Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: u+9a66asUBXO071gzMxg91WxFp9Cx+KQ3knCh/aHe9g=
Subject key identifier: C1:1A:3F:B2:57:4B:47:22:96:AB:15:96:B4:B9:69:7D:1C:49:3E:35
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 0197B7454681973D3AAA18994B50BB5D29FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 0759
Signing time: Sat 28 Jun 2025 16:00:59 +0000
Manifest this update: Sat 28 Jun 2025 16:00:59 +0000
Manifest next update: Sun 29 Jun 2025 16:00:59 +0000
Files and hashes: 1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: FRKX2cmDFtAgcnLqlKAG3EY5ioO1jzwGhLaI6mD6jfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:46:81:97:3d:3a:aa:18:99:4b:50:bb:5d:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Jun 28 16:00:59 2025 GMT
Not After : Jun 29 16:00:59 2025 GMT
Subject: CN=c11a3fb2574b472296ab1596b4b9697d1c493e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:5f:55:85:72:0a:c3:ba:29:94:71:91:f8:
75:b4:5e:ce:b5:bf:09:b7:0c:5b:aa:b7:95:c3:86:
fe:c1:27:3c:f7:3e:3f:e1:9c:6e:3a:bf:46:e5:02:
aa:95:79:f2:0b:c1:6a:27:b7:2e:76:8d:4a:dd:62:
e2:9e:65:3f:88:18:84:dd:f0:be:f7:a4:10:f3:23:
3b:ac:80:05:fc:4c:15:75:91:b0:87:f5:5a:3e:5f:
4e:b4:6f:b7:08:00:96:1e:0e:bc:74:9a:ea:9a:a6:
b1:3e:ec:60:59:b1:df:d8:b3:12:04:f3:c2:64:3d:
cc:eb:a2:79:d9:0a:b3:6b:0f:7e:b7:18:ac:4e:c1:
38:1a:a8:a8:a0:e0:98:66:ba:d8:6d:c5:30:d8:fe:
8b:57:00:fc:b7:0f:89:54:7b:7a:e8:7d:ca:f0:6c:
74:9d:b7:80:4b:d1:7a:c6:b5:7e:84:45:76:a3:94:
47:ee:fb:f6:c9:5d:50:c2:d6:e8:50:43:80:df:be:
bd:9a:b9:94:0f:22:f6:3c:e9:14:2a:94:54:9c:0b:
3b:cb:36:e1:99:76:2e:82:1e:21:3f:ce:3e:5e:30:
91:96:bd:5f:ad:99:a6:f8:f3:25:46:24:1b:66:00:
fd:10:4a:24:1e:e1:d9:7c:22:24:2b:a2:8c:78:f4:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1A:3F:B2:57:4B:47:22:96:AB:15:96:B4:B9:69:7D:1C:49:3E:35
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cb:48:a3:f4:66:f1:d1:ca:4c:f4:7b:05:91:ea:91:b1:ab:
a4:47:87:29:d5:5a:89:a8:5b:2b:a4:99:e3:06:62:db:43:56:
55:0f:e4:b2:31:df:d7:d7:e3:94:80:bc:5e:06:f4:67:61:28:
4c:88:d7:ca:0d:06:ff:ba:ae:2a:81:7b:b0:13:8c:44:ca:c1:
cd:7a:81:1c:41:1d:5c:a8:2e:3f:f7:f6:3b:ff:33:b3:80:e6:
8e:a7:cd:f5:08:ee:8c:13:cc:9e:2c:ec:05:07:ea:1e:a7:e2:
ad:9b:6c:d1:f8:f8:09:88:a9:50:f4:ab:7f:51:f0:f0:62:25:
7d:3b:64:f4:39:17:0c:5f:04:c8:53:c9:a4:46:cd:99:af:56:
9a:c9:b2:7c:d0:2d:8c:0f:d9:bf:a0:f6:37:cf:7d:5c:15:6e:
23:7e:0c:fc:7e:41:fa:9b:8d:29:49:ec:9e:21:e3:34:af:21:
6d:b0:bd:b6:25:44:36:a4:f5:91:53:93:08:e6:91:94:e3:bb:
6c:f6:da:48:e4:3e:68:66:26:72:6a:9b:0c:e4:f7:e2:84:94:
70:c3:9c:79:5e:4f:ab:ba:dd:94:70:af:2c:f8:5c:35:8e:59:
8d:ae:3d:7c:68:67:72:2f:b7:31:49:47:72:31:a4:43:a4:12:
55:38:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:11 2025 by rpki-client