Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: XjAK6hyGml8BEEa1AJ4x27uMMIBD8a+q3Hz0X/VakAc=
Subject key identifier: E3:B4:10:21:9D:09:F4:21:9E:57:9C:6A:AC:14:68:A7:1B:F5:6B:54
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 0197C64AE6937C6724A23F0A859719C91252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 0D82
Signing time: Tue 01 Jul 2025 14:01:26 +0000
Manifest this update: Tue 01 Jul 2025 14:01:26 +0000
Manifest next update: Wed 02 Jul 2025 14:01:26 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: 8b839jlZgrSTE9cZoPhpYPwVmyHk86Uz2EWxBVkIBn8=)
2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:e6:93:7c:67:24:a2:3f:0a:85:97:19:c9:12:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Jul 1 14:01:26 2025 GMT
Not After : Jul 2 14:01:26 2025 GMT
Subject: CN=e3b410219d09f4219e579c6aac1468a71bf56b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:fc:2f:24:92:b7:2a:16:7e:02:a1:f4:ad:
5b:a4:c8:ab:8d:96:23:23:75:cd:c9:8b:52:14:58:
19:65:9e:66:4e:47:46:4b:24:34:8d:9b:54:be:b3:
ea:e9:a9:03:aa:4a:9c:c4:e4:87:13:d5:33:8e:01:
58:cd:8b:79:12:08:a5:3c:d6:51:7f:c9:3b:8a:d7:
6d:d2:51:fa:94:6d:bb:85:b8:97:50:14:52:bf:c6:
49:76:5a:2d:06:29:9c:8b:85:43:7e:8f:a2:01:5b:
77:58:44:80:82:d8:1b:2c:e5:57:36:24:bd:89:e8:
9a:55:49:cc:ff:f5:fe:31:e3:c1:4f:df:c5:5a:f4:
73:e4:af:a9:db:c5:3f:37:5f:5d:d4:e1:7a:83:a7:
32:0a:61:3b:84:91:e4:87:aa:db:72:e6:3f:fa:7a:
e2:63:cd:d6:12:03:87:f3:3c:46:e0:e2:88:ba:b9:
25:01:08:4b:b5:88:81:9c:1d:18:54:66:41:03:e2:
07:87:a7:53:e7:c9:1a:40:bc:59:da:bf:2e:0d:0a:
00:6b:fe:8b:c5:89:b4:27:2b:34:f9:db:76:77:60:
d2:91:0d:19:c1:38:3c:3b:97:9e:d4:c2:68:c3:10:
4f:bd:98:50:0a:65:8f:ad:b0:16:51:72:77:bb:ae:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B4:10:21:9D:09:F4:21:9E:57:9C:6A:AC:14:68:A7:1B:F5:6B:54
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:11:7c:e6:c4:ee:69:b0:f7:ad:cf:10:28:6b:5e:68:fb:77:
21:7b:25:f4:c7:8f:1b:a8:04:b6:e5:6c:50:57:14:77:a4:6c:
c6:c0:80:26:6d:9b:2a:3c:78:2c:d3:93:7c:03:db:62:aa:4d:
91:f1:99:c3:7b:10:01:95:5b:59:cc:98:3b:d1:cc:f6:84:91:
df:42:ad:4b:3a:55:9c:77:5d:41:3b:30:db:b4:ed:38:c4:a5:
fb:90:61:70:74:e8:ee:2e:eb:8a:d1:7d:bc:ea:7b:1b:ce:e6:
2b:c9:0a:00:1e:1a:66:9d:9e:e6:96:63:50:22:54:44:a2:fa:
eb:46:e4:8b:2a:09:67:4e:3b:d9:4c:10:31:c9:bf:0f:b8:d4:
f2:4c:df:90:e1:65:29:9d:cd:2c:c6:58:1c:b2:e1:b8:a1:49:
1c:e4:be:73:55:84:82:34:96:a6:dc:89:53:cc:98:1d:b9:b0:
a0:da:0b:6e:3e:08:00:86:7c:e7:52:ec:fc:fa:52:4a:da:8d:
26:c3:af:a8:a7:10:01:7f:15:d8:18:d0:6e:46:05:e9:cb:65:
55:87:6f:52:62:91:54:00:37:9b:43:c2:ea:d0:2c:80:9b:ad:
ea:d1:e0:56:da:62:80:78:6c:4b:06:dd:a1:44:3d:3b:d5:f9:
cb:f2:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:35:15 2025 by rpki-client