Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: gtLkYGGgBONP5odl/QGntL4Vu7A6ftz6fJry4va+VMM=
Subject key identifier: E6:92:7B:DF:FA:3A:27:7C:01:BF:B0:78:04:DF:72:BA:33:87:C4:34
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 0197B77C70361EB2ACADCFD64D92F902BF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: ELF2PcHG9KOFQT3Wm0VLbmHwMW52Bgp48YbLnxJzDK8=)
2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:70:36:1e:b2:ac:ad:cf:d6:4d:92:f9:02:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=e6927bdffa3a277c01bfb07804df72ba3387c434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:d2:7f:17:df:f5:d3:a6:94:e4:2f:48:e3:
b0:56:88:8a:2a:fc:bb:14:66:31:c4:aa:74:96:e3:
93:2f:39:d3:7a:f1:00:01:2c:37:81:64:b7:82:0c:
9f:e7:71:3b:f6:5f:8c:fb:ea:92:ea:40:68:b4:2e:
ac:6b:e7:4f:c5:9f:d5:c5:ac:23:5d:45:b2:17:20:
e9:05:ff:c9:3d:c6:15:20:28:b2:02:60:7e:88:e7:
47:bc:c0:01:03:48:aa:09:9f:a5:40:fa:03:82:19:
01:9c:4a:11:ad:6f:f9:fb:c1:31:91:e4:3e:35:e0:
9f:e5:6f:20:7b:18:73:09:00:b0:72:e0:4b:27:ca:
71:d3:c9:a9:c7:ee:2b:d8:ed:0a:5d:1b:54:92:d6:
40:1b:53:54:4c:c6:cf:1f:92:31:0b:42:81:1e:d6:
24:5b:bd:3d:3f:00:6f:4c:f1:6b:c7:ad:48:d9:f6:
e8:9e:48:ae:22:5a:d2:f0:c8:c5:56:1d:1a:fb:f0:
b7:35:ce:8c:3a:cc:c5:8e:71:a4:58:32:db:8e:7e:
0c:2b:5d:2a:bb:8d:34:72:3e:11:96:b5:4b:2e:37:
53:be:32:35:a1:18:e5:53:3b:9c:e9:0a:34:28:65:
89:15:43:3e:af:02:62:0d:87:8a:79:24:33:5d:09:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:7B:DF:FA:3A:27:7C:01:BF:B0:78:04:DF:72:BA:33:87:C4:34
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ae:f1:6a:f0:ef:85:1d:08:a8:08:0e:4a:da:d2:ca:c1:64:
08:26:83:9b:a2:c8:03:0a:de:3a:1d:8d:c4:51:4f:dc:17:21:
28:07:e1:79:6e:29:4a:92:9c:ff:da:8b:61:ba:86:9f:1e:ed:
a5:b0:41:49:ca:ff:3f:52:44:a9:6c:49:db:ed:95:f8:4a:b1:
84:59:75:5f:d4:22:94:68:84:fa:02:bb:97:bc:54:11:58:25:
b5:2e:c2:2a:08:28:2f:d4:f6:30:ec:d9:4e:ed:ae:04:c7:c1:
df:8f:65:6a:be:7e:38:32:97:98:87:fe:82:35:84:fe:d2:70:
e5:93:e8:02:13:c5:b7:28:64:00:1e:8e:3d:d2:bb:61:72:df:
e3:2f:aa:1b:56:dc:f4:73:4a:b4:8f:65:d9:77:fe:63:a7:37:
47:a2:b3:eb:34:df:ab:f6:53:43:68:26:ac:a8:32:98:4a:75:
02:24:e3:3d:51:ae:bf:ec:3b:24:a3:c9:5a:2a:74:3b:23:39:
33:d4:8a:df:a1:49:37:3b:35:42:30:ff:ea:2c:9c:45:6d:a6:
bf:7a:2c:68:90:ad:a7:dc:11:09:16:c7:ea:8a:07:a9:bb:5c:
e3:a1:70:5e:b1:d7:e9:66:88:98:2a:13:c2:03:78:b2:92:1c:
74:36:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:58 2025 by rpki-client