Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
File: aVHUVR0mpRwPkrd8LTePs0dYuHc.mft (raw, json)
Hash identifier: sBzCwIetXVONYqRqMU5WuA1mw/6hEq/zuuzFNR//Y7E=
Subject key identifier: 8C:E1:C0:A6:D2:74:E8:5B:B3:41:9F:3D:35:30:D8:23:07:63:85:EC
Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Certificate serial: 0197B632CD92921136972CE2ABFD74E67BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
Manifest number: 06C5
Signing time: Sat 28 Jun 2025 11:01:12 +0000
Manifest this update: Sat 28 Jun 2025 11:01:12 +0000
Manifest next update: Sun 29 Jun 2025 11:01:12 +0000
Files and hashes: 1: PxyIfomodD9RHY4nPMUQ_8FG_F0.roa (hash: GQBwkJMiYlMRNPb5m5PsI1lq6MhgUy7JaZpjCwR+Ch8=)
2: aVHUVR0mpRwPkrd8LTePs0dYuHc.crl (hash: 4fyDeg0l8KwEZlnVOAWJm5CZWPID9xqShPFlD+nA/J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:cd:92:92:11:36:97:2c:e2:ab:fd:74:e6:7b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Validity
Not Before: Jun 28 11:01:12 2025 GMT
Not After : Jun 29 11:01:12 2025 GMT
Subject: CN=8ce1c0a6d274e85bb3419f3d3530d823076385ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:f2:93:16:18:d5:dc:c7:ec:8d:6d:3a:0b:
db:ad:a7:75:7a:0a:51:f0:cf:cd:12:cb:fc:b9:db:
77:26:a1:0f:3f:4d:de:bb:30:33:b7:f5:73:45:e6:
cf:2a:14:2a:87:5d:b6:d5:f7:53:4c:d4:57:99:ca:
02:4f:72:2f:78:5c:da:56:fb:8c:81:cb:30:1f:34:
22:b9:67:42:ec:68:8a:3c:e9:ae:e3:ed:35:e8:26:
50:fb:a7:ca:f9:fe:e0:72:b8:cd:37:70:5e:ae:c1:
cd:c0:39:fe:3e:0b:aa:38:aa:89:d1:f8:9c:19:60:
73:c5:29:96:53:19:3a:81:6f:43:88:08:9d:cd:93:
8e:42:59:36:22:bb:f7:24:15:dd:55:48:b1:77:67:
f9:ba:b5:b2:cb:c2:75:88:0a:55:68:2a:2d:5a:71:
e3:2d:20:49:5c:67:cd:0b:be:b4:54:b3:c8:1f:c9:
61:93:9b:e2:e0:ab:1e:af:da:b8:85:f8:ef:2b:96:
94:f2:34:dc:87:40:34:12:0c:a2:cf:b3:b0:67:4e:
8b:e3:23:e3:2b:c3:01:8c:6b:44:65:8b:46:93:d4:
59:bc:f8:35:c2:e9:f4:d7:32:6b:b4:3e:a1:3e:a5:
b9:15:68:1d:a5:89:d3:37:f3:01:d0:7a:dc:6e:a9:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E1:C0:A6:D2:74:E8:5B:B3:41:9F:3D:35:30:D8:23:07:63:85:EC
X509v3 Authority Key Identifier:
keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:83:58:24:f4:48:3a:5a:ae:72:de:45:de:82:be:34:38:cb:
cf:44:2b:ee:bf:85:a9:e8:b7:15:f8:68:5e:88:b5:4e:d6:33:
01:46:20:6d:b0:bc:a3:c8:66:8b:b5:eb:fd:17:ed:61:86:2c:
0f:7b:d1:0f:61:ff:01:a1:2d:e4:3b:04:98:da:14:e8:88:aa:
13:63:0e:14:41:4c:0b:00:aa:2a:e8:ad:f6:20:7b:0a:1d:92:
4b:ad:5c:11:8f:2e:78:e2:8e:9a:f4:2c:23:11:9b:fb:28:b5:
49:72:a3:70:09:96:63:f2:d6:03:a7:aa:bc:39:33:01:77:52:
e2:9d:1e:31:95:d1:be:96:c8:68:ac:06:93:50:1b:ad:17:a0:
0f:a0:54:4c:64:52:3b:fb:da:1c:1f:69:c4:5a:6d:55:9c:b8:
0f:5d:f1:30:ff:4e:0b:00:44:60:21:bd:f5:b9:f2:fc:73:a7:
d2:fa:64:e6:46:2c:8e:09:83:d7:f8:a9:30:70:6b:ba:3e:e3:
96:db:fa:f7:e2:3d:e2:e8:3e:d0:ab:70:aa:ab:ba:b6:7b:ab:
d0:15:d7:bf:34:d8:9b:72:1b:4c:37:12:12:c4:92:ef:d3:29:
49:24:7e:1a:70:92:cd:6b:07:9d:55:60:4d:11:dd:59:c7:de:
05:4e:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:34 2025 by rpki-client