Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File: aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier: cQt7zvIzOWfzsSm85cBFbzH4DINFgzmJDbBBVA96xs0=
Subject key identifier: 7C:44:44:43:CE:C3:B9:D5:5D:AE:0C:CA:5D:26:95:7C:91:46:94:CC
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial: 0197B6325F1A6F23D41FAB1A80A138723559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number: 0204
Signing time: Sat 28 Jun 2025 11:00:43 +0000
Manifest this update: Sat 28 Jun 2025 11:00:43 +0000
Manifest next update: Sun 29 Jun 2025 11:00:43 +0000
Files and hashes: 1: 29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (hash: FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=)
2: VpccTipW0lNr-K9sqrEpGYv-Kv8.roa (hash: zrRywVhDOEX8ppVFjwMkfY6qiZ8PRXRoZXgmGI39CI4=)
3: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: oyvQ6bnNjsU/pTKScT17LmimGnAvAIrGUUUYdTFESqc=)
4: sUY5J2N8PCLs__awrXNAzoRAVL0.roa (hash: ey1paCcg6V8UnGfsgdc6JpJWrVKzneosnYZFoSG6890=)
5: ub1kPDAxllR0WFP6iXd1W5UcG_k.roa (hash: 8WBQDzQQjZxzhaXE+nFlYVRYm6wxvzqPDNkDDz5P6H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:5f:1a:6f:23:d4:1f:ab:1a:80:a1:38:72:35:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Validity
Not Before: Jun 28 11:00:43 2025 GMT
Not After : Jun 29 11:00:43 2025 GMT
Subject: CN=7c444443cec3b9d55dae0cca5d26957c914694cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:ab:e0:7d:36:f9:e7:59:fe:c4:af:41:52:
09:58:a8:33:96:fd:25:ae:05:48:67:33:21:3e:ef:
c5:1c:bd:a8:1f:85:6c:dd:f6:f7:cb:d9:d5:d5:53:
9f:f2:e2:a0:f7:f8:5a:8d:c7:56:66:cc:f4:fa:c6:
dc:fc:be:60:10:84:58:a0:96:54:cd:75:e2:b7:2e:
9b:e1:44:ef:7d:90:bc:81:53:a7:9c:db:9f:ec:66:
16:0a:19:36:be:d0:03:ca:42:c6:0c:8b:bc:dd:75:
74:9e:df:0e:74:f8:f2:20:5b:95:fb:0e:d3:f7:67:
2a:14:f2:19:aa:da:cb:ac:90:48:d7:7f:4d:2c:d5:
f1:7e:60:d1:ae:d4:d0:ca:5c:f2:21:81:43:f0:88:
ad:21:22:7c:fe:39:ca:be:37:a6:da:f6:fc:1e:bc:
cf:d3:12:b0:c0:28:06:56:b6:d0:cf:99:02:e9:e2:
b2:a7:85:3c:cf:07:5a:db:03:8f:97:d8:a8:19:25:
5b:74:76:17:3b:d4:c4:a6:21:d0:84:c2:46:77:2f:
ea:64:68:6d:81:30:a7:22:2d:b5:52:ce:36:52:b4:
ba:15:00:ad:d5:56:eb:76:bf:71:c0:13:6c:5b:00:
e1:4e:95:f5:a8:e7:de:7d:00:1b:5d:10:b3:7d:c3:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:44:44:43:CE:C3:B9:D5:5D:AE:0C:CA:5D:26:95:7C:91:46:94:CC
X509v3 Authority Key Identifier:
keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b0:b5:22:0d:51:be:16:22:8c:d9:b1:5d:b8:84:5c:77:9e:
58:3d:ea:3c:d9:58:d8:65:f2:bd:09:b6:1c:d6:9c:3b:a6:72:
79:6d:2c:49:0d:55:8b:7e:c9:30:9e:a6:90:f7:0e:9d:fc:50:
8e:bd:e9:df:1c:91:f9:aa:19:fe:71:9c:0b:5b:43:91:30:ae:
ce:23:b0:ca:08:d1:ba:33:41:76:00:3b:e0:f3:2e:ee:c9:ec:
19:16:d5:d0:75:b5:22:07:fe:8f:7c:6c:11:a9:65:56:52:87:
a3:37:a8:2f:c6:73:ee:c2:5a:d9:37:64:ac:f0:12:e4:93:ac:
4a:31:4e:08:e5:ad:ba:f9:5e:b3:69:7a:2f:25:d2:6d:5b:79:
39:d5:34:22:3a:c3:78:4c:1f:c6:39:58:41:34:34:38:99:cd:
ec:fc:bc:da:6d:6c:3a:a4:e4:b3:77:39:c3:a4:6f:ad:bf:88:
09:30:5b:94:6f:67:30:7f:c5:16:9d:c2:b5:98:f4:e5:3d:21:
9a:57:45:e1:08:df:25:ba:e1:de:a4:24:de:88:af:5f:6f:b7:
0c:2d:c1:a2:22:11:35:06:b8:82:82:f3:e4:8b:95:3c:9c:2b:
d9:68:d8:c8:70:88:be:3c:f1:2f:1c:d5:b2:4f:30:30:72:30:
d5:fb:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:46 2025 by rpki-client