Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: SOjmrdhTbB1PQHU0fpOlfHvSPLwpKn6D36pfUOLY+pw=
Subject key identifier: B7:C5:7D:28:68:21:C0:FD:9A:A6:3D:28:76:0F:7F:CD:B7:89:1D:71
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 0197B632D2C400EF02C927C8650920B44ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 11:01:13 +0000
Manifest this update: Sat 28 Jun 2025 11:01:13 +0000
Manifest next update: Sun 29 Jun 2025 11:01:13 +0000
Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=)
2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: 9DaGIHtt1hCC1S1afCuYpCtvTNKaWS2U2NzQCpl9Xl0=)
3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=)
4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d2:c4:00:ef:02:c9:27:c8:65:09:20:b4:4a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jun 28 11:01:13 2025 GMT
Not After : Jun 29 11:01:13 2025 GMT
Subject: CN=b7c57d286821c0fd9aa63d28760f7fcdb7891d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:eb:dc:e1:7b:e2:14:1c:a8:31:c0:39:20:e9:
59:92:ec:76:48:e6:23:8e:93:80:f2:f0:01:a4:88:
57:24:eb:25:59:de:11:23:a5:e5:84:71:c4:ac:be:
a0:7d:f9:6f:0c:5a:ec:c2:50:87:53:23:c3:7f:10:
4d:60:0e:ab:df:1e:b9:07:33:c6:1f:93:76:8c:7f:
e6:fe:5d:cb:4d:79:57:ac:84:12:51:14:f0:8a:2b:
7e:ca:36:4d:63:bc:ea:b1:61:03:df:86:d8:93:b5:
74:47:14:69:fd:a8:27:ed:a8:d5:74:08:24:b9:a7:
7d:7e:75:74:c4:ad:7b:ea:16:04:a1:04:6d:8a:f1:
5c:87:55:c1:87:f7:a3:48:73:7a:ad:b3:a1:9f:ad:
52:a2:96:4a:84:bb:1e:dc:6b:ee:9e:16:85:2b:3e:
76:cc:26:e0:ed:64:0f:40:58:dc:a2:c6:e9:23:6f:
30:63:4b:0f:ea:d3:d6:2d:66:f8:1a:db:13:56:d5:
d6:1d:a6:ec:d0:db:3c:8a:02:67:e0:93:1a:af:79:
46:b0:00:cf:02:76:25:a0:4a:47:c5:9d:a1:d1:9c:
f0:ca:35:2a:3d:5a:9b:7a:fc:87:95:d6:99:70:77:
7d:d2:1b:48:7e:6e:de:31:2a:cf:f0:43:58:82:58:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:7D:28:68:21:C0:FD:9A:A6:3D:28:76:0F:7F:CD:B7:89:1D:71
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:17:79:73:f5:33:72:1f:3b:2e:02:58:89:ec:05:ad:38:6f:
ff:b8:3e:e5:89:f1:cb:f9:78:f2:4e:b1:e8:6d:7b:88:5c:1b:
96:6c:92:78:2e:72:fa:e1:0d:10:70:bc:f8:3f:56:89:3e:9d:
97:81:d3:3a:e3:05:cd:ce:1b:24:98:03:65:e4:dc:5a:07:4e:
66:7c:96:47:11:e9:b0:c2:7c:fa:82:07:b4:55:8a:b2:24:aa:
cb:7e:c3:bc:35:22:cf:a0:a3:e0:40:ba:29:dd:43:a5:74:a9:
ac:4c:cb:24:5c:19:6c:b4:26:b9:4f:cd:1d:fa:a0:34:a8:2b:
ed:47:79:7a:42:dd:cc:13:7a:a1:66:32:7d:1a:15:fd:fc:9d:
8c:56:0d:70:a1:2a:6f:f9:08:37:90:71:52:f3:91:53:e5:ca:
34:b9:1d:3f:8e:85:06:f2:81:77:11:5b:05:3a:55:a0:65:70:
f1:25:38:b6:41:ff:c0:15:46:9a:86:18:a9:50:2b:62:73:31:
6d:38:2c:af:e5:ec:1d:e5:8f:ef:4d:65:05:61:2f:be:4d:f1:
12:91:f9:bc:df:7b:d8:fa:39:78:0c:f8:e6:0a:77:cf:47:8a:
66:7a:2c:5c:c6:64:9b:a0:a2:0f:cc:74:c3:3d:ca:6e:d1:da:
ac:59:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:49 2025 by rpki-client