Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: Rpmdr0STe7TNx2PArkDkPy6hJlXmaurAzzgwdRg5Tyw=
Subject key identifier: 4B:03:9A:20:C4:3B:35:26:1A:91:68:5E:7E:87:11:F6:32:17:52:DD
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0197B8FCFDAEF1476C93A951A3A2B4876F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 12AD
Signing time: Sun 29 Jun 2025 00:01:17 +0000
Manifest this update: Sun 29 Jun 2025 00:01:17 +0000
Manifest next update: Mon 30 Jun 2025 00:01:17 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: zZI9q71nmlEm1HQdNjPF4vZphcYbRwaIUTQOFwfQmls=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:fd:ae:f1:47:6c:93:a9:51:a3:a2:b4:87:6f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jun 29 00:01:17 2025 GMT
Not After : Jun 30 00:01:17 2025 GMT
Subject: CN=4b039a20c43b35261a91685e7e8711f6321752dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:da:29:83:fc:bb:1c:77:55:28:71:d9:01:
74:47:98:cf:fc:78:5a:c6:0f:66:58:36:97:1a:e9:
da:63:44:2b:7c:8d:ca:e3:55:ba:50:5d:c3:e4:5d:
5f:e5:62:51:6d:74:b8:1d:50:f3:11:80:12:80:d3:
56:b8:4e:90:23:3d:8b:a8:9a:b5:24:c3:af:81:49:
7e:db:8c:65:22:1f:c5:ef:a3:b2:ff:c0:2b:4a:f3:
3c:5e:3e:e8:51:a4:45:15:e5:2f:9c:07:0d:26:e6:
24:94:58:43:90:7f:dc:86:5b:53:d8:b1:19:7c:1d:
b3:77:47:27:6e:5c:82:9a:2f:a9:74:d8:9f:77:39:
6f:2c:6d:b4:e9:c2:26:ba:05:97:7c:92:fa:4e:90:
13:91:0b:af:61:61:ee:74:59:9c:2c:d0:95:9d:8e:
8d:0f:69:a2:f5:2e:73:31:7a:71:3f:17:ab:cc:fa:
1e:8a:3d:20:db:71:35:ac:c0:1c:b3:16:48:8f:6c:
b1:05:bf:95:c1:57:27:1c:66:71:36:e3:a1:29:45:
d7:99:f5:ef:91:dc:c3:15:07:b8:60:10:2f:98:79:
a6:8f:0b:5b:34:44:34:1e:63:02:45:71:18:61:85:
78:2f:3d:6e:00:14:89:71:1e:e5:c3:69:39:f9:f9:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:9A:20:C4:3B:35:26:1A:91:68:5E:7E:87:11:F6:32:17:52:DD
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:46:f1:d5:a6:55:c6:39:78:c8:59:ab:da:28:17:45:0f:43:
37:43:42:6d:23:25:d9:2b:4f:06:ff:f1:4c:a5:03:c6:d4:9f:
f4:6c:21:1a:39:ed:3d:11:81:e1:f3:ab:3a:d0:e3:f8:02:73:
9d:27:67:7d:73:e5:fe:57:6e:08:f9:e1:da:ee:3e:43:17:89:
2d:2c:96:6d:bd:91:1b:9f:cd:dd:c1:72:fc:e0:18:7a:53:cb:
b5:59:4f:42:82:ee:1b:4d:12:3e:30:51:a5:b1:8a:0e:96:9d:
62:d2:da:21:69:3e:de:75:ff:d5:1f:8b:2e:f6:6b:b0:fe:92:
f4:68:27:0a:d4:55:17:63:4d:81:18:e8:84:22:98:14:6a:fd:
9f:c8:87:3e:f5:b3:49:eb:f2:cd:13:3d:0f:7d:80:15:d5:2d:
ee:cf:6e:26:51:8d:52:06:e4:8d:d6:c4:04:a4:17:aa:1a:76:
31:5a:ae:19:5f:c9:4f:6e:ec:12:76:45:81:0a:5c:67:71:84:
74:9f:f4:b1:b8:3e:f9:dc:af:7e:98:0e:fb:3d:7a:75:d4:a4:
ac:c9:c1:b7:b9:61:d0:df:6c:a5:4d:48:fe:2e:f7:65:d1:6a:
04:4b:45:2d:44:eb:ab:73:c2:fa:07:b6:00:be:42:99:52:e5:
1a:39:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:32 2025 by rpki-client