Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: 7Vpw9P3mP/w3qu6mTkeIE2mGMPKdLteYCUgZC0WOoDI=
Subject key identifier: BB:46:05:67:28:2A:DE:0C:72:2A:6C:47:C5:B9:21:57:F6:7E:6B:5D
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 0197B821247BB7094B61F0A733ED11F0557C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0A4B
Signing time: Sat 28 Jun 2025 20:01:09 +0000
Manifest this update: Sat 28 Jun 2025 20:01:09 +0000
Manifest next update: Sun 29 Jun 2025 20:01:09 +0000
Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=)
2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: hHNnId4Ay2i97XzxtZis+9RHODHYWCCx7X/jZlekNLM=)
3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:24:7b:b7:09:4b:61:f0:a7:33:ed:11:f0:55:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Jun 28 20:01:09 2025 GMT
Not After : Jun 29 20:01:09 2025 GMT
Subject: CN=bb460567282ade0c722a6c47c5b92157f67e6b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:06:53:74:40:55:2d:f7:45:de:e3:3f:62:
91:09:6c:5a:a2:75:92:85:42:26:4c:02:f9:38:76:
10:cc:bb:62:ef:9d:99:b8:f3:76:7b:03:98:4f:a2:
1c:a4:88:2b:eb:ba:83:99:c9:23:31:fb:c3:6f:80:
6a:d5:d1:f3:d8:49:a4:d8:a8:11:dc:f4:75:4a:85:
b9:91:09:b8:46:eb:2e:ab:0b:f6:93:4a:5c:f0:b4:
7f:85:bb:62:00:6a:b0:5f:f7:95:c3:29:8b:48:f0:
32:18:37:4f:06:5c:e4:6c:98:ef:cb:46:1b:4b:ae:
41:cf:0f:26:39:c0:33:7f:24:8e:bd:4a:71:c7:85:
72:56:82:9f:d7:b7:e6:0d:07:9d:14:7b:f1:b2:d9:
6b:73:75:60:fb:70:11:bd:98:92:42:22:6e:1f:85:
af:4c:35:c8:e7:36:73:77:24:40:f3:14:76:82:bb:
e4:16:8c:76:57:fc:f8:5a:6e:24:3d:fc:24:d3:6d:
fa:57:f8:de:a3:cf:d1:a5:d3:a7:0b:01:6a:ee:57:
dc:91:7c:a8:57:8c:2f:af:55:2a:6e:73:a9:d5:81:
f4:0f:d0:66:e9:f6:dd:e0:80:e6:89:0f:f7:05:b4:
6a:9c:16:18:76:f5:ab:04:dd:03:00:6a:8e:b1:e5:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:46:05:67:28:2A:DE:0C:72:2A:6C:47:C5:B9:21:57:F6:7E:6B:5D
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:64:0f:b9:77:d7:74:e6:71:26:cd:67:10:c6:69:d2:ca:ea:
f9:3e:cd:ac:7b:02:12:1d:fb:3a:2c:c1:5d:c6:f8:7a:5d:b9:
80:83:91:4b:25:72:a9:c1:18:90:04:53:66:0a:0f:b4:63:81:
4c:8c:0e:7e:d8:8b:c8:4f:64:33:42:df:91:0c:7e:ef:a6:77:
80:78:bd:cb:00:a1:cb:8b:e3:cc:df:e1:f1:16:60:dc:67:6c:
da:0d:2d:d8:7d:5b:45:5e:b2:94:48:7a:dc:2c:d9:35:32:ef:
71:6b:0d:bc:ee:18:11:22:2b:9c:83:a4:52:e1:3b:68:ce:7b:
ea:5b:02:66:2d:3e:5b:76:2c:55:4c:c9:af:9c:64:b9:e7:dd:
e9:c3:5a:d6:12:6d:ac:f9:b4:f3:63:c3:b6:62:3f:cf:a9:58:
07:fa:69:1f:83:df:c7:2b:2b:ed:98:35:f5:aa:c5:72:ab:f9:
49:87:24:c4:2e:9d:03:89:9e:3c:cb:a1:39:53:94:59:37:4e:
0f:74:fc:03:4a:b0:fa:3d:8e:ce:a0:2b:45:99:44:b0:50:55:
e6:e0:20:7e:5a:56:5a:2f:de:ad:49:49:5d:e5:9d:b2:ab:9d:
e1:ff:ba:67:d8:a0:73:b9:34:80:8c:e4:58:7f:bf:d6:c0:39:
32:7c:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:49 2025 by rpki-client