Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: 3BNUzz5FH0yev0ALZBsjh1r6ZDUKtDqD075bXJnFb9w=
Subject key identifier: 85:62:E4:D8:58:61:BF:8A:4B:42:78:47:62:79:91:63:1A:26:3E:92
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 0197B7EAABDF6A2D344ADAE440F193B5A1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 1229
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: rLnHUl34CQepNV5rOxvOLbpqA2qHF2ekbjE88yhhDXg=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ab:df:6a:2d:34:4a:da:e4:40:f1:93:b5:a1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=8562e4d85861bf8a4b427847627991631a263e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:77:f8:f3:91:30:97:e0:20:c5:ec:e4:b7:90:
c6:84:4e:17:c0:9d:37:0c:63:6b:53:9d:5e:41:43:
0c:ef:a9:46:07:4e:d3:4c:dd:23:84:07:58:b2:fd:
b4:2f:b9:ee:ca:35:ae:06:61:e1:6d:bc:b7:c6:6d:
22:88:3f:eb:1a:7e:1a:2b:92:3a:12:45:e2:d8:ab:
7c:69:a8:ca:0b:7c:4b:74:70:1a:35:83:eb:d8:f7:
8e:05:77:8f:7c:0a:28:63:eb:a6:36:a8:2f:b6:2a:
1b:83:cf:4a:01:59:df:74:ba:53:af:45:ea:69:99:
4a:f7:67:81:8e:95:ca:4d:e6:90:e3:c6:2f:cf:35:
ca:6a:b0:cd:c0:85:f5:ab:23:d2:7d:b4:f0:22:62:
ef:05:c8:af:31:3a:ad:b2:9e:1f:d1:8f:4c:21:44:
3b:aa:4b:6c:c9:ac:a5:df:95:de:f8:8d:8d:8f:20:
83:d1:cf:4c:b0:bc:f1:71:cd:52:7a:c6:30:51:d5:
e5:4d:85:3f:9a:e6:d4:06:84:9e:79:32:3b:dd:66:
6e:42:41:f2:75:0f:29:8f:fb:d2:92:84:1d:b3:a5:
79:02:90:8a:af:6b:f3:a5:b1:07:e4:fa:fa:dd:29:
45:11:44:9b:81:06:70:2c:a1:38:6c:83:47:db:b5:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:62:E4:D8:58:61:BF:8A:4B:42:78:47:62:79:91:63:1A:26:3E:92
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:7a:02:58:20:e2:3b:ba:49:24:a8:02:c9:a4:ab:a5:6b:
c7:a7:15:60:e3:af:71:95:0c:62:36:f9:f4:da:1c:c8:39:88:
41:ce:64:cc:1a:d5:4d:9e:65:24:dd:75:d0:31:1d:7f:a3:56:
aa:91:fb:74:3e:72:f5:91:64:21:fe:1f:9c:d1:3a:3c:e5:a5:
0c:65:01:6e:da:a4:8c:60:42:e0:23:8e:14:8c:68:e2:be:4f:
c1:6f:10:94:95:e1:23:2a:0d:44:97:e7:da:44:14:07:96:88:
0a:5e:8f:07:4b:38:bd:1c:ef:3f:c2:77:4d:34:c4:dc:a7:25:
5f:67:5d:21:94:83:eb:87:df:5e:dc:03:3f:60:3f:c5:d0:fc:
a5:b2:80:43:0a:9c:f8:87:03:b4:08:c5:2a:a8:c9:28:41:ac:
cd:92:85:97:98:7e:dc:33:6e:cb:67:20:bc:43:23:d1:2d:76:
d9:65:d9:7a:98:a9:9f:a8:53:39:d0:55:a9:07:89:37:e3:c1:
8a:88:14:85:86:bd:43:62:f2:e9:56:cc:be:0b:b7:7c:8f:db:
e1:03:d7:a9:a5:b4:b4:76:a2:cc:48:90:59:e0:5c:4a:b6:88:
73:57:05:86:26:7b:18:a1:76:68:0d:74:dc:dd:1d:31:4a:5f:
af:b0:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:53 2025 by rpki-client