Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: LSMxVlRL1+3xnjLFB1PqYnpWXMVwZhZ8EHtkZr6UCpU=
Subject key identifier: 47:4F:AE:26:50:F7:77:CB:C3:CB:55:FA:52:E9:60:EC:85:C6:8B:BE
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 0197B96ADFB420AC5764A358E9F3E28E37EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 1571
Signing time: Sun 29 Jun 2025 02:01:18 +0000
Manifest this update: Sun 29 Jun 2025 02:01:18 +0000
Manifest next update: Mon 30 Jun 2025 02:01:18 +0000
Files and hashes: 1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: 1rU/eMY4ISQ+yDUJm5q4Usb2AwmhdWvYk7IsahRFQGE=)
2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=)
3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:df:b4:20:ac:57:64:a3:58:e9:f3:e2:8e:37:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Jun 29 02:01:18 2025 GMT
Not After : Jun 30 02:01:18 2025 GMT
Subject: CN=474fae2650f777cbc3cb55fa52e960ec85c68bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:0e:4a:26:07:0e:e1:f0:77:10:b8:75:92:
fb:a4:af:3c:b9:e0:d4:30:9e:5c:47:29:21:24:37:
21:92:28:ce:fc:2e:86:3d:41:82:d9:14:3b:17:aa:
23:d3:d7:82:84:0f:a8:eb:8a:f4:06:fc:64:d8:42:
a4:6f:db:dc:0d:d0:7f:f4:79:8b:f6:d2:7e:8c:d0:
ee:bf:8c:b6:04:98:3b:7a:82:88:00:9b:47:49:71:
a0:82:de:3c:5c:94:e2:06:5a:bf:bf:32:11:e6:08:
27:fc:3e:a8:7b:6c:9d:ca:75:a9:15:4f:9a:2a:0e:
89:78:ec:d9:0d:43:70:29:83:b1:df:91:77:7f:c3:
41:f5:80:25:bd:30:46:a8:05:f7:c2:67:7b:cc:56:
83:43:63:a9:8c:45:ad:81:17:5a:3a:8c:d9:a6:c8:
90:f1:57:10:9c:8b:e4:90:20:34:2d:9c:6e:9e:bf:
bf:9b:a8:1b:a3:89:9b:12:81:ac:31:6e:40:65:74:
2a:54:28:63:d3:40:79:45:7b:bd:16:ef:dd:1e:08:
61:51:1b:75:ef:74:72:21:00:19:85:08:c5:bf:5e:
92:43:fd:d6:64:25:b0:4a:81:36:02:eb:52:dc:2a:
8e:dc:50:57:4a:28:83:82:ce:95:8e:65:91:7a:9c:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4F:AE:26:50:F7:77:CB:C3:CB:55:FA:52:E9:60:EC:85:C6:8B:BE
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ef:bb:00:76:27:13:53:88:8c:a1:34:08:1c:72:95:8b:60:
2a:38:4b:5f:22:6e:9b:3d:96:79:05:b3:2b:33:a0:58:91:b9:
ba:d3:8c:a3:23:32:f3:59:90:f3:0a:aa:a3:39:1c:a4:cd:6c:
ab:93:57:4b:d5:d3:4d:b7:c9:40:85:35:a0:c5:8e:d8:fb:35:
79:60:d8:f2:b0:ce:86:19:02:73:74:32:9f:15:6a:cb:d6:bb:
6a:37:76:47:ab:b7:0d:20:45:85:df:3f:71:b4:a7:d7:c0:ca:
90:c9:e5:7c:af:33:6b:10:15:8c:4d:d2:a5:42:72:01:4e:dd:
f2:b7:73:2c:7a:69:c8:b3:a2:d4:e6:60:5c:eb:53:10:a2:28:
b5:b0:f7:24:d5:24:75:16:83:8a:68:e4:5f:f4:d6:93:7e:f8:
cc:7a:b7:9d:1b:6a:b1:00:b9:fe:33:2e:a4:e5:6c:c4:56:08:
b2:67:7f:2a:a6:08:cc:4b:55:11:d3:88:b2:4d:13:c4:a4:0f:
39:d8:f3:e1:38:10:8f:52:c9:fa:94:08:10:47:43:03:18:d8:
50:7b:2d:57:5f:c1:91:b1:9e:3a:64:43:61:8e:0e:f8:e1:ae:
ec:a4:2a:08:0a:85:86:20:97:54:46:be:f0:21:2c:36:c0:e7:
77:13:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:29 2025 by rpki-client