Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File: aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier: QPD8REkU0BD/FfWgRcoEzzlMBLJJp7WvZfalZG3j7HM=
Subject key identifier: AC:9A:0F:38:5A:3C:98:99:11:85:EA:A9:DC:62:11:AD:55:B0:F8:7A
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial: 0197B8214B03344651D8D1487935A341BE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:01:18 +0000
Manifest this update: Sat 28 Jun 2025 20:01:18 +0000
Manifest next update: Sun 29 Jun 2025 20:01:18 +0000
Files and hashes: 1: Ph3sC6aqh0tNsltd6hAZJC7Ft9U.roa (hash: qAtjPwqhqmQ2dOk999UdwCjCLH8v0wMpJPym5FDXFCs=)
2: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: Lo9Wj2E3Db8yjWNqjA2ky1EfXUG57cuhMEpK9uGtRD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4b:03:34:46:51:d8:d1:48:79:35:a3:41:be:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
Validity
Not Before: Jun 28 20:01:18 2025 GMT
Not After : Jun 29 20:01:18 2025 GMT
Subject: CN=ac9a0f385a3c98991185eaa9dc6211ad55b0f87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:d1:d7:1a:72:87:3c:0c:1b:76:45:b0:28:
27:8b:10:92:ed:b8:a4:84:9f:ed:70:5d:46:4a:26:
5a:34:70:83:1f:f4:dd:e7:7e:56:5c:20:66:02:e8:
45:c4:66:55:94:9b:d8:fd:5c:ae:c8:e8:06:42:4e:
42:9f:2b:26:44:f1:2f:38:d7:c8:65:b0:00:20:2a:
ab:4b:94:11:45:ad:6a:3a:1b:70:09:db:98:69:16:
42:e7:15:25:db:1e:6f:a1:9f:0d:17:f4:d3:1c:95:
86:63:c7:4d:9e:a4:16:e4:b9:55:f7:df:df:e3:ac:
04:06:00:f3:35:81:30:d2:e4:84:be:01:69:ec:5b:
81:8b:4c:f4:1d:e1:e0:f2:e1:71:9f:d7:03:0f:26:
90:c2:c1:1d:58:38:b8:e1:c7:97:31:37:a4:73:83:
f2:8d:59:38:bf:b3:03:b7:23:62:bf:1a:a0:fe:93:
55:6d:61:db:f5:91:1f:79:76:82:d3:51:c8:43:84:
15:86:78:c0:5e:be:4f:74:f4:1c:3a:d9:b1:0f:66:
29:67:49:3b:9b:fc:c0:9e:13:6f:bc:40:61:69:0d:
2b:49:87:77:f6:12:9d:cd:9a:9e:01:c2:df:1a:d0:
6e:52:36:15:a9:1d:6e:10:c4:a8:a3:43:5a:a6:df:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:0F:38:5A:3C:98:99:11:85:EA:A9:DC:62:11:AD:55:B0:F8:7A
X509v3 Authority Key Identifier:
keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:60:35:ec:a5:99:72:6f:8e:ea:08:36:30:f8:98:11:b8:75:
11:9d:ab:bd:55:b3:1f:f1:72:1c:2f:42:c2:c0:b1:73:86:4c:
98:89:c7:8e:35:96:43:aa:07:37:a5:eb:9b:76:d4:a4:fc:4f:
73:f9:00:d0:83:5b:79:2e:f3:63:71:96:8d:cf:2c:b9:ff:13:
b0:7d:95:fd:a0:76:bb:fa:7f:85:1d:73:92:e5:ff:5f:48:58:
c2:69:88:c0:83:0a:26:55:43:4a:6d:08:d5:8b:14:ae:c2:b5:
b5:c1:ea:06:7e:95:c7:11:8a:e6:92:f8:7b:00:13:9c:bc:8f:
c6:c9:33:fe:20:38:5e:cb:05:09:ab:dd:6b:5f:2e:90:fa:5a:
7d:49:d6:e4:71:4b:9a:8d:a5:14:82:d9:17:47:eb:5a:89:58:
f7:69:a7:ff:41:dd:83:69:95:c2:a4:d1:5a:b1:f8:53:3b:b8:
0b:b5:ef:b5:9b:66:67:0f:7f:f1:d8:fa:44:00:fd:4f:c1:c4:
37:fd:1b:3d:b1:aa:11:ad:bd:47:ce:48:f8:7a:2a:28:2d:ca:
45:89:e2:de:9e:43:b2:9b:57:3d:85:1f:08:7b:7d:ad:86:9e:
0a:29:c2:7c:0d:81:93:42:72:8d:42:50:bc:ac:7e:39:97:fb:
aa:81:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:39 2025 by rpki-client