Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: +QlMxq6euDppVwk963OTe2GyqvU6rNVmIQyJKiRYOpE=
Subject key identifier: AF:0D:3C:C0:84:06:89:7A:B9:70:E2:77:91:E6:17:00:9F:FA:DF:0C
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 0197B88EE9583A7BB6B2F2A2CCEEE2F1AA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0975
Signing time: Sat 28 Jun 2025 22:01:02 +0000
Manifest this update: Sat 28 Jun 2025 22:01:02 +0000
Manifest next update: Sun 29 Jun 2025 22:01:02 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: TJ/h53xmvAkCrqMEDvYLsvH7DmyYOfonDwo8q6zHjsc=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e9:58:3a:7b:b6:b2:f2:a2:cc:ee:e2:f1:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Jun 28 22:01:02 2025 GMT
Not After : Jun 29 22:01:02 2025 GMT
Subject: CN=af0d3cc08406897ab970e27791e617009ffadf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:e2:a7:5b:2f:92:70:1d:43:87:22:19:c9:
42:2a:58:ce:3d:d7:1a:a4:0b:28:d2:da:2e:dd:70:
86:01:92:d7:d0:a6:6d:15:d8:17:13:68:11:e6:27:
85:ed:b8:92:8b:a4:17:3c:59:ac:90:a0:bc:8f:1d:
f9:0f:9b:11:97:27:c0:2d:f6:9a:41:e9:21:13:96:
53:e5:04:7b:ab:ae:24:e2:57:d6:cd:c9:42:96:33:
b6:29:7c:b4:6b:bd:1c:ea:0c:70:8e:17:bf:8a:c8:
fb:f4:5b:be:a9:b5:82:a2:2e:0f:a9:2a:03:f5:00:
1f:53:19:cd:5d:26:73:84:df:4f:fc:87:d1:61:ae:
89:cd:4c:19:87:70:b0:7e:10:bd:f6:e8:33:8a:64:
25:b8:f7:bd:b4:1c:ee:d2:4f:82:95:98:43:7f:8e:
5e:a3:22:7a:d9:61:7a:07:a7:ea:ee:2d:06:08:a6:
2f:ed:42:77:c3:74:23:ef:34:de:fb:da:e2:24:89:
5f:5f:76:3f:b8:a9:a1:0f:b2:3d:33:7d:65:1e:cf:
a5:b9:81:44:5b:98:6e:69:dc:0e:bb:f5:e6:87:61:
89:78:90:58:73:1b:eb:c8:02:0d:37:97:be:e8:54:
90:bf:14:00:08:e0:59:c6:ee:eb:06:36:6d:86:1c:
74:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:3C:C0:84:06:89:7A:B9:70:E2:77:91:E6:17:00:9F:FA:DF:0C
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3b:4f:54:7c:6b:6a:e2:88:6a:d1:57:53:95:69:58:0c:91:
b2:6f:c3:13:1d:9c:24:64:48:2d:3d:cf:2d:df:be:8c:a7:46:
59:24:1f:07:62:2e:3d:7b:b1:63:af:c6:da:35:5f:ab:f1:dd:
35:69:ef:16:16:4a:56:dc:6d:85:0b:63:a9:0b:c6:a0:32:b8:
1a:22:98:4b:fd:65:a8:78:74:bf:68:63:7d:b0:44:24:f3:72:
2f:0a:f9:dd:34:b4:7b:3d:22:5c:3b:82:53:36:9c:7c:2d:9b:
14:83:9d:a9:25:1d:e4:a9:bc:c4:91:c6:a2:61:25:51:ff:a3:
a4:57:df:9c:12:aa:29:d6:2e:73:af:d9:15:fb:ed:5c:2f:7d:
2e:cb:87:de:91:b4:b1:63:a0:d3:ae:ed:6c:c9:f2:69:9a:fc:
08:20:17:ed:60:ea:ce:14:e3:08:95:60:7e:9d:10:c4:d5:75:
97:70:96:92:51:ee:12:b4:ea:5a:ab:ea:50:8b:29:31:65:6e:
b7:c3:0d:19:5a:76:3b:66:88:93:65:20:4f:b5:93:d2:f4:53:
c0:f1:f6:85:96:03:6c:33:ed:2a:ae:b8:c5:97:79:62:55:98:
2d:71:32:05:50:ea:8e:ae:55:91:f7:7b:5a:b4:bd:fe:08:da:
89:be:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:46:38 2025 by rpki-client