Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: Wq2hrpddeS1JkmN6CJiqASgzRjH+GMtmuHEV0cIHsaY=
Subject key identifier: 9B:34:7A:51:36:85:84:E8:C4:C5:16:7B:50:CA:2E:29:EA:BA:AD:DD
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 0197C0ED0E7C8E2DFDE951EC3B4CF5C21ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 13:00:50 +0000
Manifest this update: Mon 30 Jun 2025 13:00:50 +0000
Manifest next update: Tue 01 Jul 2025 13:00:50 +0000
Files and hashes: 1: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (hash: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: QtwgvnBPrcMz4bnPlwH7NYGBSwO4IExbHwEljsMjAOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:0e:7c:8e:2d:fd:e9:51:ec:3b:4c:f5:c2:1a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Jun 30 13:00:50 2025 GMT
Not After : Jul 1 13:00:50 2025 GMT
Subject: CN=9b347a51368584e8c4c5167b50ca2e29eabaaddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:06:71:13:61:89:5e:b1:4c:b6:84:66:34:
09:42:70:7c:c8:f4:4b:a9:6a:60:c1:dd:05:b6:4e:
3c:c7:9e:e9:b6:78:40:9e:3c:bb:71:06:4b:5b:34:
e0:d1:7e:f3:a2:7a:c0:35:c3:d6:89:18:08:a7:a9:
d5:9c:9a:d5:e8:09:d1:13:64:8a:ae:70:dd:4b:21:
c0:ea:3b:e5:6f:71:d1:02:30:f6:8c:b4:9c:1e:7a:
2a:ae:6a:d0:de:6b:ae:85:d9:4f:70:09:f3:21:74:
31:be:e0:0b:33:e2:55:e5:ac:53:17:b6:b5:ec:ee:
00:35:f3:67:12:8f:35:e8:bf:fa:41:3c:86:6d:47:
fe:be:31:70:1b:b7:7d:6c:dc:3e:c8:a0:79:0f:5a:
7e:0b:83:55:75:c5:70:a4:14:b4:a5:06:38:f1:7f:
4b:40:f4:44:59:ec:70:b8:99:10:df:bc:c4:fd:a6:
c5:4b:05:ac:f4:21:50:de:1c:14:65:13:60:66:fa:
81:69:b9:1f:43:20:eb:35:6b:66:f6:3e:ce:98:07:
ec:ab:eb:d4:cc:4f:0c:51:56:cc:dc:d6:82:92:52:
b1:87:e1:1a:b8:e1:52:e0:e2:38:5b:eb:b8:ba:a6:
ef:35:a3:70:a3:f9:df:84:55:7a:82:21:a0:9c:f3:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:7A:51:36:85:84:E8:C4:C5:16:7B:50:CA:2E:29:EA:BA:AD:DD
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a8:2f:af:c8:2f:4b:a0:ef:7d:4a:76:cc:e7:97:2b:6e:f7:
f2:1e:d8:9e:42:1c:b6:f5:ad:2f:ed:3d:15:aa:a3:62:22:e9:
66:fc:3c:ad:1d:76:86:60:f2:28:20:b2:3a:3b:d1:d1:2c:8f:
54:0c:0a:45:43:7f:3f:6f:7e:ac:80:91:a2:89:94:b0:d9:11:
3b:cb:09:5d:e0:a0:7d:a4:a3:69:0b:aa:87:fb:84:a0:79:7f:
73:8e:d3:41:fb:e9:0e:35:2e:c3:34:12:aa:28:b0:fe:fd:06:
a7:c0:91:e6:57:bc:91:2c:a8:66:e6:54:73:f3:2c:40:a3:d6:
cf:20:bb:36:d1:8c:30:c4:f3:d1:cb:40:0a:e5:70:c0:2f:a0:
17:90:41:9d:82:30:a6:df:0a:b9:83:5f:68:99:4f:f2:6d:2c:
67:2f:3d:13:39:e6:ae:bc:b7:59:e9:94:cc:52:ae:a8:39:11:
64:ae:fe:49:a7:c4:c6:ec:ac:2f:3d:cf:0e:56:d2:ec:12:e1:
7c:33:df:e2:de:a9:78:4c:56:08:38:eb:73:a8:76:40:2e:2e:
24:8e:e5:15:81:1e:94:ed:ab:3d:23:7f:06:73:30:37:32:0d:
86:d9:89:da:a1:1f:bf:c7:6d:b9:d6:17:03:8c:3d:38:36:cc:
0d:f6:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:06:05 2025 by rpki-client