Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File: ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier: 9Xv7ZhClgezeCzKmYTZ08Y4GMK0898MMuw4kq358Lh0=
Subject key identifier: 48:2A:AF:DA:00:B1:AC:8E:F1:3D:8A:CE:1C:2C:A2:80:EE:CB:B3:6C
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 0197B70ECB7A2084D5DF3FDCD811EA09D12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: 247X9D1Esz836HPvMIfzLW0B854.roa (hash: Fkey/OHY+Y9n6nw6ttvvB2iW6TWF5VqkiLPkPWvaqPI=)
2: 8SNIPJlJXNItZIA2GR0OXYDa_i8.roa (hash: aeM9z7aE9fQDO6RpZPSWesAItm3ODAcugSKxcWZxiRA=)
3: TUyrNyg3GzeG46BhvjS1xNbOwkc.roa (hash: KZj23T82PopCcscXVu/2+qnCL784PU3BrydL/yln4Uo=)
4: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: tAYN1s6WZ3oRfoMCC3PTV1tZnGYzK19q9zwLKlj6u4M=)
5: vtQmEnQvCzTxgKx6eoQDleSryN0.roa (hash: X99pd7WPnymxRoUriny009KnFNB5G5RPTZ3dWOg4RYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cb:7a:20:84:d5:df:3f:dc:d8:11:ea:09:d1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=482aafda00b1ac8ef13d8ace1c2ca280eecbb36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:c7:71:9d:45:99:bb:d5:ce:2e:16:0f:0d:
67:b6:60:c7:e9:f6:01:80:05:86:07:7c:6c:0d:fa:
c3:49:42:14:ae:81:85:e8:3d:e9:9b:e5:bd:dc:73:
94:cb:e6:20:0c:5d:2e:78:3d:28:34:9c:a7:b2:7e:
c1:3a:76:2c:28:4c:93:12:c2:e7:77:30:ff:bc:31:
49:28:3c:ce:3d:97:15:3e:30:eb:54:5f:ea:4f:03:
5e:39:a3:07:01:fd:89:c2:ba:e1:9e:29:b3:c1:54:
21:9c:b2:9d:58:6a:f2:cc:a0:65:61:45:cd:69:88:
f2:20:25:ec:b9:12:ae:6d:17:c5:43:3e:ea:84:30:
c3:60:6f:34:3a:cd:3c:d8:01:4e:29:fa:14:9a:64:
c0:e8:70:c4:dd:15:f3:45:5a:65:38:be:78:d9:a3:
bb:ad:79:db:90:d0:5e:86:61:34:50:d8:b6:97:88:
5e:4e:24:93:f1:94:d2:be:df:ef:c8:c0:a3:8f:df:
cc:ab:60:b4:63:e6:9a:de:90:62:5d:bd:33:1f:b6:
75:63:b2:8d:5a:15:8f:44:c1:dc:25:55:d8:e8:42:
a5:e4:5e:08:58:be:83:cb:51:e0:ef:8a:46:04:34:
14:32:d7:6e:a1:3f:c6:01:ac:a6:cc:72:c7:8a:ff:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:AF:DA:00:B1:AC:8E:F1:3D:8A:CE:1C:2C:A2:80:EE:CB:B3:6C
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b1:12:cb:e2:7e:df:3f:a9:fe:cb:8b:0f:98:96:96:f1:e2:
a6:6a:21:65:97:73:c7:6e:38:2b:1b:5f:2e:bd:5b:a2:81:c7:
b4:ef:8d:ee:23:06:a9:65:f4:90:8d:32:e8:32:4b:82:a1:d9:
f8:7f:73:72:a2:50:d2:4f:62:53:f4:d3:a0:c1:cf:37:22:6e:
e6:58:bc:31:47:d7:59:1c:f3:93:0d:4d:ce:2c:d0:d2:49:f3:
c3:cf:e5:fa:7b:a4:ee:84:3c:7c:7b:23:0d:15:25:80:58:2a:
1d:6f:0e:a3:72:52:f3:06:41:0c:31:fd:29:7e:0e:c2:16:0b:
7c:78:02:97:44:2e:4d:87:c0:c1:4d:35:77:96:af:3e:3f:00:
06:43:c5:23:6c:43:5d:fa:31:d1:93:a6:c9:e0:49:ce:95:44:
4c:99:90:20:3d:6d:37:e7:84:5e:60:14:1a:a3:ec:f2:f6:1a:
db:bd:a4:2b:1e:4e:20:2e:2a:b5:03:28:2e:18:73:d2:ad:07:
a0:83:fd:bb:21:2d:05:a2:aa:3b:f4:5d:aa:bb:11:59:af:2c:
bd:ec:e9:6d:0a:7a:9f:47:ee:7c:a4:f8:f2:68:3e:3c:9a:f4:
9b:52:38:4f:a0:76:99:ae:f7:b2:78:66:58:c2:da:07:54:ee:
a6:e9:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:40 2025 by rpki-client