Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: WnJZQc5FUjShMIflSxd2HK9h5CbK49JEqYYn6Jr+NxM=
Subject key identifier: BB:45:C3:28:E0:9B:6D:AB:FB:A3:3D:A2:85:0A:C0:FF:86:5D:AE:04
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 0197B6D787C587C4527C191B30497449D042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 029B
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 1ENw1gcCvt1Pmax0p8zhB7SKAEg.roa (hash: 1qhYf9E0Pe4/V/O+LSKzrT8cldjvFnxKyFJ5/QtS500=)
2: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: 6S7IOZHMNUTr8KZownAqKBd1kJaVle8rNrtV/fn6YlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:87:c5:87:c4:52:7c:19:1b:30:49:74:49:d0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=bb45c328e09b6dabfba33da2850ac0ff865dae04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:b8:68:f2:5f:c7:4f:79:1c:11:7b:12:17:
3e:f1:e3:76:05:e6:bd:08:d9:e7:cf:56:3a:8e:a4:
db:82:e8:e9:1c:ef:9f:75:64:f1:a2:eb:be:fa:c8:
0b:a3:fb:c4:4d:94:9e:71:78:58:5f:a8:6a:02:5d:
4b:53:9a:5b:0e:cd:95:a1:d6:87:b6:1e:60:f3:74:
0e:94:88:32:bf:ea:7e:0c:c9:3b:15:bd:52:93:87:
25:50:a4:51:f4:39:67:db:26:89:d0:ae:67:0a:aa:
34:0a:75:3b:33:77:9e:0b:f1:91:a7:d2:b0:5c:ba:
a2:be:d4:03:2e:7f:db:eb:68:57:38:64:05:35:a5:
1f:4d:61:bd:3f:f5:41:8e:f0:33:1c:4d:71:a2:34:
9f:5a:cd:af:fa:0a:d4:8b:78:78:f1:c6:17:35:8d:
1a:54:e7:4a:b2:29:70:d4:45:51:af:e0:06:80:8e:
4f:48:01:b3:cc:f1:de:f7:68:36:7c:6e:d2:eb:38:
73:56:ad:94:c8:94:19:29:d3:c9:66:40:e6:66:c8:
fa:22:18:ed:b2:39:ec:75:90:db:27:4b:a9:81:61:
f0:ac:81:94:88:23:fd:7d:e6:d2:6c:d0:9c:84:5d:
00:7b:6f:33:10:11:ea:1e:65:70:fa:7e:c9:8b:57:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:C3:28:E0:9B:6D:AB:FB:A3:3D:A2:85:0A:C0:FF:86:5D:AE:04
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f1:d3:2f:93:40:1b:fe:a4:8d:3e:a1:88:9d:5f:00:3d:e6:
52:17:7b:cf:9c:8b:70:8f:16:4c:f4:49:e8:c9:23:ae:4f:19:
85:74:29:08:98:7a:d4:b8:61:80:bf:23:7e:ae:77:69:27:48:
81:a9:67:3a:e5:5d:63:b4:e6:34:b2:6c:e4:b0:47:a5:d7:ab:
04:3a:f9:5a:ef:e8:61:75:70:8a:42:94:d2:6d:23:48:7c:f7:
91:83:ab:35:ef:55:5a:56:03:49:c3:a9:d8:66:88:cb:f1:4e:
bb:4b:55:c2:ca:19:e3:75:72:0f:0e:35:66:e7:0e:2c:83:2d:
08:4b:07:01:87:12:88:db:c4:de:86:cd:68:20:8e:28:02:33:
42:4f:87:f8:67:f0:da:3d:f6:a6:91:c2:b0:54:06:ab:da:7d:
7f:89:fd:53:b8:e6:bf:9b:e2:44:7e:bf:7e:61:6c:01:b2:3c:
5a:d4:4e:27:c2:f3:20:8f:bb:4a:1d:a4:ae:68:cc:ca:e1:c0:
88:c9:55:38:bc:38:5a:f0:9d:4c:eb:64:47:0c:e3:f9:6f:94:
4c:57:bb:3e:1f:08:12:6b:d6:ca:de:e1:ff:2a:b9:98:c2:65:
a1:dc:af:85:ed:9d:69:18:7a:79:c3:8d:d1:12:da:17:4d:e2:
90:09:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:04 2025 by rpki-client