Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: HjBsnn3lFA+9tyoqbzRYXgbLhh/DXK7IoV4QA79vAmo=
Subject key identifier: A6:F3:62:81:28:54:A6:D2:15:DC:D2:F2:97:4A:31:BB:8C:A3:4A:FB
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 0197B6D742F9677F2609D359ABB6534C40BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 14:00:49 +0000
Manifest this update: Sat 28 Jun 2025 14:00:49 +0000
Manifest next update: Sun 29 Jun 2025 14:00:49 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: 6CoN0HAaY+3WhXzJfvNA+Rdf5Ywxnd8l9zw3YhpQglE=)
2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:42:f9:67:7f:26:09:d3:59:ab:b6:53:4c:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Jun 28 14:00:49 2025 GMT
Not After : Jun 29 14:00:49 2025 GMT
Subject: CN=a6f362812854a6d215dcd2f2974a31bb8ca34afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:e7:64:67:e1:79:5f:a4:95:97:c8:cd:f5:
90:9f:65:71:dc:00:58:d9:7d:5b:35:4a:e6:3f:fd:
7f:4e:b0:78:91:55:39:35:fc:3e:78:01:b1:56:ae:
30:42:39:97:8e:db:62:e5:1a:9e:a0:11:2c:26:13:
3e:5d:3e:45:3b:66:0c:3c:52:be:41:44:9b:8e:6a:
ef:fa:58:86:8b:11:5d:06:22:e6:a3:c9:e8:96:6a:
30:36:f3:cb:93:4f:fc:b1:88:15:6b:8d:5d:ef:24:
a1:20:de:78:c5:1d:65:fa:a6:f6:5e:58:be:97:10:
e3:a5:52:61:42:6c:77:d6:46:76:95:e8:74:04:c5:
d2:20:5e:10:fb:fe:f6:9d:50:67:fe:00:8f:34:6e:
af:1d:20:76:87:2f:41:8e:86:0f:f8:a0:bc:c8:ca:
09:f2:89:24:b1:b3:9b:80:31:c2:e0:f8:fa:91:ef:
25:9c:16:52:bc:43:16:10:57:e1:72:ec:fa:ac:4e:
7f:a8:fc:70:90:82:cb:a5:23:33:c9:2b:bc:dd:36:
54:fb:9c:83:8e:77:67:f4:40:4a:8d:d5:83:4e:4a:
24:e8:60:26:13:08:f0:f8:6f:1f:bd:b8:e1:cb:41:
52:63:70:87:ac:7b:7b:fc:47:7e:52:1e:9d:2a:61:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F3:62:81:28:54:A6:D2:15:DC:D2:F2:97:4A:31:BB:8C:A3:4A:FB
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b0:bd:1d:de:cd:57:97:b6:6f:46:e7:04:72:c2:78:51:7e:
6f:70:49:5d:c8:da:b3:8b:82:ae:04:f7:1d:63:0c:c7:30:66:
0c:24:73:cd:e4:c2:05:98:01:2a:6e:53:3f:2c:e0:38:ba:c8:
22:8f:e8:13:05:21:7a:f1:61:c6:b4:36:2f:d0:01:3c:43:39:
99:87:97:3e:09:2f:d4:2f:38:be:2d:dd:94:43:00:b3:02:58:
75:e4:50:f4:8b:1c:32:af:bb:6d:35:1f:62:52:ab:60:ce:ce:
b2:5d:8b:2f:c6:d0:21:60:40:18:f3:49:d9:08:20:b0:92:ec:
2b:b7:32:53:a6:01:78:40:83:e5:df:38:22:d4:26:cc:83:03:
53:08:3b:ab:4e:8e:ce:99:a4:6a:0b:e2:93:c0:47:c6:7b:da:
df:d7:98:05:54:27:1a:db:2f:39:be:64:cb:ae:0f:c5:18:a2:
c9:c5:51:6d:25:da:1d:fa:a5:b6:f0:f7:f6:f8:77:a2:17:2b:
e1:8a:1e:d3:66:3b:ed:f2:af:bd:d6:38:6b:a5:3a:5e:c4:f7:
f3:34:07:ce:c8:16:ae:2c:c3:ae:08:4a:84:ce:b5:eb:3a:02:
dc:68:76:f1:1f:68:e0:f5:ee:ff:95:2e:ae:cc:44:e9:dd:a0:
ec:ed:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:55 2025 by rpki-client