Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: Xxt+H2d4ojih3q6iQ2AtkUpfMMklmafzFVQY/FNmhzg=
Subject key identifier: 38:9D:CB:30:D4:19:99:2E:C4:74:E0:91:4C:24:EC:CF:10:08:F5:65
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 0197B70EEB1961EDFA52FE053049434E8160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 1453
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: kgSNentWjaovECYICDi7F1eVMWPKefre54Zy6zd+iVE=)
2: bOONrlZHdROoIahZ7NmIjgIdExM.roa (hash: 1aT2l6/v3aO2MOldiF+P6gsdMx47ItIcMI7fEC/C0L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:eb:19:61:ed:fa:52:fe:05:30:49:43:4e:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=389dcb30d419992ec474e0914c24eccf1008f565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:6e:34:e5:bb:92:90:77:c2:8a:3b:c3:bd:
a1:0b:ec:74:a9:89:e5:84:c5:13:0b:50:a3:e0:b4:
bf:c8:70:d7:60:5b:95:b8:2b:d5:7e:91:9a:2e:76:
66:20:57:fd:1e:91:66:a8:c1:02:f0:63:b0:52:c8:
c6:9c:5a:96:51:de:6b:fd:80:ad:61:76:53:e9:a9:
aa:fc:8c:b3:a7:24:99:0f:2a:04:da:b9:d3:ce:8a:
7f:ee:8d:d4:bc:e6:55:cd:f2:1a:c5:3a:7b:b3:85:
c7:23:5b:f2:c7:f5:43:79:03:e1:7e:e5:cc:e2:1d:
ab:11:1d:c3:9f:eb:2c:52:e3:48:1c:8a:3e:e2:21:
d8:43:d5:fc:89:49:74:5b:21:46:c4:4f:9c:d4:5d:
75:ba:b1:6f:8d:11:ba:e3:99:c6:2f:12:0a:6d:e9:
36:a1:02:03:c9:5c:0b:53:15:47:55:5e:2c:09:0a:
c1:b4:38:3c:bd:b3:4b:cb:92:2b:55:52:2f:3f:9c:
89:23:85:98:4a:99:4c:b5:be:1d:2f:e7:fc:92:65:
a8:a6:ba:90:47:b3:b5:94:fa:7d:44:94:43:57:5e:
8e:bd:a6:5e:13:00:66:65:93:b0:b6:52:40:8a:37:
b2:76:6d:e8:25:78:34:dc:66:a1:56:f6:bd:44:17:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:CB:30:D4:19:99:2E:C4:74:E0:91:4C:24:EC:CF:10:08:F5:65
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:17:9b:89:47:ea:3b:ee:89:6c:cd:79:ed:b3:5b:c9:55:
b4:d3:a2:9d:99:1f:d1:a5:ef:5d:b6:86:c9:2f:0a:82:b1:2a:
d7:19:dc:cf:ec:25:80:fa:0a:b9:c1:5d:db:c2:c7:41:b3:38:
e2:46:6c:c2:e7:bc:0b:fe:c6:84:e9:09:08:ab:68:0e:56:78:
48:64:34:f9:07:09:4c:24:6e:2b:66:fc:96:88:13:b7:d2:78:
1e:55:e1:69:46:cb:ce:af:e6:26:8a:36:22:e9:2e:1f:f4:21:
bc:2e:aa:e0:b1:a8:64:8e:15:aa:7f:79:10:88:ea:42:37:77:
1f:23:27:29:46:20:b3:f2:b2:41:10:d4:ff:00:56:12:ce:07:
22:86:c2:a9:29:00:9a:c3:5d:11:7b:86:08:65:a6:05:32:e2:
f0:16:d7:0c:d3:7c:e9:55:c1:a7:db:7b:ba:a2:39:0c:d4:99:
73:0e:51:b2:eb:59:24:9d:5f:d0:e7:5b:ae:cd:6e:00:5b:cf:
43:32:22:d7:a3:b8:95:c1:7f:f3:d4:68:24:52:5a:c2:29:b2:
3f:27:db:95:65:9b:a3:c2:fb:7f:59:7b:b2:38:b7:e2:d5:24:
c7:c3:80:eb:b9:a4:fb:b4:dc:e9:b4:c4:76:fb:c9:b9:5f:92:
5c:ce:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:52 2025 by rpki-client