Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier: L7isFG+WkCShTq/8n57Nwu1oOyrE9xk8mO4Tndd5VOQ=
Subject key identifier: 2D:A6:66:3F:1B:91:65:AA:DF:10:5A:98:52:0B:26:D7:1C:29:B4:1C
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial: 0197CB39CB752E574D5F1A83B24E9CE0BD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number: 0FB1
Signing time: Wed 02 Jul 2025 13:00:51 +0000
Manifest this update: Wed 02 Jul 2025 13:00:51 +0000
Manifest next update: Thu 03 Jul 2025 13:00:51 +0000
Files and hashes: 1: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: W8gucTBpMc/3ToGoALeVTWe5An2/wzf6kfIBvXzQs0A=)
2: njKb2eruHX8H9g3wi8a7hMHrArw.roa (hash: 6gW6VZJ5Gbs98ZjAseT0lvfg+/2Cg+ztPZG7diySUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:cb:75:2e:57:4d:5f:1a:83:b2:4e:9c:e0:bd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Validity
Not Before: Jul 2 13:00:51 2025 GMT
Not After : Jul 3 13:00:51 2025 GMT
Subject: CN=2da6663f1b9165aadf105a98520b26d71c29b41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:b3:27:27:d7:d8:de:26:f9:e6:27:4c:7c:
10:b0:68:7e:63:7e:90:cb:2d:83:6c:92:5a:62:c7:
57:5a:11:0d:af:bc:9c:f4:19:fb:d0:62:91:01:e6:
53:2f:8b:e8:0c:6d:0f:3c:0e:ae:e8:74:a5:29:5d:
69:c6:3b:0d:af:f6:24:fe:69:37:86:9a:54:7b:fc:
4a:29:8f:a3:35:e3:6e:d9:27:03:39:92:de:e0:52:
43:c0:40:83:1e:46:8b:c5:09:18:1a:66:61:51:c1:
10:8a:83:2c:bb:be:82:72:ac:05:b2:46:52:fc:ad:
10:b0:a9:9f:29:34:d6:a6:03:2f:bf:01:d1:df:20:
18:4f:12:25:07:b2:f8:0c:46:91:29:d1:62:0a:cf:
dc:b8:1a:ab:06:6b:55:2b:bb:a6:96:c2:56:c8:ca:
86:b6:a3:3c:30:bc:c8:06:1e:68:28:ff:2c:c6:2b:
0f:0a:a1:a4:30:d4:b2:52:cb:ad:98:83:89:63:5d:
2e:72:7b:f4:b3:70:a1:72:ae:4b:a7:34:cd:b4:c7:
79:0e:71:80:d5:07:e2:ef:c5:06:aa:a5:33:68:d6:
e9:dd:9d:5a:b0:8a:4f:55:08:58:31:d1:8e:e7:d2:
7d:9c:fa:34:25:80:3d:0d:74:9e:e4:18:51:d8:a6:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:66:3F:1B:91:65:AA:DF:10:5A:98:52:0B:26:D7:1C:29:B4:1C
X509v3 Authority Key Identifier:
keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:10:2d:c9:ce:50:14:45:3c:ca:b1:40:9c:e2:e2:c3:14:a4:
cc:9c:93:37:e9:18:b9:77:dd:25:cd:2b:03:30:85:17:7b:fe:
e6:1e:2b:21:3d:d8:fa:ea:0d:00:9d:9e:56:af:d8:2b:bc:19:
77:ed:da:4e:ef:8d:f9:d7:e7:b5:fd:29:5b:69:1a:bc:39:ef:
96:ff:0e:4b:00:bc:c9:9c:65:a8:9d:45:91:38:f3:23:a8:7d:
93:47:67:eb:97:d9:56:f4:30:44:4d:09:b3:a9:1f:ae:2b:44:
56:0b:de:35:c5:24:ff:65:85:0b:33:27:13:83:74:66:d7:2d:
0d:1b:77:eb:01:b1:4d:5c:72:25:7f:bb:4a:7a:bb:b4:6f:88:
80:7b:55:0a:55:95:b8:71:42:23:db:b0:c1:da:30:cc:d0:f9:
02:0e:de:b4:ee:d3:49:2a:f1:71:f8:2c:72:2b:4c:1b:05:13:
67:2b:fa:bf:b9:a4:00:ed:92:92:6c:20:d2:36:df:5e:cc:95:
22:3a:54:06:93:17:1d:f8:80:70:a0:b3:a1:5c:9b:58:72:69:
40:df:27:f0:87:6c:c9:80:62:ef:52:a8:d1:d0:de:d0:7e:23:
b1:c8:d9:77:98:6c:46:bb:1b:a0:fd:7a:96:f7:95:4a:a3:7c:
45:e8:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:11:04 2025 by rpki-client