Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File: AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier: anBW+k7PTGO6Rv/oF44gtwxNImBReX1VmkcnA8Qcv9w=
Subject key identifier: A2:30:9C:43:AD:D6:A9:21:F9:F1:F0:5F:85:FF:0A:2E:DF:50:CE:6F
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 0197B77C4A35F0D57CE253E193A396CD5B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number: 1030
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: 6zOYtzjXBD-DYg3_-ZbwFYlxy-U.roa (hash: bndS1Tzx6VzHh/lOs3pK1BLzPGIXQ0EzQwN4Ak3MXSs=)
2: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: 6PeOFYgEdJfIhgFmDQsp087cKYKuNlsGoS9aRsjK0ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4a:35:f0:d5:7c:e2:53:e1:93:a3:96:cd:5b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=a2309c43add6a921f9f1f05f85ff0a2edf50ce6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:34:cd:cf:61:ca:a6:86:21:e5:b6:bd:52:
85:d0:e2:54:3a:9e:35:e3:40:4d:77:39:56:18:da:
e2:1e:bb:b4:1b:f7:b7:da:1a:5e:1d:37:f2:36:b4:
87:2a:62:49:4a:73:6a:3d:62:11:95:c6:03:4f:51:
d3:36:ed:f2:86:36:29:0f:4e:5c:6a:37:c1:41:ea:
7d:36:4a:e2:15:1f:b7:ac:0d:6d:c5:95:e0:e5:09:
a6:6f:d2:74:71:38:c0:3b:3e:2c:e6:b4:d8:b8:fc:
78:f3:11:18:f7:c4:f1:96:b3:2f:ea:a9:86:63:ec:
f1:ab:fa:8e:02:33:14:a7:d5:94:26:f8:04:07:73:
c5:ae:46:a3:bc:a1:0b:f2:e2:91:29:fa:99:64:d5:
6a:b5:2a:22:da:b8:50:57:b5:dc:c1:42:b8:23:5d:
b4:7e:f9:fa:e7:c4:18:54:0e:64:62:cd:41:bb:db:
73:cb:86:98:a5:e0:23:a7:11:82:14:43:7f:d8:c7:
17:2c:39:62:b2:a3:03:54:39:e4:89:55:b8:1f:66:
64:22:48:69:5d:be:bd:b2:47:70:de:4c:d4:45:76:
9b:6b:0f:52:6c:aa:b2:d1:18:c3:bc:35:95:75:13:
f2:04:af:aa:2d:a8:62:a8:7a:7a:c4:ac:c7:43:7e:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:9C:43:AD:D6:A9:21:F9:F1:F0:5F:85:FF:0A:2E:DF:50:CE:6F
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f9:68:8e:8e:ef:89:a1:ab:a3:f3:25:0a:a5:35:48:05:ac:
4e:97:a2:42:86:4e:7c:08:40:b0:51:9f:59:ca:87:53:9d:30:
07:cf:64:75:c7:41:8b:41:85:5d:56:27:13:52:ce:3d:5f:1f:
dc:34:35:40:96:db:74:fe:11:59:cc:69:de:f6:f1:d1:89:53:
51:09:27:35:af:1b:ff:e9:19:ab:c7:9b:35:6d:57:09:5a:5d:
1a:81:bc:90:04:6d:6b:ab:e1:65:eb:de:27:58:62:8b:1f:dc:
e3:d3:34:54:13:d0:b7:3c:30:dd:22:a1:50:de:e7:35:ed:0b:
01:a3:aa:53:71:5b:0e:d1:91:85:11:3e:bc:ad:b8:33:11:5b:
31:b9:94:65:6c:7f:3d:30:95:e6:d7:b3:cd:66:d0:e6:dc:de:
bb:96:31:ff:fd:0e:7d:1d:0e:38:6c:d7:b8:36:67:df:0c:26:
93:70:2e:7d:30:d2:bc:a5:0c:17:e5:c4:de:aa:dc:3a:0c:d1:
47:51:b7:8a:7c:88:6a:c6:2b:5b:c5:24:44:d3:5e:a3:71:b6:
9d:a1:9f:a1:08:3a:88:f3:07:81:d5:b9:3d:38:5b:c8:e1:96:
a8:8f:57:d9:11:89:27:20:87:15:ee:80:2d:98:ba:54:be:03:
e3:1b:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:53 2025 by rpki-client