Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: 2ovtFVtQREiojoY32j+coWA3dtQSBw92w/uLleSVR/w=
Subject key identifier: 46:EE:72:69:70:99:BC:0F:D8:44:E9:C2:D1:10:B3:EE:C0:86:21:D4
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 0197B70F4AD255F04ED02FD991386745E43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: L1rJB7JFPbE8R78+aeYcfu/0RYkxmOQc3CldIYSxFTg=)
2: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (hash: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4a:d2:55:f0:4e:d0:2f:d9:91:38:67:45:e4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=46ee72697099bc0fd844e9c2d110b3eec08621d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:a3:d1:0b:f0:9d:3c:58:32:13:06:dc:9c:
e0:c6:ff:9d:ef:56:ba:02:f1:cf:1f:56:9c:2c:e8:
45:8a:8b:cd:a2:62:16:3a:42:60:cf:24:f3:ee:52:
eb:43:be:ff:fa:a6:33:f2:ae:6e:67:13:60:ad:3c:
1a:39:59:46:6b:15:a6:cb:31:d2:28:a1:85:07:28:
6c:b7:50:11:ac:45:29:96:65:57:00:1e:d0:f7:ce:
78:99:0d:9e:cc:43:95:98:c3:2f:8b:ae:8c:d9:b3:
1b:29:b4:9b:e3:7d:8b:8a:18:39:bd:89:ef:f2:b7:
41:19:74:f3:a9:63:c6:f4:e7:56:b2:d9:ee:9e:f3:
69:ec:fd:31:55:63:57:16:c0:d6:5c:74:27:41:8f:
af:b9:57:eb:85:43:e4:27:a8:8e:a8:58:2a:dc:e2:
17:05:09:ec:00:44:75:d4:2c:9f:b1:17:76:28:bb:
27:ef:f4:04:73:63:38:37:85:06:c5:de:d6:47:38:
09:65:95:61:fd:9e:9c:fb:33:f3:21:35:78:a9:82:
71:9e:7a:50:f8:4b:57:60:4f:15:bc:6c:6b:b2:a5:
3a:f4:89:4a:9d:77:7e:d9:3e:b7:13:94:49:17:b7:
68:40:71:53:dd:fa:47:b3:6c:5a:90:90:da:71:bd:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EE:72:69:70:99:BC:0F:D8:44:E9:C2:D1:10:B3:EE:C0:86:21:D4
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9f:91:d2:07:da:8d:89:a5:64:49:fa:12:8d:7f:9a:74:f2:
b9:01:3d:b1:6e:8a:4e:ae:29:b4:b7:ab:f0:8d:12:75:0f:bb:
62:09:9c:a2:f9:59:4e:e0:a1:55:f9:bc:de:fe:f5:f6:52:db:
9b:f8:03:5e:93:ac:31:01:6e:dd:c3:a6:dd:b3:29:80:17:05:
5f:06:0c:87:5d:1b:61:ec:0e:c8:66:ec:35:6e:c4:c7:f0:5c:
5f:44:b2:dd:af:a7:82:b1:7d:21:c3:f2:f0:2e:d3:cd:06:da:
43:6c:fd:25:bf:c1:e7:75:fd:3a:7c:2c:93:c2:3c:0d:61:9b:
79:fb:2b:d1:21:45:ba:1b:6f:7e:a1:51:52:af:4d:7b:a9:57:
f8:90:b6:5b:0e:fb:89:e9:24:9e:dd:78:b9:38:51:83:48:e3:
39:6c:c2:37:c0:fa:83:87:db:2f:78:c7:d4:12:88:d4:dc:56:
82:aa:40:09:e3:19:bf:51:c4:e9:72:99:3f:6c:9e:75:5c:e3:
c1:0f:7f:70:50:96:07:3e:f3:47:da:df:b0:0a:0e:58:a2:54:
38:2e:6c:e4:8d:3a:93:d7:66:1f:81:6e:d9:4a:21:27:62:42:
89:e7:5f:36:16:fc:dd:46:2e:a3:1d:c7:0c:87:01:6d:d6:13:
0a:45:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:29 2025 by rpki-client