Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: /NFRTt7+ofrFxlZSOJAzzCs/83I8hNhYwfmtCISE1LU=
Subject key identifier: 42:11:3F:ED:9F:BD:C3:5C:1B:72:93:09:1E:64:2E:ED:60:8E:6B:C5
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 0197D09812694CA4D4DE6D3AFF741E67C8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0D38
Signing time: Thu 03 Jul 2025 14:01:56 +0000
Manifest this update: Thu 03 Jul 2025 14:01:56 +0000
Manifest next update: Fri 04 Jul 2025 14:01:56 +0000
Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: G5Kk5KL8uwHjv3WCz4ZPD7p7jUR1AvcBwFsIlpDUFfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:98:12:69:4c:a4:d4:de:6d:3a:ff:74:1e:67:c8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Jul 3 14:01:56 2025 GMT
Not After : Jul 4 14:01:56 2025 GMT
Subject: CN=42113fed9fbdc35c1b7293091e642eed608e6bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:eb:dc:55:3d:9a:56:2a:2a:b5:ef:a1:ac:
55:05:0e:b4:60:c9:cc:bf:23:3d:3a:be:eb:fb:dd:
f5:67:70:77:58:8b:19:c9:85:1d:62:5c:6f:7a:b9:
cb:9a:36:2f:49:6b:3f:75:c9:1f:55:0e:ae:41:f4:
c9:9b:1c:aa:c3:8a:a6:70:6b:bf:74:b9:db:3d:98:
fd:4f:b4:47:6f:26:27:b2:82:18:0d:80:b3:82:28:
4c:78:d5:8a:83:90:79:7d:1a:66:c1:95:b2:cc:f8:
10:0e:a9:05:97:c9:55:ec:06:cf:dd:6c:c6:5d:54:
4c:04:66:b3:70:d5:45:c2:22:b0:cb:7d:70:83:53:
c1:8a:3f:45:55:fe:2a:7c:23:37:f7:29:23:8e:6d:
06:91:b8:c5:7d:63:cc:b4:22:66:4f:ef:4f:18:c0:
4d:33:ee:93:54:fb:15:7c:6c:05:a6:51:32:e2:6f:
92:c8:1b:a0:2e:45:5b:8c:cb:04:da:68:b3:31:8f:
ce:01:b1:53:59:5c:04:cf:c2:0b:45:d1:12:9d:0b:
01:ab:41:cc:13:2d:ef:43:50:40:5b:11:9c:cc:37:
52:29:5f:fe:bc:70:2e:ee:f0:c3:fa:e4:b7:f8:cc:
a3:18:e5:4f:c1:3a:30:05:3f:4a:0f:1a:da:0a:7a:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:11:3F:ED:9F:BD:C3:5C:1B:72:93:09:1E:64:2E:ED:60:8E:6B:C5
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:04:e1:d7:71:b7:7e:32:84:04:f2:95:d1:9f:b6:a4:4c:76:
20:9a:c1:ba:25:ac:0c:2d:9c:37:bd:55:b1:a4:f0:72:6f:72:
d0:d3:bd:5f:fc:b4:04:c9:d6:ad:51:c3:a7:06:c8:f5:4d:00:
72:68:2e:f3:a0:74:68:67:d6:a3:dc:1e:d8:fc:2c:dc:a0:31:
74:a0:38:88:78:89:8a:90:6e:c3:ee:20:4b:e6:6b:3f:e7:e6:
f3:a7:f9:d0:52:3f:10:44:c5:00:34:c7:91:ef:8c:56:8c:5b:
15:b0:c0:1a:22:2b:16:a3:73:fe:ed:8f:2f:0f:eb:b7:60:23:
7e:0c:bd:e5:b3:8e:35:f3:af:0b:33:48:12:ad:37:9c:18:55:
36:58:b3:76:93:db:9e:26:bc:48:c8:c2:f4:f5:f9:a6:15:32:
bc:fa:a0:37:5c:60:d3:3a:31:78:32:c5:71:38:c4:b6:2e:d0:
ec:cc:7d:6d:39:10:c0:68:aa:d0:0b:5a:d7:9e:8e:a6:98:17:
97:b7:b5:0b:25:6c:5f:7f:a4:ce:c6:cf:4a:3d:bf:94:c6:1a:
ff:e9:cb:a7:7d:5f:2c:b3:0e:f5:81:f2:14:0f:0c:a9:66:4d:
d8:e9:c0:36:52:93:08:17:ac:a1:e1:17:80:81:0e:22:11:cf:
ce:ef:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:31:39 2025 by rpki-client