:4d:64:e7:90:
91:3c:c1:4f:98:f4:87:29:19:0a:c9:55:e0:7e:63:
aa:d8:d1:d3:a5:5f:47:9e:22:d0:0b:cb:69:69:4c:
25:ed:42:a7:95:22:a2:44:b7:f1:cd:9d:f4:58:7c:
5c:41:24:a3:c3:7a:65:ed:8b:e0:8d:7f:9a:af:48:
85:d6:91:0b:ab:69:a7:97:07:33:c1:21:b4:93:0c:
62:6b:3d:e4:78:0c:05:64:6a:00:60:30:c2:da:9a:
06:aa:c1:ea:9d:8d:e3:4c:ce:9c:29:23:a2:63:15:
de:2b:e1:b3:4b:19:c4:1a:be:89:08:44:30:41:3b:
f8:ad:ed:64:ad:74:b6:74:4c:76:59:13:a8:b9:6d:
cb:c9:1d:ea:53:15:98:47:41:3f:1a:48:bc:62:2d:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CB:08:5A:57:E3:00:A7:79:2B:78:7D:9A:E7:C7:44:0B:CB:98:F8
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e0:12:c9:a4:ad:dd:05:fc:e1:38:c2:07:57:aa:ce:db:b8:
25:43:da:a6:b8:f2:0a:3d:dc:0f:75:7d:23:0a:cc:03:eb:c9:
49:74:0b:2a:ff:ed:ad:40:f4:0b:b6:8b:2b:43:4a:bb:78:83:
12:dc:4c:60:26:34:a6:5f:36:25:8e:24:24:f5:b0:27:4e:cc:
aa:05:8d:72:42:70:a5:e6:8e:08:d0:92:b8:65:3c:15:fc:44:
62:fe:d4:37:58:82:13:6b:cc:52:8e:fb:e8:51:e0:e9:55:64:
6c:98:fe:69:fc:51:f2:04:d5:69:a4:87:91:12:eb:2d:ac:cf:
de:01:05:13:fa:c2:a3:c3:86:b4:89:24:4c:d0:ba:3c:a7:7c:
44:a5:49:e0:66:e5:70:a8:1d:28:fe:9b:fd:80:5a:ad:02:4f:
99:68:3b:b9:20:49:86:65:d4:bf:29:d2:89:57:41:01:d8:ec:
15:ba:11:9b:d8:75:d4:60:39:f1:33:06:06:36:d2:d3:e4:ab:
44:e0:45:dc:05:da:13:ba:70:5e:11:e0:49:06:f7:f3:a7:7c:
6f:78:d1:f4:93:f3:58:67:82:fe:ed:4f:f8:86:44:70:0c:32:
8f:74:e6:1a:8b:05:54:d9:10:6c:c2:a7:74:99:81:b1:6a:80:
15:3a:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:08 2025 by rpki-client