Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier: HXkIuqCq+Ynb/rraa/NoH0mW5uVtaBEYHBJvlfgh2CY=
Subject key identifier: 38:B8:17:37:4E:ED:36:B7:BB:43:84:DE:EA:E1:6D:CA:E5:82:2C:40
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial: 0197B70EA6FA954C35A13F17DA1954FAFDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number: 02CE
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: XNYEWDc9qjUgnLHyKFWA785bUD7NnceqF2Deu55AWj4=)
2: mjk_9mBIX2K41ASneFahi5WxQms.roa (hash: qL7nGWS3Awht9PmP0vDzSTXhKhc/jIpjX536PZtB9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a6:fa:95:4c:35:a1:3f:17:da:19:54:fa:fd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=38b817374eed36b7bb4384deeae16dcae5822c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:6a:6a:65:a9:7b:15:4c:ef:42:cd:b5:ed:
eb:47:16:b0:b4:af:3d:c3:43:20:e4:7c:77:8c:6b:
96:6c:4e:fb:ed:f7:ea:ad:0c:7a:dd:1a:b1:d4:55:
e8:2c:38:6a:12:91:8a:07:43:d4:ad:70:0b:a0:28:
47:5a:5f:26:f0:66:a2:9e:e9:85:5d:f9:54:dd:b0:
6d:91:a4:5f:35:63:12:54:af:6d:0d:72:57:da:6a:
6f:c9:4b:1b:92:60:e1:e3:bb:3f:b9:64:33:df:06:
ac:18:e9:e8:b2:d0:c5:7f:f0:c6:38:6c:36:6a:0c:
bc:e2:f1:09:55:5a:a5:dc:a1:ac:9e:6c:d6:7b:38:
a3:c6:23:af:5b:62:ed:58:8e:69:03:6f:78:e5:0d:
8f:89:7f:ac:55:5a:d7:13:13:a5:f0:61:99:88:12:
31:1f:4b:b8:20:35:b2:42:83:c7:7f:ee:15:a9:c1:
82:94:6f:d4:c2:95:07:06:fb:9f:f1:1c:06:b3:cd:
6a:2e:b2:62:e3:4e:63:b9:15:d7:37:22:66:25:38:
ae:05:93:a1:fb:e3:46:9a:89:49:bf:bb:e8:9c:de:
f1:d8:c6:32:94:7e:aa:d5:63:4f:36:b3:c4:19:08:
98:33:2d:42:cb:5e:27:2a:47:1d:4f:98:9b:9f:9b:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:17:37:4E:ED:36:B7:BB:43:84:DE:EA:E1:6D:CA:E5:82:2C:40
X509v3 Authority Key Identifier:
keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:87:8c:12:ec:17:1e:ba:9e:2b:c2:ba:42:bf:a7:7c:ee:01:
a7:21:2f:ea:f7:a0:02:0a:a5:ef:13:44:d0:32:18:bc:da:4c:
3c:d0:50:be:35:d9:25:9a:af:fb:e5:5a:19:63:84:ba:f0:25:
73:16:c2:9a:06:31:18:75:07:e9:e7:b6:c9:d4:d8:87:da:31:
07:f9:f8:71:a3:1e:34:ab:58:2b:8b:e9:de:4e:53:06:a7:7d:
39:1f:5b:11:6e:02:43:95:85:57:69:3c:72:35:84:5e:09:ad:
36:65:ca:a0:eb:dd:22:99:af:71:dd:83:01:23:a7:16:62:5c:
83:04:4c:2a:0e:29:dc:a4:4a:4a:ad:09:9e:b5:04:f7:31:da:
01:87:cc:78:7d:f9:9e:df:7b:2f:68:4b:f8:14:6b:d1:7d:1b:
60:00:c6:50:4c:53:37:9c:32:05:80:31:ce:e2:d0:17:1d:50:
b7:66:05:db:7f:fc:99:c5:af:32:c0:05:ee:59:4b:55:9d:67:
ae:e6:2a:6a:d2:43:5c:21:f2:ed:50:d1:77:a3:43:77:b1:96:
a1:ee:d7:b0:f3:47:9e:66:a2:3f:d2:77:89:59:02:6d:7a:f2:
00:0e:fc:15:69:4f:7c:1b:fc:9f:71:95:5f:98:f7:b9:60:a8:
88:45:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:02 2025 by rpki-client