Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: XrxZoQEboueNoSJYm5/qtiqqqNSWZz6MNSDieXbTUxM=
Subject key identifier: 29:E0:0D:0A:4D:52:52:E1:83:00:C8:2C:33:2F:28:35:84:7C:B8:F5
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 0197B8FCB030A77ABACA14C294BA12BE4165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 00:00:57 +0000
Manifest this update: Sun 29 Jun 2025 00:00:57 +0000
Manifest next update: Mon 30 Jun 2025 00:00:57 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: AX+dR4wuIXmfncazL2rqsPS57AeJyIdRBZ0+Y7K+5AY=)
2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:b0:30:a7:7a:ba:ca:14:c2:94:ba:12:be:41:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Jun 29 00:00:57 2025 GMT
Not After : Jun 30 00:00:57 2025 GMT
Subject: CN=29e00d0a4d5252e18300c82c332f2835847cb8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:6a:07:a0:95:00:d6:bd:8f:d4:b2:ed:3c:
e2:b8:9f:e5:34:51:6c:9f:81:51:6b:50:23:96:eb:
bc:32:30:bb:81:a4:0a:f7:de:49:75:df:63:5f:59:
ba:69:ba:f0:e2:9d:27:32:63:3c:47:94:9a:78:4d:
d9:73:c6:fa:dd:98:60:52:55:5e:e8:28:9f:97:35:
3b:af:45:6f:5e:6d:a6:09:da:03:4c:ff:5b:52:4a:
f1:0a:b5:ee:83:e1:34:02:f0:7d:ce:f6:ae:65:d3:
6e:e9:89:35:a4:22:e3:a1:49:02:2e:ee:90:a4:49:
ba:42:15:91:47:51:e4:ee:a6:4b:72:b0:09:99:d6:
f0:0a:52:09:2f:ae:45:a8:d8:45:b8:26:03:bd:e7:
9b:f1:6c:51:43:85:57:62:15:e2:62:5c:e7:2f:bc:
03:9f:1d:79:eb:63:60:a4:a1:af:7c:83:8d:03:de:
19:27:f3:33:bf:a8:89:c9:16:72:d5:e3:b8:1e:2a:
35:74:78:25:fe:23:ed:73:7b:1c:18:65:f6:bd:18:
e1:8b:0d:26:69:3d:05:20:de:c5:ca:da:2b:c1:c2:
d2:9a:9e:0a:68:7e:b8:d2:cb:f5:9d:e3:31:3d:84:
ce:25:fa:20:f0:e3:6a:2e:ad:81:dd:5c:c0:d8:88:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E0:0D:0A:4D:52:52:E1:83:00:C8:2C:33:2F:28:35:84:7C:B8:F5
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:31:dd:90:93:e9:16:64:50:42:1d:48:53:1b:31:db:2a:d9:
8f:9e:91:c2:0c:ea:c2:1a:69:67:29:2c:f3:40:19:30:42:f8:
af:ec:22:02:4d:d9:84:eb:7f:43:ff:fc:8b:84:89:22:97:9b:
7e:4e:87:fb:a9:3f:09:ab:c0:92:b9:29:c4:d1:26:7b:34:8d:
89:26:7a:47:83:45:09:c3:a2:18:67:59:5e:08:da:53:e3:da:
52:dc:fa:ea:f5:d0:a0:a8:66:d1:b2:54:17:90:2c:99:f6:11:
42:a8:2d:d9:ca:92:39:0e:17:fd:eb:d8:f0:85:b0:36:74:da:
34:a5:a6:ae:ac:4d:77:9f:c4:3d:5f:8a:3a:b6:2c:08:ab:c0:
ea:d5:62:2c:a5:14:ee:6d:c5:2c:10:cb:6e:f1:1a:03:f1:c4:
fc:ac:c4:04:e7:0a:f7:05:b8:b9:f4:4a:64:3c:28:fd:ec:5c:
57:da:5c:ed:66:08:98:fd:03:08:30:7f:c4:f0:33:65:83:c5:
4b:5e:d8:48:84:0e:73:31:12:aa:89:fc:90:5c:70:70:fe:b8:
a3:32:10:bf:84:5f:cf:04:de:d7:c0:3b:6f:14:aa:06:63:d3:
54:f6:db:fa:c0:e0:a2:af:db:fe:46:53:3d:12:60:57:ad:92:
4c:c2:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:33:13 2025 by rpki-client