Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File: azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier: xiauIqlu2KtQWLMG/LeP6FCuo3pnFI2KVJ45T9YU8gY=
Subject key identifier: 88:88:39:43:DD:6E:A0:DB:33:D7:12:D8:87:92:CE:17:43:B9:AA:BB
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 0197B6A115BF67C3DEBF68E372BDA5CD7ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 13:01:39 +0000
Manifest this update: Sat 28 Jun 2025 13:01:39 +0000
Manifest next update: Sun 29 Jun 2025 13:01:39 +0000
Files and hashes: 1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=)
2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: 5jO7Wsj1AeEmvKQnJgSwQOu6BLZKZyR9H69jimIgjBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:15:bf:67:c3:de:bf:68:e3:72:bd:a5:cd:7a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Jun 28 13:01:39 2025 GMT
Not After : Jun 29 13:01:39 2025 GMT
Subject: CN=88883943dd6ea0db33d712d88792ce1743b9aabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:1e:0c:e0:ef:0a:d2:6a:a3:5d:7c:fd:b7:
cc:98:e3:ef:20:d6:61:9f:cd:39:1c:48:d1:0a:f8:
88:7b:97:26:95:f2:02:8a:ea:3e:b9:f6:2b:b4:52:
1b:62:f2:b7:77:d6:84:4a:94:c0:e2:73:69:e1:f7:
ca:5b:99:f6:52:27:76:a9:9f:0e:97:96:7e:d5:4b:
d4:ba:bd:d7:54:38:91:70:98:09:bc:42:8e:57:87:
ae:e5:d8:67:79:78:71:ed:62:ff:bb:5d:9a:5e:4d:
c3:34:ba:f5:cd:91:71:d5:41:ca:ab:99:6c:07:9b:
e0:8e:8b:11:1a:5f:75:01:2f:fc:d4:f7:8b:dc:ed:
8f:e1:3b:81:08:36:3d:5c:d7:05:ac:aa:b1:5b:59:
ac:91:af:e3:e1:c8:03:11:32:9b:c7:9c:0f:10:ad:
37:92:41:74:66:7d:38:ab:36:15:36:30:81:96:b5:
f3:c0:60:2f:ff:19:7c:96:43:25:01:d5:5c:17:7f:
9b:79:61:7e:d3:57:38:18:41:6c:26:35:f8:91:d8:
cd:cf:0a:dc:7e:19:47:69:fa:ed:53:e8:dc:98:53:
ec:5b:78:9f:30:9a:88:72:5c:0f:a7:8a:57:ff:63:
ec:ae:94:b5:51:c3:75:5b:be:fa:9e:40:08:02:88:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:39:43:DD:6E:A0:DB:33:D7:12:D8:87:92:CE:17:43:B9:AA:BB
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b9:6a:6c:b4:b9:35:03:94:dd:6d:6d:53:43:70:00:d0:ce:
16:bf:69:d2:32:6c:5b:62:2a:0b:0d:5a:4c:a9:b0:59:a7:10:
0f:94:1e:4b:a1:eb:f1:9e:ad:3a:64:ee:96:c0:17:15:5b:a9:
54:2e:a4:82:22:e5:77:86:7f:c6:9f:2e:15:5f:fc:5f:61:ff:
6a:e8:08:98:36:0f:ae:f5:d7:96:34:7e:3c:ff:2a:b8:a7:6c:
c3:24:f7:1a:f5:1e:aa:d8:f5:95:11:0f:92:57:f9:6d:94:39:
93:88:15:10:64:77:3e:d7:8f:eb:d9:c1:28:68:c6:a2:5f:ad:
ab:c2:d2:2f:46:81:bd:50:ab:1a:d5:f7:7c:af:c0:c0:43:d5:
cc:a8:16:72:d1:22:60:b5:4e:63:d6:f2:6d:ea:89:7d:75:c8:
a3:b5:db:67:b8:bb:ed:f3:c2:ff:2f:6d:48:79:e4:94:cb:f8:
b1:6e:48:10:54:49:6a:0f:a7:b6:5d:cf:8f:fd:8f:a7:78:66:
4f:c3:6d:45:1a:50:91:14:02:f6:55:c9:f7:8c:59:9f:5c:15:
45:c8:41:3e:7d:2f:fa:cc:a2:bb:33:66:d3:94:c7:0c:3d:7a:
b9:44:2c:95:82:bd:8e:8e:5e:fd:ec:dc:56:28:6b:e9:d2:cd:
74:2b:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:14 2025 by rpki-client