Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json)
Hash identifier: KgvPl+maO3OxzDGrPsps/H59oHj9pon0jSeXuG+pHsg=
Subject key identifier: 34:84:E8:4C:A9:2A:D9:86:C8:D5:A1:2E:CE:17:09:F3:AA:E2:20:F7
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 0197B8FD6EF8E0952038F5627C5969F15B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
Manifest number: 0CCA
Signing time: Sun 29 Jun 2025 00:01:46 +0000
Manifest this update: Sun 29 Jun 2025 00:01:46 +0000
Manifest next update: Mon 30 Jun 2025 00:01:46 +0000
Files and hashes: 1: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: BC7/Ksdja5zkRbWUqzHwr5yLwpdGk9jL9kx6lxY5Ri0=)
2: jT8P4HyIvKh8r7FQFBaidUndh0Q.roa (hash: Wroxjw87hFNcZdv8/bJmsCuX0IjtBBcn8Xp1138BSK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:6e:f8:e0:95:20:38:f5:62:7c:59:69:f1:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: Jun 29 00:01:46 2025 GMT
Not After : Jun 30 00:01:46 2025 GMT
Subject: CN=3484e84ca92ad986c8d5a12ece1709f3aae220f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:71:60:b6:01:82:3d:df:f0:79:e0:57:f7:f1:
0d:67:9c:b8:f1:4d:5e:45:0f:8f:d5:b0:65:1b:78:
e8:80:81:71:f9:ae:d8:de:f7:22:53:2b:69:91:b3:
e4:09:0f:70:99:8f:28:c8:d3:e8:0d:32:b8:1d:1f:
13:30:03:07:ff:61:23:dc:91:fc:18:51:d2:77:66:
53:99:b6:85:61:37:3b:0e:51:5c:b1:7f:25:19:67:
4c:50:c3:d2:c2:8a:a7:e9:06:7f:27:9a:6b:cd:ea:
61:6e:99:f2:c4:1e:d6:f5:8d:41:92:4f:3b:cb:1c:
03:ce:3f:66:9f:1c:a2:30:3f:30:52:fa:fe:d8:31:
c1:cb:4e:d6:10:3c:fa:22:a6:c1:ab:55:65:1c:ef:
c8:29:ff:15:d8:36:96:6b:61:f9:65:71:65:df:ee:
29:29:12:8c:66:b5:ba:fd:ea:da:bc:c2:1a:0e:9a:
83:15:d4:18:64:6d:a8:6d:ff:f9:91:ad:61:55:e0:
3e:c0:17:3d:3a:ff:11:65:75:7e:3b:5e:b8:23:5e:
fb:1d:1d:cc:78:c3:06:a6:5d:7c:d8:ec:e1:16:96:
19:2b:1a:06:3d:1c:3d:e3:2c:ac:92:9f:be:54:33:
85:2d:40:99:c7:a1:08:67:e1:b9:df:e9:ec:b7:86:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:84:E8:4C:A9:2A:D9:86:C8:D5:A1:2E:CE:17:09:F3:AA:E2:20:F7
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:cd:4a:7c:fa:6b:70:0d:51:31:2b:ed:e4:d9:15:59:41:2d:
bd:45:1b:f5:37:d4:99:ab:21:86:06:10:a8:eb:a3:69:73:db:
2c:96:4c:66:05:83:d2:39:c4:42:5b:3c:6c:f3:15:a3:c9:c2:
44:57:16:f8:b5:14:62:de:a5:e8:c4:54:0d:13:d5:02:4e:75:
05:61:fd:d7:0c:23:1c:a7:43:a8:67:cb:9b:d1:56:80:64:b8:
99:8f:e6:aa:37:24:23:ee:6a:51:66:98:bc:d1:65:d3:d1:a6:
0c:3c:29:cd:4c:48:26:ef:1b:31:8f:59:9e:56:c6:d5:ca:2c:
20:c5:31:41:c0:75:f4:d3:4f:46:7d:cd:69:7a:41:27:46:6b:
0f:e4:79:8f:f1:36:88:ac:ce:10:e4:eb:79:d2:1d:8c:4a:06:
ad:bc:af:c9:b7:b4:08:d2:7c:09:5c:a2:79:0c:a3:31:f8:fb:
eb:c5:79:51:d0:58:d5:d2:1b:fa:e7:7d:0e:ed:87:2c:78:4b:
aa:de:20:70:37:61:12:38:2a:95:09:5e:4c:0b:85:78:b4:12:
cb:a2:a2:08:1a:47:db:8c:6e:0f:eb:de:f3:42:11:a7:32:cb:
87:6a:b2:cf:f3:31:b2:18:71:a3:04:09:47:a6:b8:01:f7:32:
a0:b2:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:01:20 2025 by rpki-client