Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
File: aIPzR-OJH1c9-AFa1swzHM6wR2g.mft (raw, json)
Hash identifier: 306Xz1fXES7+7CaT4iNKmzvHxmXyoc+McsC9GqK5ZL0=
Subject key identifier: 46:C4:20:2B:38:63:DA:07:AF:63:27:79:F8:1D:58:9E:B4:BF:A7:0C
Authority key identifier: 68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
Certificate issuer: /CN=6883f347e3891f573df8015ad6cc331cceb04768
Certificate serial: 0197B6D7888FC16A0E4C04AC97E0942B099B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
Manifest number: 055E
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: aIPzR-OJH1c9-AFa1swzHM6wR2g.crl (hash: LpRmuuwD5YNDEFcx6lyJFtv6FTUglNGchPI7otnxWuo=)
2: yzwcVTa4_EkxmkA3zs7RU2L0KuA.roa (hash: DiSWwAw7nqN/ZHYKb36GWp0hrc3vDQ6bPbUIBdkwyko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:88:8f:c1:6a:0e:4c:04:ac:97:e0:94:2b:09:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6883f347e3891f573df8015ad6cc331cceb04768
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=46c4202b3863da07af632779f81d589eb4bfa70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:1e:fb:e2:76:b0:e0:88:bd:aa:d4:39:5b:
b9:c3:1a:85:62:b4:9b:e2:47:e1:40:f7:d6:81:71:
d1:0c:77:78:83:a0:58:bd:18:e7:05:9e:6c:52:d3:
2e:7b:34:6e:93:c0:9d:99:61:08:b6:95:c9:90:ed:
4e:1e:57:7d:07:2c:44:d7:88:e9:18:9e:87:f2:6f:
89:78:07:1a:6f:3f:85:b9:f1:f6:f1:ec:88:34:3c:
0d:9a:6b:9b:01:a4:47:4d:51:e3:f7:34:98:2f:19:
30:89:a5:fa:02:e9:5b:fd:e9:b7:f9:8c:32:12:58:
31:b1:40:67:9f:fd:6b:bb:b8:d7:38:c8:c7:b7:d0:
15:cb:30:10:bd:51:1d:48:d9:1f:80:b3:95:49:23:
8d:dd:67:a4:2c:13:3b:5b:80:91:b4:9a:c3:4e:77:
a6:43:5a:b0:17:05:52:75:00:13:00:83:40:41:a4:
6a:e4:b0:24:3e:71:d9:ba:56:9d:eb:c1:60:40:6b:
a5:03:31:5a:ac:12:ac:2a:8d:a9:ea:4b:da:b3:a3:
97:ad:68:ba:6c:b9:d9:f9:d5:56:81:16:2b:41:1c:
c0:35:bf:72:2c:f4:6e:8e:f1:a2:ee:40:86:6e:cb:
b3:f2:92:04:5b:ac:bc:ca:07:34:c1:75:60:9b:c4:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C4:20:2B:38:63:DA:07:AF:63:27:79:F8:1D:58:9E:B4:BF:A7:0C
X509v3 Authority Key Identifier:
keyid:68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:da:cf:61:bf:c7:29:5d:1a:5b:f6:df:39:4e:3c:2d:8d:7f:
f6:9f:ad:81:e4:1c:a3:b0:f4:15:e5:e8:6c:08:13:92:2c:3e:
54:ef:f4:a3:65:0f:38:5e:47:93:fc:84:e8:f6:74:db:cc:0d:
38:a4:2c:7d:77:10:be:cc:a3:f6:ac:a9:91:8f:b4:62:0a:64:
a0:04:f9:61:67:66:48:e8:7d:ca:d7:de:5b:df:c2:18:5a:5d:
a9:2a:cd:9f:18:ad:d8:94:3c:85:a6:74:3c:54:a3:7d:69:86:
ed:0c:c3:5a:da:fb:2d:d7:a3:24:da:a3:3d:f0:12:35:77:ec:
c6:28:6e:17:d8:fe:9c:0f:41:1c:5d:c1:8d:1e:f3:48:49:c9:
7c:0a:58:91:05:f0:69:f7:1a:4a:e5:64:c1:1e:14:69:d4:c6:
fd:d4:7d:5b:22:27:55:89:43:0c:00:57:62:14:17:0f:b2:d0:
cd:64:9a:ca:5a:24:68:dc:11:70:a9:33:41:6d:5d:2d:99:68:
bd:dd:87:39:9e:24:5e:f7:ff:d6:ba:52:5e:6c:9a:d3:8c:be:
5f:19:e5:af:2f:34:1b:ed:f0:8e:32:59:2a:b4:f2:c4:e8:72:
4e:eb:b1:de:df:03:29:f9:97:e1:4d:17:f7:9b:3b:0a:ad:a0:
e4:9d:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:38 2025 by rpki-client