Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: VMuurXyTSw8fzbkslPbN6AVZ+iMwKBnclHm14a1FtnE=
Subject key identifier: EE:3B:AF:11:F2:68:74:1E:9F:20:19:F6:3B:39:4D:1E:FA:75:85:11
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 0197C56EE476FF688FBA36A55477CCBEDE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 12D7
Signing time: Tue 01 Jul 2025 10:01:08 +0000
Manifest this update: Tue 01 Jul 2025 10:01:08 +0000
Manifest next update: Wed 02 Jul 2025 10:01:08 +0000
Files and hashes: 1: CcO4X5owbp8OTsQUAi4Se0U0bGo.roa (hash: Rjhil4a1bZ7IivISF1+emC+myyX4/SSXPPEDg9r6bJ4=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: JoMwIhbClpq3zWrQDk9hUnSLnJ+arOpul2gZLJiQ/UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:e4:76:ff:68:8f:ba:36:a5:54:77:cc:be:de:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Jul 1 10:01:08 2025 GMT
Not After : Jul 2 10:01:08 2025 GMT
Subject: CN=ee3baf11f268741e9f2019f63b394d1efa758511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:a8:f1:ef:cd:54:56:ab:86:b7:92:55:cb:
e3:57:e2:13:6f:d5:17:d9:bf:01:68:40:11:2c:c8:
67:ab:86:7e:1e:2b:8a:cd:1b:78:a9:4b:e8:69:a7:
df:2e:47:3b:73:94:50:a5:39:2b:10:2f:7b:42:2e:
bd:22:1d:ef:b2:70:0f:05:30:d1:49:88:7a:fd:0b:
d8:9c:ad:85:0d:48:53:36:d4:de:f3:d9:4e:18:73:
25:65:90:49:3e:b9:ea:72:4f:79:f9:c9:f0:3f:b2:
bb:0f:24:90:f6:55:f7:38:08:56:01:b4:a4:f0:c8:
c8:6b:c8:04:0b:a4:db:36:e9:f8:60:26:5a:5d:22:
3c:4b:82:9e:92:89:e5:1b:d0:c2:8a:a2:f6:0c:01:
df:79:c7:01:64:1e:a6:8f:0a:97:14:01:aa:4b:23:
57:f3:48:53:73:49:05:59:32:9b:44:9e:f0:22:0b:
0a:d3:86:c8:ff:ae:a3:ce:0c:8a:5f:2a:37:cc:b0:
ef:ba:27:24:b3:68:e4:b0:14:b6:0e:97:d0:f0:e7:
e4:f7:15:c5:e7:18:64:88:4e:ce:ea:19:ab:62:df:
01:c7:d3:32:7c:f1:7f:e5:4a:96:05:92:eb:41:0a:
41:01:cd:49:50:4c:93:ff:61:7a:bf:a0:9c:87:65:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3B:AF:11:F2:68:74:1E:9F:20:19:F6:3B:39:4D:1E:FA:75:85:11
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:77:18:3e:49:8f:9d:69:83:e1:dc:56:e4:5a:37:4f:f2:e2:
07:ac:5c:5b:b3:02:f0:11:c8:9f:c6:a4:58:c1:1f:32:71:bc:
e5:9d:96:1e:85:37:6f:cb:1c:52:9e:12:b1:89:b7:75:62:8b:
36:3d:8f:aa:8c:0f:e1:d1:3b:19:cb:68:fb:79:06:a9:48:15:
87:e0:92:4c:da:3f:47:80:03:aa:7e:0c:32:d3:21:77:46:54:
47:2b:06:65:29:86:1f:15:0b:44:2f:e2:c8:c6:22:00:33:9b:
3e:2e:ef:3d:66:8e:76:6f:87:2a:0b:ca:51:a0:17:c5:89:6b:
d3:6f:fe:fa:57:f3:2b:26:94:5d:8d:73:29:4c:15:5e:f2:6e:
7a:82:7c:5c:89:cf:2c:b6:b9:5b:41:99:48:b5:d1:0a:40:a2:
47:b6:48:08:13:07:63:73:75:32:28:a1:4b:50:d9:d9:b2:d8:
95:ed:30:3e:f5:55:51:ce:88:1d:6a:56:77:e8:24:59:e4:5a:
c0:dc:48:12:9e:b1:e2:d7:97:36:3b:f3:f7:13:aa:28:2c:df:
a6:de:63:3e:21:39:9e:57:0a:ca:49:dd:03:63:96:24:5e:e7:
da:39:97:fa:87:ba:d6:4e:29:98:6e:91:0a:84:0b:58:92:6e:
0b:9f:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:22:40 2025 by rpki-client