Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: cFQMpYEvmv7WfUdpQtOrmZSpEX7Mq+KZCv91gq05WOw=
Subject key identifier: 6A:28:A9:A6:14:83:1D:D6:51:EA:C5:43:D4:9D:28:99:B2:30:02:55
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 0197B6A0A291FA44C71D96528B41D4C2A86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 0E7E
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: 7M-OD2BZKTGFt1pigwcJKxVnusA.roa (hash: 75qUp+vt+nvqE7SylHu29lyZut/MWc3ge7gcStv53+s=)
2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: Zqf9VSZMHOVXtNyTmbPVsardnw5khIn4IqOu+8ke/PQ=)
3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a2:91:fa:44:c7:1d:96:52:8b:41:d4:c2:a8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=6a28a9a614831dd651eac543d49d2899b2300255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:2c:5f:db:a2:73:fc:72:f6:de:13:3c:8a:
ac:9f:4f:30:5f:f6:c1:41:ba:fa:dd:d1:2a:84:d0:
da:33:13:8e:6f:33:ca:e9:96:5f:39:77:82:63:cd:
c5:fd:7f:6a:41:b8:05:d3:7c:86:99:29:5e:3a:7e:
39:cd:de:93:ec:f1:8a:f6:02:e1:93:cd:0a:d8:60:
1f:c9:59:b6:64:01:39:57:2c:74:1b:43:9b:bb:bc:
7b:83:7d:4c:0b:4b:f5:ed:c8:0f:c4:a8:ea:50:0a:
cc:43:a6:e0:92:85:e7:89:0e:51:86:7a:be:14:47:
8b:a8:6e:a6:57:02:38:49:76:29:f1:23:4f:ad:0c:
26:e1:8d:57:18:9e:8d:30:ba:a3:7a:bb:12:21:c8:
88:50:34:a8:5d:5d:98:c4:85:76:5b:2c:86:d6:db:
c7:eb:b5:e4:cc:de:a8:b4:ef:80:ba:df:9d:1d:34:
3f:81:62:55:0d:5f:93:1a:ca:e9:18:15:77:50:7b:
1d:b1:24:fb:a5:d4:d3:b6:92:2f:a2:7e:bc:9f:22:
36:cc:ec:ad:44:a8:34:01:f8:50:b1:a7:8a:88:f6:
f8:49:83:4f:2e:69:7f:bd:b4:7b:ce:31:f1:ba:b8:
03:ed:44:3b:2e:14:14:89:ae:1b:d1:31:4b:81:02:
44:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:28:A9:A6:14:83:1D:D6:51:EA:C5:43:D4:9D:28:99:B2:30:02:55
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:82:d2:7e:ac:67:46:31:8a:a4:84:41:74:34:33:2e:c6:04:
50:4f:05:39:95:30:06:3e:db:e0:73:d9:4a:43:d5:e4:83:5d:
2e:8c:0c:2d:f1:0f:40:80:a0:76:d3:dc:52:80:0b:b9:4d:66:
41:b9:5f:d8:62:bb:66:f9:bd:bb:24:cf:1e:9f:71:51:7a:80:
a3:8e:cc:24:10:3a:f7:ee:56:cc:f2:2a:eb:ac:4a:05:f2:03:
3c:05:26:58:76:1c:b0:91:0d:a9:6a:bb:46:46:76:a1:30:04:
27:26:3f:bd:1f:e6:c1:03:b1:56:56:b6:8a:e7:af:a3:4d:67:
0c:fe:78:29:4e:35:cc:47:c4:4e:c4:7c:08:9a:bc:c8:19:32:
79:d2:d1:7a:53:fe:59:80:26:a8:0c:9f:e7:bc:f0:3b:17:d3:
e5:a1:3b:c6:b0:47:52:af:cd:c2:11:15:60:d5:ee:c2:db:ff:
de:13:7e:64:bc:e5:f8:b2:1f:32:7d:89:91:5d:39:7e:b5:16:
1a:99:0b:b6:99:3f:a9:d1:ef:98:96:04:8b:fc:27:48:3d:0f:
94:80:d7:e3:36:4b:45:9c:5a:53:4b:6b:f6:96:30:22:b8:90:
d9:f6:09:50:d9:9a:56:e9:5d:9b:3a:37:18:9c:a7:f4:87:4e:
d1:b1:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:29 2025 by rpki-client