Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier: 1m3D4xuVrlYv2uYi0LeN+FsRkUslcM2VUpodVIH6EMM=
Subject key identifier: 9F:6C:0C:BA:A8:C9:13:57:E6:23:53:36:3E:95:A6:59:89:04:E8:78
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 0197B632BCB930B821FC63727BCFACC0CC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number: 1263
Signing time: Sat 28 Jun 2025 11:01:07 +0000
Manifest this update: Sat 28 Jun 2025 11:01:07 +0000
Manifest next update: Sun 29 Jun 2025 11:01:07 +0000
Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: B5/mMXy8T1c6+JkXY4kIEmrgMkrMGsf3ZyoHuSMVapU=)
2: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (hash: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:bc:b9:30:b8:21:fc:63:72:7b:cf:ac:c0:cc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: Jun 28 11:01:07 2025 GMT
Not After : Jun 29 11:01:07 2025 GMT
Subject: CN=9f6c0cbaa8c91357e62353363e95a6598904e878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:0c:74:05:9d:c6:16:0e:1c:f5:8d:28:3a:
75:8b:ae:30:16:d2:dc:1d:5f:ae:9b:2a:4b:88:8a:
d1:80:6e:96:ad:ed:87:02:47:8a:c3:05:4c:dd:c4:
b4:4d:9d:78:c0:c1:65:a2:5b:23:2b:77:84:0d:bd:
e8:da:3f:8b:08:db:e8:00:c3:9f:26:31:8e:1c:78:
09:8d:9c:51:a0:bf:16:87:38:6b:b4:76:d2:c9:f4:
1c:29:de:1d:5e:bb:12:b1:1e:78:68:37:46:16:18:
6f:68:a7:df:8e:9c:8b:29:ad:8c:c7:0a:02:81:6f:
9a:fb:41:90:18:db:c5:fc:e9:1b:48:40:13:55:76:
15:0e:98:ff:8e:a5:f8:cc:ed:e8:6d:b5:f9:6b:b6:
0d:bd:2e:34:6c:eb:3a:8b:45:8f:4a:fe:a1:b3:34:
f3:3a:59:90:62:b9:ae:77:17:e9:c4:98:d2:a9:d3:
b2:0c:95:81:37:59:62:02:54:e0:05:1b:91:36:1e:
8e:e3:46:79:2d:0e:32:7f:ee:96:ad:16:4a:69:1e:
9e:77:4c:cb:42:c0:28:5d:0e:aa:31:61:78:ca:52:
da:50:43:a5:fc:6e:cd:90:2f:a5:79:2d:7e:e6:90:
9a:88:60:a2:c3:fa:dd:ae:a0:91:5a:a8:8d:22:9d:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6C:0C:BA:A8:C9:13:57:E6:23:53:36:3E:95:A6:59:89:04:E8:78
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:97:28:ba:b2:ee:ac:75:5b:35:49:89:a5:87:71:5c:9f:37:
3c:06:96:03:15:89:83:16:bc:fa:32:73:d9:77:cc:94:70:fd:
cb:5f:1c:75:df:7a:47:5d:e5:98:80:9e:b6:1d:13:e0:8a:f2:
4f:91:9c:74:df:8f:19:c4:e9:29:bf:d4:3d:38:0d:38:b0:fc:
a6:c3:ca:f8:c0:17:eb:73:6e:4f:51:f4:cc:21:f3:08:d8:d0:
e4:05:67:ce:31:ba:97:2d:73:7c:c2:51:7c:80:9a:05:2f:4b:
9a:2b:d3:ad:f8:c7:52:e1:e5:02:bd:42:1b:d8:20:15:ec:65:
c2:7a:5a:50:81:27:e4:41:8d:72:55:0b:31:2c:b1:b8:65:59:
67:35:9a:96:63:5c:81:0e:37:0e:d1:0f:aa:39:9b:3d:3d:5b:
97:03:bf:82:a9:e3:31:c5:3b:f8:eb:22:1b:52:08:ba:f9:de:
06:71:c5:44:7b:c4:ee:07:e4:fa:43:6d:56:5e:10:3b:01:c5:
0e:0e:f6:54:fb:7a:93:9b:08:76:cd:5b:56:c5:2b:9c:ae:15:
74:51:db:0c:45:47:18:6d:70:46:86:46:bd:ab:1c:bf:a8:01:
0e:37:78:49:2f:eb:08:b1:ca:93:0e:15:6a:22:76:b7:01:5f:
39:42:7a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:31 2025 by rpki-client