Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: TGYTj3EOvCYGOzg+Y3CVu4Jha558tkmW2tx2f3s+e5Y=
Subject key identifier: FB:85:8F:AC:D1:8D:63:DF:B0:06:60:F6:56:39:33:D1:20:CA:23:D7
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 0197B8907A179A82F2E4D147F4F0DE0FF7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 09AE
Signing time: Sat 28 Jun 2025 22:02:45 +0000
Manifest this update: Sat 28 Jun 2025 22:02:45 +0000
Manifest next update: Sun 29 Jun 2025 22:02:45 +0000
Files and hashes: 1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: pYGUong3doBA7E6OJSSPo7RTRCuMWGWxWd1Rbl+sGms=)
2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7a:17:9a:82:f2:e4:d1:47:f4:f0:de:0f:f7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Jun 28 22:02:45 2025 GMT
Not After : Jun 29 22:02:45 2025 GMT
Subject: CN=fb858facd18d63dfb00660f6563933d120ca23d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:ae:5b:1d:b8:d6:ed:28:97:eb:dd:ca:ce:
1f:d9:1f:2f:05:96:f7:c3:84:96:5e:31:c7:d9:0c:
ea:e4:a5:db:0b:ae:4a:7e:38:ab:0a:ff:d6:9d:57:
2a:a7:5f:90:92:3a:1f:57:cd:82:cd:29:29:cc:41:
38:40:f7:2b:c9:c6:ce:da:e3:7e:ea:4e:aa:7f:3c:
75:25:9b:b4:bd:62:e4:91:70:12:29:ba:5b:27:46:
b5:32:b8:e5:19:d3:04:eb:65:7e:3e:e5:1b:97:28:
a1:9a:5f:d1:fb:03:e8:7e:ed:18:50:ec:fc:4c:cf:
60:e6:fd:0a:93:ae:89:d7:1f:2e:fd:3b:48:d0:65:
27:12:96:0d:ce:a4:ec:a0:7c:17:79:bc:6a:b8:1f:
b3:73:26:98:dd:ed:7d:91:79:28:c3:5a:8a:83:f9:
97:ba:9f:07:ec:e6:c6:07:c3:b0:7c:93:d1:a3:fa:
d7:03:27:77:f8:1e:da:92:06:dc:89:f7:bd:ea:9d:
fe:18:4f:a9:3b:1c:5c:4c:b1:e2:91:3b:90:37:20:
07:32:53:15:17:6b:1c:bd:25:fd:64:34:ee:f1:6e:
29:65:94:70:c1:9f:0b:82:47:e6:4c:ef:2c:64:4e:
14:b0:ac:64:46:b2:05:45:ea:ae:47:20:df:10:ed:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:85:8F:AC:D1:8D:63:DF:B0:06:60:F6:56:39:33:D1:20:CA:23:D7
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:83:86:24:5f:73:32:22:60:da:f1:f2:29:b1:4e:f5:14:aa:
06:13:de:0b:74:c0:68:18:e8:c9:0e:fe:42:f8:d8:5d:f8:17:
f2:87:55:d3:7d:7e:35:78:f3:9e:65:7d:b7:c3:c9:e3:b4:86:
a3:6d:1e:93:73:14:38:97:d5:d7:47:a4:1b:1f:f6:eb:5e:9d:
87:67:18:ab:d1:a1:74:b5:ab:2f:3b:5b:ee:31:2c:76:a6:e8:
6b:68:55:89:4d:da:ef:33:c0:f5:f2:d3:f9:c6:21:c8:02:ed:
05:c4:b1:2f:67:6b:63:74:57:7f:7e:a5:4c:e3:fb:79:0a:38:
06:8d:f3:e6:df:1d:5e:05:3a:01:26:e2:7e:72:79:67:d8:23:
fc:c3:47:bb:b4:5b:d1:b1:e3:8e:24:89:dc:3b:4b:42:e4:9a:
a3:04:85:a5:9d:78:68:0c:8c:dc:8d:ad:01:b2:a4:db:7c:f9:
42:7c:e2:e8:6c:f7:14:7f:0e:1f:98:09:1d:8b:4d:04:90:58:
e7:79:14:20:82:f1:e1:0a:3d:d2:59:97:60:f9:f6:a6:89:c4:
62:1e:12:31:b0:9e:c1:9e:52:9b:89:2c:06:ae:a0:18:01:65:
0e:6f:d5:9a:bd:aa:b2:36:e1:9f:92:f0:27:8f:be:a2:75:19:
38:41:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:18 2025 by rpki-client