Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: qk9vNskbjYJ+qsZWz8Tz98+Ziih7qlraCEUwx2nxv0Q=
Subject key identifier: 97:EB:CE:4F:E8:DA:CB:DF:53:F5:EE:92:16:79:8C:24:2C:CC:5C:4E
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 0197B7EA58105B0E542DA130B9BA4D7E4C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:17 +0000
Manifest this update: Sat 28 Jun 2025 19:01:17 +0000
Manifest next update: Sun 29 Jun 2025 19:01:17 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: QhRKgsGQyPnDUr/C3nqyRQ/LQmfY6LFLi+GfHjKYCJI=)
2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:58:10:5b:0e:54:2d:a1:30:b9:ba:4d:7e:4c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Jun 28 19:01:17 2025 GMT
Not After : Jun 29 19:01:17 2025 GMT
Subject: CN=97ebce4fe8dacbdf53f5ee9216798c242ccc5c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:51:d2:ce:0d:29:13:83:d2:45:40:b5:34:fb:
8a:62:27:d1:05:61:70:79:61:e6:a8:c6:72:8f:12:
cb:45:7f:bf:c4:22:e9:1f:60:3d:9d:74:64:40:c0:
f1:cc:d4:18:81:b7:71:73:ea:88:55:80:7f:ee:90:
4a:25:4e:55:a2:ab:16:3d:70:0f:c5:e9:5f:11:78:
3a:de:15:ff:c0:15:be:67:a9:e6:e3:4f:09:3e:35:
6b:a9:77:8b:ec:23:d0:de:db:19:08:89:a0:c6:cf:
9d:27:47:b3:6d:8b:ee:b2:ed:49:cf:54:70:06:b8:
47:ae:3a:a1:38:60:3f:94:a5:81:53:bb:cb:5e:be:
52:4d:a2:66:38:26:d2:dc:02:63:b5:9d:a5:b4:be:
dc:96:87:94:62:e5:00:af:f3:8f:ee:48:ef:05:73:
35:f8:39:bd:a1:ca:18:11:c4:bb:09:ea:f1:a0:8a:
37:b1:56:fa:e0:60:38:da:12:42:8c:0b:fd:dc:2c:
31:f9:1f:7d:35:e1:73:33:4e:05:02:70:a8:47:5a:
a7:c8:ea:de:cb:9a:02:4c:34:bf:03:8e:80:eb:8c:
89:c7:41:1c:a6:2a:7c:d5:56:57:37:54:0a:e9:03:
7b:55:8e:21:b8:f5:e4:59:1a:47:c7:67:48:ed:22:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EB:CE:4F:E8:DA:CB:DF:53:F5:EE:92:16:79:8C:24:2C:CC:5C:4E
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b4:03:a4:d9:90:30:36:6a:78:0c:3f:34:1d:17:b7:24:27:
81:6c:d5:3f:af:2d:62:6d:34:af:b1:16:44:60:94:2b:19:e4:
90:fa:53:5c:62:da:b9:45:d9:b5:83:9b:34:d0:08:da:2d:6b:
b3:ac:12:47:d7:60:71:6a:1a:1a:43:7d:40:7d:ee:42:88:50:
34:1c:fe:18:e5:16:d9:94:76:fb:f2:e8:e4:aa:9c:ab:98:a0:
3c:31:72:2f:e3:3f:51:ea:a7:c2:16:64:2d:c0:8e:40:64:20:
d0:49:26:c3:17:03:4f:10:5a:eb:ee:db:15:c2:d9:10:19:49:
9b:6b:b2:0c:d9:a0:f0:d3:d6:c0:b0:c3:ef:a8:03:ea:3b:4a:
1c:74:7c:d4:30:99:10:fc:8c:fa:cf:ba:b1:ed:37:e6:13:84:
d3:3f:a7:fa:23:8c:57:fd:dd:77:ee:3c:8c:53:4f:49:95:6b:
dd:bd:ea:18:73:38:3c:70:e6:df:d0:a3:d2:53:2f:8c:7a:1b:
be:ce:2c:ae:0c:f4:97:6d:db:ef:15:91:d4:64:2e:12:4a:96:
51:d0:99:16:8e:a1:71:63:97:d3:f4:30:72:61:5c:b4:e2:4a:
43:bb:b7:69:98:03:1f:69:ad:5a:b1:9e:6a:cb:08:f3:44:8b:
8f:db:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:25 2025 by rpki-client