Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: uyDHIQYZ+ctWhFl8rDbwpbtaQw1fYL8HtX0oT3ZbJho=
Subject key identifier: 4F:DF:F2:8A:2A:CB:AE:0F:ED:9A:57:1E:81:2A:3C:D5:1E:31:54:EA
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 0197B8907A62C3B5DED3DDA9F266A97C3AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 1018
Signing time: Sat 28 Jun 2025 22:02:45 +0000
Manifest this update: Sat 28 Jun 2025 22:02:45 +0000
Manifest next update: Sun 29 Jun 2025 22:02:45 +0000
Files and hashes: 1: 8criSeClq2Eu3zzop6X6ae-0yfY.roa (hash: nOinS53G7GkxN9bqxtcws3EdTvx5t+9T2IsaBWfXBg8=)
2: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: VR+/DOVfpRpkAPPHhT/ogow0FSBa3DrGDnQp586RHmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7a:62:c3:b5:de:d3:dd:a9:f2:66:a9:7c:3a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Jun 28 22:02:45 2025 GMT
Not After : Jun 29 22:02:45 2025 GMT
Subject: CN=4fdff28a2acbae0fed9a571e812a3cd51e3154ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:0f:97:5f:f0:e8:41:02:ee:97:19:98:72:
84:e9:32:92:62:3a:02:27:55:96:5a:db:c8:de:aa:
30:b3:9b:b4:38:b1:b2:12:f5:32:d1:59:99:8e:0b:
25:07:98:b8:45:81:22:5e:21:4b:de:6d:c7:67:e5:
1c:bf:95:a6:d9:b5:86:c9:ed:61:d6:ff:5a:c4:02:
93:3e:80:02:06:29:1c:0c:a1:af:83:d6:40:54:2f:
f7:8e:82:ae:bc:fa:56:18:59:87:8a:dc:0e:6f:a3:
3e:13:9f:4e:86:e8:95:12:18:de:d4:d7:8b:1b:80:
70:3a:34:da:d0:21:12:6b:39:dd:47:40:a4:18:61:
52:55:a2:2c:c5:e3:30:a3:3f:9e:ba:70:cb:3f:5a:
c7:e3:5e:de:e5:16:f0:c0:71:10:2c:dc:1c:49:66:
fb:30:ff:c2:75:af:84:d8:a5:e1:fa:49:0b:e4:d2:
dc:3b:99:b6:ac:8a:14:17:26:d2:60:a3:ce:89:71:
45:39:8e:c8:0e:5d:ac:a4:8c:8e:64:0c:24:d6:c3:
6a:b2:54:dd:c2:da:58:7d:cf:a6:7d:d4:45:82:b9:
04:07:63:bf:22:25:20:a4:04:84:01:94:31:6a:32:
b7:cb:65:be:06:37:6e:ca:32:a2:70:6b:16:c8:1e:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:F2:8A:2A:CB:AE:0F:ED:9A:57:1E:81:2A:3C:D5:1E:31:54:EA
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:56:ef:b3:7d:94:e6:6f:9c:78:cb:0f:1a:67:aa:18:c0:6f:
17:2d:f0:6c:9e:ab:ad:53:1c:0d:f5:c9:2f:21:72:0a:2a:61:
f6:7a:8a:28:64:28:0a:7e:a9:59:00:3a:a5:d7:bc:9a:27:c5:
c2:4f:6c:c4:9f:ab:0b:78:3c:f6:4c:73:e4:01:14:67:83:3e:
fc:71:1b:28:f3:57:da:be:c5:8d:b5:8b:0f:3e:00:76:95:81:
ea:d4:aa:95:2f:5d:cd:c7:15:eb:36:67:8b:40:a1:24:35:78:
47:95:18:bc:17:bb:40:cc:91:78:31:bb:4a:1e:59:0d:4d:a5:
64:df:f3:1b:f0:7b:99:fb:da:4c:f4:cf:d9:be:24:d7:3d:0b:
e2:3c:7e:88:26:e1:7b:1f:42:e6:fd:8f:8b:59:93:50:c1:0f:
7e:4d:a4:1f:9e:b6:e9:41:9e:55:66:e3:95:fe:7c:15:ab:bb:
f6:c6:eb:4f:9d:de:7d:51:5e:cf:94:74:2f:d4:7c:0a:9f:26:
38:64:b0:ea:f3:2a:40:0b:ec:07:12:1b:dc:9c:f6:c7:3b:21:
cb:60:a3:92:a3:02:b0:39:1a:46:e2:1f:76:38:6e:9d:f9:d7:
50:21:cf:c6:12:c1:46:18:6a:e7:0b:77:df:06:01:17:c9:fe:
68:b8:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:02 2025 by rpki-client