Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: vm0ZzLDNHTCY6Md/Cr2sdBX56OGCflz1+aWSm09uDqQ=
Subject key identifier: D1:A1:C2:0D:45:C0:1A:C4:62:DC:99:0B:F8:2A:95:EF:C0:11:B4:4E
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 0197B70EDD7E3AC1734713A2A42C6A6AD550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 12C2
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: sFNDISDbmIWWNdYvN6GfPuYYySH+MS8/8sIyv4MF1LE=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:dd:7e:3a:c1:73:47:13:a2:a4:2c:6a:6a:d5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=d1a1c20d45c01ac462dc990bf82a95efc011b44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:43:f8:45:31:2f:87:59:68:ca:a0:77:e1:
75:a3:8b:5b:b7:7f:9f:69:a8:2b:be:c7:ec:0a:14:
9d:96:23:db:ee:2f:a5:37:84:8e:fb:50:59:54:56:
b7:8e:f4:f6:3d:8f:07:34:e8:08:be:5d:d3:1c:ba:
ca:c9:ac:06:82:3f:e0:07:7a:e9:67:00:98:fe:6f:
b9:5c:e3:3c:76:47:23:36:98:6a:4c:ec:a9:06:0d:
81:2e:d9:a1:f6:69:8f:52:f7:5c:2b:cc:40:91:54:
fc:16:60:92:9f:01:f7:17:e3:7b:e8:70:4f:82:b2:
d0:ec:54:0d:e8:9c:e2:83:f1:dc:1b:b2:e4:89:1d:
a4:be:35:1f:55:4b:92:4e:cb:7e:18:46:8f:66:2a:
16:9a:ec:b9:b5:cf:95:35:00:05:0e:b7:c0:28:08:
1b:5f:81:77:b5:0d:fc:16:29:64:c7:14:a7:bb:1e:
57:ce:f8:76:f4:76:4b:96:f9:83:36:0c:72:a0:ef:
bb:a7:70:6a:5a:5b:72:ec:99:da:59:a5:4e:22:da:
f8:b3:a0:9d:6e:7d:e1:ae:95:bb:3b:79:2a:5b:db:
8f:1e:5c:ef:94:68:2e:67:83:0b:fe:5e:0c:49:dc:
ac:76:f3:0e:2c:e9:c9:e7:77:23:0e:79:70:07:5a:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:C2:0D:45:C0:1A:C4:62:DC:99:0B:F8:2A:95:EF:C0:11:B4:4E
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:49:a8:c8:b3:d3:86:ef:07:e6:3f:4e:e0:2a:e1:7a:ed:
31:69:69:32:41:4b:a0:f7:98:d3:9d:5a:11:4e:7a:52:08:1a:
12:cd:49:b7:d7:12:b7:01:26:47:e6:f9:cf:56:b9:8a:59:b5:
3f:97:2e:ab:42:71:03:d3:1b:e5:e6:1b:0d:74:a1:07:4a:1a:
f0:d1:0f:5a:c0:ed:b2:8e:28:d8:f6:a8:ea:1e:96:cd:04:ca:
bd:10:2d:63:14:8c:3c:98:68:0c:a9:d4:1e:87:b0:71:01:42:
56:84:51:75:ce:e8:72:35:37:f8:f6:74:6e:9c:08:43:bf:9a:
e2:47:df:74:90:4e:11:fa:30:82:2d:b9:28:ad:57:d1:74:e7:
19:71:36:b2:05:47:77:d6:d9:aa:5b:74:62:01:67:97:f7:b1:
ae:e3:d3:aa:5f:c3:9a:f5:90:93:28:91:9d:f2:c0:0f:1d:b4:
64:ad:39:71:4e:6f:dd:98:1d:d9:f0:7e:85:19:b5:df:f7:be:
6d:6b:d3:1c:9d:d8:87:6c:c6:b8:ca:df:42:8e:82:d5:ec:9b:
c7:2b:ea:47:41:f6:60:e0:2f:64:d5:d6:42:7c:bb:4f:3c:6e:
ee:37:bf:e2:7c:d8:31:09:9e:21:4d:6b:cb:e2:26:9a:2e:ff:
eb:68:a4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:22 2025 by rpki-client