Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: NQwnXzNB0394xAdtbrwLF3MZJsDXm0DipW3n7Td2frU=
Subject key identifier: BE:6F:3F:8D:E1:5A:F6:23:66:3E:BF:73:97:4C:A0:FB:60:59:DA:DD
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 0197B8FCEA01E35AECEEF8140CC30BEF654F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 00:01:12 +0000
Manifest this update: Sun 29 Jun 2025 00:01:12 +0000
Manifest next update: Mon 30 Jun 2025 00:01:12 +0000
Files and hashes: 1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=)
2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: klBuzbETy5ImVWS2gYp9kuR854Z0P5u4BXecZvvy72Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:ea:01:e3:5a:ec:ee:f8:14:0c:c3:0b:ef:65:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Jun 29 00:01:12 2025 GMT
Not After : Jun 30 00:01:12 2025 GMT
Subject: CN=be6f3f8de15af623663ebf73974ca0fb6059dadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:8f:9f:75:88:6f:48:52:61:de:f9:15:77:
47:d9:55:ce:d2:9d:f3:ab:86:d6:93:75:9d:ec:e5:
84:a2:d1:f8:23:ea:10:45:42:9a:17:cd:68:ee:73:
86:10:86:4a:2a:0b:04:08:a8:8a:47:96:5a:b4:a9:
2a:48:40:84:70:46:b8:a5:a1:59:67:91:44:8f:09:
57:ca:eb:ac:4f:46:b8:f0:cb:df:10:80:7d:aa:4d:
91:e7:73:d8:7f:bc:c5:e2:9f:af:34:9b:8a:f0:8d:
96:e2:da:ad:e3:c2:6c:10:88:e9:2d:77:d7:61:ba:
24:f1:24:8b:39:14:ab:9a:35:d5:0e:16:8b:10:19:
d8:2e:2c:d8:51:c0:18:a5:05:4e:fe:d8:c9:66:fe:
35:74:12:74:b3:09:51:db:26:ff:37:8b:0a:3e:a7:
d7:47:23:ad:1a:68:11:03:a9:35:0f:9d:b4:31:b2:
7e:9e:00:81:77:bd:e1:92:8a:a5:27:09:21:bd:04:
d5:86:21:18:dc:b4:4e:cf:4c:a4:97:8c:b2:a7:f7:
87:c4:1a:86:6e:b4:18:ce:67:e0:38:5a:6b:51:87:
21:ad:5a:93:0a:21:25:77:6e:1c:83:1c:e0:a8:87:
14:62:ab:59:ab:7d:ae:82:d3:32:be:b5:c6:49:c8:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6F:3F:8D:E1:5A:F6:23:66:3E:BF:73:97:4C:A0:FB:60:59:DA:DD
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:be:b7:98:ea:7f:9e:c6:4c:4c:66:f2:87:22:f3:b6:b4:08:
f2:d8:7e:06:74:24:c9:3b:cb:a3:59:c0:7c:69:bc:76:15:1b:
36:b2:be:27:3b:3c:7f:6e:fb:8e:45:81:15:3e:fe:d1:55:67:
bc:1e:3b:52:5b:66:34:47:2f:41:47:72:c1:0d:6e:ec:b6:af:
63:1b:f0:9b:f0:f9:64:14:cf:08:c4:3c:87:cf:03:87:fa:b8:
ff:fe:13:52:c1:af:1a:3b:47:04:bf:cb:c3:a7:93:31:ad:75:
35:f5:31:96:49:23:65:fd:1f:b5:4b:04:84:29:b9:a2:47:8a:
66:16:b5:3b:0c:96:85:98:58:f8:70:d5:11:08:e6:46:9a:f2:
e2:82:33:aa:64:a5:63:95:7d:ae:52:fb:fb:1b:d4:94:fd:d1:
74:45:0a:4b:97:b9:23:38:7a:27:ad:50:e7:29:a7:03:2c:bc:
3b:31:cd:08:00:2b:9c:43:fe:de:48:04:61:1a:ea:28:2d:00:
31:1d:24:22:85:99:90:80:a0:48:57:5f:dd:58:7b:08:c3:c9:
e3:0a:18:c5:18:5a:af:09:d0:29:c2:ee:65:29:16:39:a5:a9:
42:c9:e8:f8:9e:ff:fd:e2:30:b0:5d:df:55:ab:53:fa:eb:84:
bc:d1:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:46:41 2025 by rpki-client