Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: rk7Wx+D+vQVfXUR2ECvh2Lp7HrL7tQDuW03ySFMqhxA=
Subject key identifier: CD:A9:51:BD:01:E9:2B:C2:BB:79:69:7D:5D:2C:27:0D:81:A3:1D:95
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 0197B890343D910395F4A1F44DF8F3D1C6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:02:27 +0000
Manifest this update: Sat 28 Jun 2025 22:02:27 +0000
Manifest next update: Sun 29 Jun 2025 22:02:27 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: H2dRYWVojGTm2Do2erKimGVdew7VoJeoGFQeo+yH5GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:34:3d:91:03:95:f4:a1:f4:4d:f8:f3:d1:c6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jun 28 22:02:27 2025 GMT
Not After : Jun 29 22:02:27 2025 GMT
Subject: CN=cda951bd01e92bc2bb79697d5d2c270d81a31d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:b3:d0:bd:85:f4:3e:47:7a:33:06:9b:61:
7e:f1:f6:f1:fc:3c:62:6e:e1:30:7b:17:86:08:b0:
ae:00:3b:1f:ca:1c:1d:9b:77:be:0f:07:75:92:46:
f0:b5:ce:f9:4c:8b:96:c5:e0:79:a3:5b:cb:54:1d:
3b:73:67:dc:5d:6b:ed:c3:f5:aa:c0:a4:1f:da:77:
37:b2:8b:11:3b:41:d7:e8:19:b4:98:bc:e6:06:c5:
ca:51:dd:46:9a:b3:42:1a:92:6e:d0:57:10:0a:15:
75:dc:b5:4d:a3:01:58:da:fa:9e:f5:d0:df:c6:1b:
29:63:b6:77:a5:18:b4:9a:77:bf:fc:2c:12:48:78:
dd:99:ed:ce:22:eb:0f:83:cd:d0:e3:c5:f4:dd:f3:
a7:17:64:4b:76:b8:9a:f3:f5:c9:07:01:c3:e5:9e:
2d:96:c0:72:f9:bc:41:b2:bf:cb:e0:47:54:ff:98:
af:9a:03:4f:6b:15:c8:35:92:71:c2:0f:ef:2e:af:
90:44:f7:46:74:fd:c8:58:27:ba:30:63:d5:c2:c2:
13:bb:3a:ec:6c:08:31:a5:e8:54:71:56:14:09:5d:
7f:b1:86:de:21:de:aa:26:fb:3f:a8:82:77:74:51:
f1:fc:e2:ea:24:ba:02:20:e5:3f:44:c1:46:d2:1f:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:51:BD:01:E9:2B:C2:BB:79:69:7D:5D:2C:27:0D:81:A3:1D:95
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:77:15:3f:b2:bd:04:f7:ae:c7:e1:e5:26:a3:62:ed:90:f6:
18:15:6b:4b:a3:56:ca:22:bd:37:a4:d5:36:bd:9e:ee:b6:cd:
70:93:4d:35:25:64:6d:81:92:06:43:3c:e9:ef:09:c9:35:10:
64:6b:ea:36:94:06:68:e1:bc:91:5a:d7:52:14:ec:3c:d8:9e:
08:02:68:8b:6b:b9:3d:1e:70:4c:79:ea:46:32:15:e7:22:5a:
0d:21:81:09:31:b3:e1:c2:45:f7:76:3f:f1:23:92:38:ae:e1:
03:30:fe:13:81:eb:24:d0:f8:2e:a2:f2:02:fe:e7:98:96:0f:
6b:42:23:0c:9c:75:23:72:5e:39:5d:7a:06:9a:81:7a:a1:21:
80:5e:3d:73:77:f2:06:ac:93:da:c3:47:f7:c8:72:1b:32:d3:
33:db:f2:1a:59:5d:2f:56:45:3a:ab:af:de:3b:4f:64:0d:72:
69:a0:b1:6e:2f:57:b5:d1:96:93:f3:ee:ef:85:55:0c:1d:9e:
07:d8:6c:e9:6f:d1:37:b3:5a:84:72:4e:1c:fe:9a:b2:5d:89:
ba:b2:fe:ff:fc:f0:bb:11:b8:6f:a0:33:3d:3e:47:55:3a:32:
98:3c:37:78:a6:ef:7b:ac:f4:0e:f3:15:70:ad:21:8c:a1:ec:
c4:01:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:26 2025 by rpki-client