Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: 0MTgd+sE2yzve3un+e3rrcznqeY8oqKQUj8FWj5ZiCI=
Subject key identifier: D5:65:16:B7:8D:2E:53:24:F5:DF:5A:D0:C3:60:90:89:29:3D:33:38
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 0197B7EA8473F96DC1FAC596CD1AECBD5DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 067C
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: 3QwrorCuh7GS98EL3gwovZRkPjuO/nWKFO1dMBdvOvM=)
2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:84:73:f9:6d:c1:fa:c5:96:cd:1a:ec:bd:5d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=d56516b78d2e5324f5df5ad0c3609089293d3338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:9c:cc:07:f6:04:2c:ea:67:0f:cd:9e:30:
12:bd:b9:53:15:5e:b8:c4:b9:23:19:db:b9:ca:8f:
66:f3:6c:bb:00:62:35:5f:db:4e:4a:8c:36:38:0a:
77:13:9c:f2:ef:24:02:2e:1b:cb:fb:fd:ec:b8:d2:
52:a8:33:a2:07:55:a4:32:ec:5a:0e:80:12:0d:b6:
1a:6c:b5:da:6e:6f:32:0f:71:41:05:86:cc:04:34:
ed:bc:3e:ef:77:1a:cb:64:e1:23:2a:a4:5b:50:6a:
b2:9b:ef:40:77:e0:7f:20:ad:5f:00:22:ef:b2:c5:
9f:28:20:b5:68:72:00:b6:db:a9:6a:1c:36:20:16:
32:a3:c0:0c:41:6d:08:c1:31:0d:82:45:82:46:9d:
f4:2f:b7:fa:ce:be:e9:82:21:4d:7d:2e:67:d0:f0:
e8:ed:c9:f3:68:f5:37:97:96:4a:34:3c:74:32:03:
99:67:81:de:c2:ba:07:93:6d:e6:de:05:17:8d:ff:
bb:43:b3:33:e9:a6:a0:cf:a8:f9:55:1b:c1:04:5a:
ae:1c:fd:fd:82:42:12:c8:98:c5:7d:b8:d3:16:5a:
5e:33:e5:ee:0b:fb:11:42:fa:5b:1c:fd:3f:f1:b4:
6e:b7:48:08:a8:a0:e4:12:99:0a:b1:9b:98:3b:2b:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:16:B7:8D:2E:53:24:F5:DF:5A:D0:C3:60:90:89:29:3D:33:38
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fc:c0:eb:51:eb:c8:37:7e:4a:6b:72:02:e2:5c:1f:61:0b:
4c:fd:2b:ae:6f:9d:b6:ca:fc:37:6f:ca:fd:4b:30:54:20:d2:
8a:15:80:d2:8e:d3:42:d4:f5:02:ec:43:ae:48:23:72:57:b0:
4b:dd:2c:36:66:65:2a:4f:8c:3e:98:a0:37:12:d2:eb:48:92:
79:38:71:88:e6:eb:7e:13:d9:83:8a:89:b5:bf:1a:71:fa:c6:
1b:ee:77:97:a9:1e:02:f3:f9:9b:85:d7:77:c4:77:00:7c:0e:
d2:1d:86:bf:a8:69:03:c3:6d:ce:c7:92:0e:ce:b5:a2:94:e0:
36:e6:f6:51:ea:94:97:f1:12:61:8e:a0:8d:b9:17:d5:7d:de:
a5:ae:52:c3:35:9b:11:f3:64:d7:9e:0d:f2:9e:47:a6:0d:05:
05:8e:cd:4d:0a:0b:10:7d:f6:41:87:82:2e:81:81:e2:4a:37:
02:a0:5f:40:76:df:c6:ab:ee:7f:2f:cd:82:53:11:27:57:67:
c1:b0:2b:b9:ee:c3:b3:37:96:7f:a1:ed:26:92:f1:73:c2:a9:
5a:e5:95:d6:79:35:db:0e:8d:54:7b:fe:f8:ae:f3:3a:88:39:
d8:a3:ca:e5:57:08:ba:a0:82:03:a0:08:56:1c:73:08:ab:72:
27:70:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:17 2025 by rpki-client