Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File: AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier: f3cThKnrGBuxAF9P0ZmgNsxF9v6pYT65ipt8eyt3OWA=
Subject key identifier: B1:D7:77:98:FD:D0:2A:75:F4:17:DC:01:2C:36:C7:0A:38:71:06:7F
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial: 0197B82134C387D6DDF042026DDDCAD07C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number: B2
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: oE4w7SwhbtMzKOSoq+QxCuW9Y+kiCwQCQ2fdExu4m5w=)
2: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (hash: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:34:c3:87:d6:dd:f0:42:02:6d:dd:ca:d0:7c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=b1d77798fdd02a75f417dc012c36c70a3871067f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:81:50:b1:fc:4b:6a:25:80:9a:4a:e7:f2:
05:69:80:b6:31:6a:0b:b9:00:1e:9f:3e:01:77:ca:
60:93:11:9c:4f:99:25:d4:65:8d:bc:6d:17:22:a2:
f4:e2:98:ed:1e:e1:a0:a3:50:f4:4a:2f:66:07:b5:
a9:73:71:28:3a:d6:c1:6c:8d:3e:23:08:47:61:d2:
fe:7a:4b:e2:6d:53:77:cf:a6:d8:75:a0:2f:c3:ee:
31:f4:70:7d:84:ab:6b:04:29:74:26:fb:f2:8a:de:
f8:77:31:a4:46:fd:06:87:35:51:6b:9d:7b:8d:42:
c9:81:3d:9e:02:2c:7a:55:af:3d:e9:d6:da:42:14:
d0:87:1d:be:8c:0b:04:03:c6:63:93:d0:b5:3d:94:
4e:60:e6:c5:9d:3c:ce:da:89:24:dc:3f:64:ca:42:
6b:f4:f1:07:05:72:af:3e:8b:de:38:89:bc:af:1d:
70:af:a1:56:d0:4f:29:5a:52:df:2c:b3:03:fb:84:
0b:5a:dc:7b:8f:2d:11:d7:7c:b9:5e:d2:28:06:c6:
f9:07:9e:f9:57:2f:c5:e6:45:e2:73:04:81:56:a4:
b3:1b:d5:f3:05:a4:9c:41:f3:9b:05:2a:8b:0b:83:
7f:ac:24:b1:36:d1:08:39:02:57:28:20:87:33:a8:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D7:77:98:FD:D0:2A:75:F4:17:DC:01:2C:36:C7:0A:38:71:06:7F
X509v3 Authority Key Identifier:
keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:39:57:64:97:27:15:5f:40:c5:f4:33:6d:6d:4a:44:12:d5:
dd:33:0e:24:5c:a2:01:f5:d6:68:6a:37:20:33:83:be:5a:71:
0d:5b:e6:01:cc:c1:67:4a:f2:c4:09:80:1f:04:55:bb:9c:6f:
45:2c:bd:fa:08:b8:36:da:4c:57:92:37:3a:c2:4f:b4:8e:b0:
b3:e2:b2:7b:86:fb:9a:a7:54:f9:a4:48:71:ca:bf:74:99:bd:
86:0b:75:07:59:91:dd:75:b2:c5:36:83:9d:da:c7:73:31:44:
96:97:da:63:e0:6c:c1:ab:f7:b9:77:8c:2a:98:f2:c0:13:01:
4f:25:b7:62:bf:67:b1:55:af:ab:91:8e:65:3d:d4:08:22:33:
a9:41:d7:99:20:34:d3:38:92:b6:54:96:34:d1:26:aa:b5:51:
cf:85:dd:55:d5:55:0a:14:16:c4:57:09:a5:a9:2d:2c:a8:4c:
f3:0c:a9:65:53:55:cf:bf:7e:c2:8a:b3:f7:e6:ea:f0:d6:18:
7e:9f:36:ff:73:b3:3f:e7:f7:a1:33:ee:95:57:7b:fb:24:46:
42:ad:10:f7:0f:e3:35:6c:32:ea:c2:ea:10:49:c5:29:a4:5e:
b3:1f:4f:f8:a2:a2:01:90:16:ec:03:db:fb:a9:9b:8a:14:23:
b1:a8:a3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:58:00 2025 by rpki-client