Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json)
Hash identifier: yZb95YoBmNwzwfqFYKLELXZuTiIotoFBIpfLBbU/WQc=
Subject key identifier: 5F:0B:E4:0A:21:62:6B:00:CC:6C:18:A0:36:C1:E1:1D:B6:F2:D0:52
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 0197B632852F4BD45A3FFB36BE766C387F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
Manifest number: 0584
Signing time: Sat 28 Jun 2025 11:00:53 +0000
Manifest this update: Sat 28 Jun 2025 11:00:53 +0000
Manifest next update: Sun 29 Jun 2025 11:00:53 +0000
Files and hashes: 1: Uq41S_TL-4cdbHQOXq-81k1Y6B0.roa (hash: imvcawPVkLTN2rqi9GrM6dLepGLRmW6IgQsJl3oa4vo=)
2: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: 2sCLCxmnyS8BQBgLmEEM9UiAKbkutJNw1AnNUkSTag0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:85:2f:4b:d4:5a:3f:fb:36:be:76:6c:38:7f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: Jun 28 11:00:53 2025 GMT
Not After : Jun 29 11:00:53 2025 GMT
Subject: CN=5f0be40a21626b00cc6c18a036c1e11db6f2d052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:2b:fa:4a:88:c8:29:89:d1:4c:30:fb:e6:
8a:87:37:33:3e:ac:72:32:ba:bf:78:57:4e:3f:c0:
2b:ba:d0:7d:09:ec:d6:a3:70:0e:59:c2:bb:72:f7:
11:a8:74:ce:8d:2c:4b:33:59:9e:d7:92:3b:a3:dc:
e6:27:4c:65:6c:39:a4:37:ff:4e:44:24:57:ff:c5:
a6:6d:89:e4:58:6f:14:95:02:1c:c1:e1:85:d8:22:
79:48:df:62:e3:42:0e:0b:df:bb:75:2d:84:fb:a5:
e8:b2:e8:f2:69:91:20:65:e4:81:17:21:68:f6:fa:
8a:a8:0b:50:fa:e9:27:7a:a9:ea:2c:43:ce:a3:be:
c1:27:3a:01:6f:a6:96:71:a3:59:4f:02:26:85:4a:
3e:80:4b:3a:72:3e:73:0b:90:95:66:1f:a1:cd:40:
29:6c:45:af:87:92:f3:aa:58:ee:20:b5:81:c7:2f:
08:49:31:f9:d8:02:43:2c:3e:43:e2:69:47:f4:f9:
29:42:08:a5:46:3e:6e:45:b9:a8:9b:d0:2f:a9:38:
cd:32:f7:72:e7:2c:5b:ad:a8:67:31:3b:f3:a8:97:
f3:07:05:f7:f5:0d:dc:37:d5:eb:d8:82:68:09:2b:
89:3d:57:ad:ea:1a:18:32:4a:c9:0e:8a:e6:31:87:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0B:E4:0A:21:62:6B:00:CC:6C:18:A0:36:C1:E1:1D:B6:F2:D0:52
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:61:89:3d:05:5f:22:6c:ef:9a:f4:ad:07:bf:fd:31:ab:3c:
5f:e8:3f:f4:8f:0f:ae:27:5f:9b:e6:75:17:f9:3d:e8:01:e7:
10:b0:28:cd:bc:f2:7f:ea:f6:91:82:1f:a9:59:90:25:28:ee:
ed:c9:27:11:18:58:73:d8:e7:25:d4:87:a3:4f:1f:74:ec:25:
06:11:f9:00:db:9b:69:83:69:90:0e:7b:44:47:4a:09:cf:01:
f0:f8:8f:ef:37:28:af:d0:c5:74:21:51:f9:e4:15:e0:89:5d:
82:b8:a8:ba:31:70:f2:06:c4:0f:44:f2:c5:9a:2a:29:c5:cf:
07:b5:e4:51:3a:9d:c9:af:56:77:41:a5:3e:b2:e5:01:c3:c9:
59:bb:2f:1e:80:17:3f:6c:e2:20:2c:bf:ac:df:00:2f:2b:86:
12:fa:29:bc:da:4d:8c:36:b4:0a:6d:b7:23:d7:81:be:fd:37:
a2:6d:6c:da:85:a2:61:78:27:23:12:eb:97:a5:5f:03:f0:cd:
17:f0:eb:e1:5e:54:6a:fd:fe:01:87:b3:dc:57:6d:21:f6:bf:
eb:ff:fb:d2:39:24:b6:99:78:ec:05:67:42:10:5c:8e:66:ad:
9b:18:0b:ce:7a:8c:cc:c3:1e:6b:71:4f:7a:05:b1:97:1e:8a:
00:da:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:14 2025 by rpki-client