Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: 7smDguvp9Q99n2wM0pUBfIpMnh50DXFmnDtN9Hiisk8=
Subject key identifier: F1:3B:29:72:13:77:B2:CE:96:4E:F8:BA:2D:EC:8C:50:63:43:16:AF
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 0197B933C8A4B092709AA2C97F633DAAAB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 124D
Signing time: Sun 29 Jun 2025 01:01:08 +0000
Manifest this update: Sun 29 Jun 2025 01:01:08 +0000
Manifest next update: Mon 30 Jun 2025 01:01:08 +0000
Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: 3sxKsb8frKB8ibtgSzc4g5A/rasOy6kXGh/nOu7Tz7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:c8:a4:b0:92:70:9a:a2:c9:7f:63:3d:aa:ab:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Jun 29 01:01:08 2025 GMT
Not After : Jun 30 01:01:08 2025 GMT
Subject: CN=f13b29721377b2ce964ef8ba2dec8c50634316af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:9e:6f:58:94:d1:49:b3:48:0e:d2:98:3c:
dd:36:09:b3:9e:ae:b7:8d:48:72:73:b2:54:b4:93:
eb:21:36:d1:85:9e:1b:a3:1c:17:ce:71:48:53:08:
13:43:66:e6:5e:95:b1:d6:e2:ee:4e:bb:f1:09:f8:
eb:c1:6a:f5:ca:c9:02:0d:46:5f:77:dd:69:4b:d4:
31:99:0d:6e:62:69:f2:90:58:91:7a:32:ed:38:97:
ce:37:7b:5f:54:1c:b0:f0:29:73:68:03:19:55:62:
c4:17:f8:63:88:89:19:08:d2:de:df:27:2d:11:4a:
b3:1c:aa:2e:85:28:86:a8:e8:5d:7e:14:98:ef:af:
4b:e7:af:48:e1:a4:3f:65:6f:14:0f:a0:c7:9f:93:
81:d1:af:b2:7c:5e:f0:7a:9f:57:29:be:3c:fe:51:
c6:c9:90:9c:13:cf:86:a7:75:8d:25:5c:93:bf:97:
bb:d8:04:c0:b3:24:68:9d:b8:6f:d2:f4:67:92:75:
b3:f6:07:29:41:9d:d5:3e:4b:a0:2f:05:98:32:25:
e0:40:23:53:48:40:bb:0f:37:50:6d:dd:e5:18:16:
82:be:42:b8:e5:27:ac:82:3f:c7:e2:b9:ab:f2:cf:
74:48:4e:74:c5:41:9c:3f:ab:8e:dc:5b:ac:35:bd:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:29:72:13:77:B2:CE:96:4E:F8:BA:2D:EC:8C:50:63:43:16:AF
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:21:d2:cc:2c:61:60:2f:93:b8:6c:f8:ca:07:1e:58:b0:0b:
73:bf:ff:ba:d8:1a:c4:76:34:97:8b:59:8f:88:f6:8f:6f:51:
70:53:0f:5a:42:9d:fc:83:76:91:aa:ae:39:90:d4:fb:c8:df:
1e:18:c0:e5:ae:b9:31:e6:87:9d:7f:8a:fe:4d:06:a3:30:29:
c4:f2:87:55:16:f1:0b:1a:5a:c4:d8:c4:e8:c4:ff:78:33:35:
ce:ab:b2:ee:af:ef:c9:c7:ec:4a:49:28:bc:d1:ca:97:c3:42:
72:c1:76:37:37:e2:31:d2:ce:64:58:87:f5:69:93:3f:fe:fe:
fa:ba:70:b2:cd:ac:3e:ab:16:2e:6b:a5:5e:2f:16:e1:da:65:
17:d1:63:c8:89:b1:35:f1:13:b7:30:84:39:c7:14:db:18:13:
c6:16:1c:eb:ee:d4:2c:48:3e:4e:39:88:f4:84:c4:92:7a:1e:
6b:2a:19:9c:36:8a:4e:8a:1a:9e:2f:e1:cb:62:cf:d2:02:50:
7a:1e:88:00:89:05:e2:58:8f:de:1d:bf:97:57:de:a4:9c:da:
07:2d:d4:66:8a:d9:f6:c1:18:4e:9b:1e:ba:bc:55:57:34:33:
5a:0b:46:8c:c5:22:43:b1:ee:a6:0e:82:65:10:f7:34:7d:a3:
20:7e:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:57:50 2025 by rpki-client