Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: q4GKtQEuMRi7Q1dXxzRWOkNV4HYj8iJapmpLueDj1YQ=
Subject key identifier: F7:97:E8:37:BD:CE:98:0C:F8:4E:7C:72:3D:89:8C:5B:12:C5:42:3D
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 0197B890379D273291A041EAFD1275DF98C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 0F35
Signing time: Sat 28 Jun 2025 22:02:28 +0000
Manifest this update: Sat 28 Jun 2025 22:02:28 +0000
Manifest next update: Sun 29 Jun 2025 22:02:28 +0000
Files and hashes: 1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: jxmraF0TENUFBP/hrGDa21N9Cm/CnNEr4RJE22GBTfs=)
3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:37:9d:27:32:91:a0:41:ea:fd:12:75:df:98:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jun 28 22:02:28 2025 GMT
Not After : Jun 29 22:02:28 2025 GMT
Subject: CN=f797e837bdce980cf84e7c723d898c5b12c5423d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:31:73:72:d8:f5:64:e4:75:ea:d4:ae:1a:
bd:6a:7e:d6:1a:ec:ed:4d:5c:b7:f6:ab:38:07:d5:
6d:dc:18:17:8d:b6:68:9b:81:77:39:6d:12:db:2e:
bf:60:be:30:6d:79:6d:7f:92:05:42:c0:94:d5:c1:
56:2a:e3:a8:b5:0e:e7:05:bd:92:44:05:e3:61:89:
ad:f4:64:f7:cf:e8:4c:15:4c:e6:38:a4:25:43:1f:
43:e5:1d:1f:96:5f:19:33:fd:47:97:36:e3:d5:8b:
11:38:28:04:45:65:95:eb:2f:c8:25:94:ce:7c:06:
b5:a0:a9:65:e5:b7:3f:bd:8b:82:d2:25:59:c6:89:
d5:28:3f:5c:2f:e9:9b:75:43:e5:87:6d:c4:eb:e8:
9d:44:ed:bf:b7:84:ee:9a:7a:8f:57:a6:ac:18:70:
2d:8b:af:b7:bf:94:86:4c:73:69:31:83:b5:25:17:
e6:63:ea:a5:46:48:c6:5a:9b:25:f5:35:b6:44:58:
14:9a:65:74:16:92:84:0c:76:75:13:96:62:79:79:
31:80:4f:9b:04:2c:b5:e3:13:64:d6:52:d3:f9:ce:
97:74:e0:f6:41:67:23:55:47:fe:bd:c5:a5:e5:02:
02:a9:94:bf:d4:9f:bb:89:cd:ad:2e:70:4f:94:8c:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:97:E8:37:BD:CE:98:0C:F8:4E:7C:72:3D:89:8C:5B:12:C5:42:3D
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3e:a3:2c:13:6a:67:44:fb:fe:41:17:d0:dd:e2:de:5e:f7:
19:b3:91:f0:8d:36:00:44:3d:e5:06:86:d3:13:30:ad:54:6e:
dd:5e:70:72:32:ba:07:9e:98:7b:29:89:03:7a:48:6b:08:10:
70:57:57:d9:32:76:3c:24:bb:09:7f:49:f1:b8:fb:34:55:ee:
2f:35:04:b6:b5:44:99:6f:03:cb:08:76:61:10:01:b8:f5:a7:
ae:cf:4a:0e:3f:e4:98:3b:85:4a:1f:40:a6:6f:16:e9:31:8f:
de:2f:a0:cd:d7:cc:43:d6:73:fb:12:74:86:e3:5b:be:e3:66:
66:9e:4e:73:ee:57:7c:75:44:57:f9:cf:97:ac:b3:d5:44:db:
49:1f:aa:7b:58:5e:fd:04:fd:18:8c:b5:17:59:35:df:55:c8:
38:b2:7f:8c:8d:cc:e8:61:d6:47:40:46:e9:3e:65:9e:23:e1:
6c:9b:d6:61:f4:2e:b0:72:a0:bb:78:94:92:9d:7f:75:de:32:
f7:57:b6:3f:02:fd:d2:0b:a9:b9:54:86:f2:4e:b5:43:2d:53:
59:eb:45:80:b7:6f:4f:01:de:de:3e:63:54:12:9d:6f:1d:69:
20:4c:57:ce:5f:7b:76:9f:1b:a8:b5:65:b5:3c:d6:72:3f:7b:
70:b2:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:42:47 2025 by rpki-client