Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: iN/SKpPYSW98TBTtYF3AacQQaLie3tlxaGKVL+iZccc=
Subject key identifier: E9:BC:0B:99:33:11:A2:E4:F6:6B:96:4A:2A:DD:3E:83:A5:D1:E9:93
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 0197B8215542EB0D1D7ACCDBDFD87C19F23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 08A7
Signing time: Sat 28 Jun 2025 20:01:21 +0000
Manifest this update: Sat 28 Jun 2025 20:01:21 +0000
Manifest next update: Sun 29 Jun 2025 20:01:21 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: bjpWVb3iAz2QC+J0QhBCheTDLAMQdZ5EdPwQGnTMqhw=)
2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:55:42:eb:0d:1d:7a:cc:db:df:d8:7c:19:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Jun 28 20:01:21 2025 GMT
Not After : Jun 29 20:01:21 2025 GMT
Subject: CN=e9bc0b993311a2e4f66b964a2add3e83a5d1e993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:d8:6a:6b:f0:69:d9:45:a7:e8:70:b0:10:
54:a2:ce:0d:17:5c:3b:1e:d6:de:ec:92:79:0b:c5:
ca:51:de:68:b6:b5:d3:71:7e:c1:8b:87:a7:92:18:
a4:cb:79:53:ad:1c:8d:40:83:27:26:d6:a7:e0:62:
c4:5b:cf:98:bb:0c:58:90:bb:6d:b1:07:fe:0b:2f:
ba:ac:f8:6a:f6:24:69:5e:7f:0b:fe:23:91:b9:a8:
73:6c:1b:95:30:99:b5:81:e7:14:0e:87:48:1f:7a:
d9:2d:5d:ed:91:68:d4:2c:3f:cd:89:2e:52:f5:96:
f5:52:6c:f2:26:cb:42:a2:a3:6e:87:d1:7f:6d:3b:
dd:39:a6:e4:7d:eb:76:66:f2:d4:c7:41:37:90:8b:
33:76:4e:ba:9b:50:84:16:65:07:c2:a8:3c:61:e8:
36:39:a0:05:64:50:fd:c3:8b:0c:91:10:91:53:20:
6b:1a:e8:1e:c0:88:35:bb:9f:bd:5f:f0:c6:ad:93:
6e:1b:cf:b8:c5:82:92:8c:c3:0a:6b:92:0b:0f:78:
d0:a7:da:d8:0d:2c:d2:b0:66:b3:56:92:0b:c5:fc:
ad:81:f8:9b:51:f8:b7:57:0b:14:e3:62:70:9c:e5:
2d:4e:ba:31:c7:50:0c:f7:42:c7:fe:a3:26:69:bf:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:0B:99:33:11:A2:E4:F6:6B:96:4A:2A:DD:3E:83:A5:D1:E9:93
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4b:7a:d9:88:05:17:8c:2f:f3:c4:81:92:89:47:35:d3:c0:
51:3c:7e:f5:94:ce:62:3f:03:6e:60:cd:2f:3a:da:ed:7f:69:
6f:fd:58:40:04:c5:46:ce:41:70:eb:bb:0e:a2:d7:34:ea:56:
95:b8:ef:89:04:a5:82:be:05:f5:7a:e3:f1:ac:e6:0a:26:00:
7b:33:bd:e7:ea:da:1c:ae:be:57:2b:2e:12:bb:47:93:07:ef:
09:db:76:07:e4:fe:f5:45:3f:05:fa:0e:7e:fc:c2:36:e2:29:
9b:d5:91:f9:f9:93:f9:2b:81:32:eb:bb:cd:f6:0e:69:ba:e4:
a1:e6:e0:b6:36:97:c2:f2:7c:71:d6:15:84:04:63:8c:77:a4:
27:b5:7e:14:62:ca:cb:6a:ca:3d:8c:17:11:f0:9d:2e:da:1d:
43:33:56:9d:9e:af:17:80:c4:53:a2:e0:f5:ac:07:63:72:98:
43:29:6f:5d:ff:d8:0f:8d:64:8e:0f:e6:50:20:a8:c1:13:01:
47:ad:d3:a3:c1:69:cf:a3:43:82:ab:c4:c2:13:79:59:c0:9a:
64:11:0b:1a:47:82:1d:4b:59:4b:fd:fb:f1:67:50:19:df:9c:
54:65:c8:fd:6c:22:b3:42:c9:1c:e8:e2:47:86:67:33:99:24:
9a:1e:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:14 2025 by rpki-client