Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File: ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier: XyaOEuz3Y+mfJ6ch5ugaV2sjoEFBtrl6GOEivJ7KYNA=
Subject key identifier: A2:E3:3B:14:EE:36:40:BC:1B:C4:D7:0B:0E:8C:DF:84:F4:4E:09:53
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial: 0197B70E6E0F2C8F9D421D73BEE038E4AC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number: 0E8D
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: RNCbT9TcMn+I4X5HEr3oziBb9wf+mNC55hpRXzS8yfo=)
2: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (hash: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=)
3: Qetcf0dQacmnDzzLj6Br0uoMaiI.roa (hash: kfWLgyOV8y1YMkD0xHciwqgNJz90NpBbtolieL+YMGs=)
4: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (hash: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6e:0f:2c:8f:9d:42:1d:73:be:e0:38:e4:ac:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=a2e33b14ee3640bc1bc4d70b0e8cdf84f44e0953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:d0:64:80:84:54:1b:5e:2b:1c:ed:cf:d6:
5b:5e:0a:b1:b2:a2:b2:90:07:03:12:7e:b8:8d:0a:
50:2b:52:a3:05:d9:09:47:c8:40:c6:5a:5c:37:1b:
fa:4b:1b:9f:9c:04:7e:4e:39:ac:eb:1e:84:74:b2:
0f:aa:a1:74:df:a2:94:fc:86:10:c2:18:61:16:2b:
38:e9:5c:e9:e3:7f:c0:d1:68:21:2f:8f:bd:d7:f1:
44:23:d6:92:03:1a:16:48:4a:af:64:c8:dd:5d:92:
df:72:dc:1c:0b:e3:d4:34:8e:93:b0:1a:ae:c7:07:
03:1c:ab:0e:2b:9f:0e:2a:b5:e0:6e:c1:d8:fb:d1:
36:1f:0a:89:14:fa:18:17:05:78:8e:c6:44:3a:d4:
d1:6d:8e:4d:23:27:25:a5:a9:a2:d1:99:a9:5e:68:
27:a6:6d:af:7b:ce:43:d6:5b:e5:30:c3:e6:2e:bb:
c0:ad:20:45:16:ba:14:a5:b9:52:63:1f:37:92:f1:
a7:22:47:db:34:9c:79:8e:67:4b:b5:a2:37:93:5f:
de:1d:18:69:d9:38:39:17:00:d6:e2:a6:1a:3d:3e:
ce:e2:c9:90:3e:33:19:8a:49:f8:dc:46:91:79:04:
cd:51:c8:32:6c:8f:9b:89:3a:e5:c5:fa:6e:a0:da:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E3:3B:14:EE:36:40:BC:1B:C4:D7:0B:0E:8C:DF:84:F4:4E:09:53
X509v3 Authority Key Identifier:
keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4f:1a:51:93:3e:42:98:09:54:8d:fe:eb:41:1a:6b:78:80:
16:fa:8f:5e:ae:6e:fd:ac:a6:98:ee:0d:cb:f7:4b:f2:e5:1c:
e1:4d:9b:47:31:25:82:c0:49:bb:7b:97:9e:07:a7:00:72:73:
50:32:c1:d4:1f:37:07:d6:50:2e:ff:34:3d:c9:88:0c:31:a9:
a0:b5:96:0a:99:c6:e3:92:fb:b4:1f:3c:12:60:91:36:4e:d7:
25:ad:e3:2f:28:0f:5c:8f:e1:37:45:af:fd:76:b8:3d:2a:c0:
9b:a7:8d:31:17:9e:82:4e:60:24:2f:f7:39:eb:55:57:66:0d:
49:32:cd:b6:30:51:a8:49:0b:50:b0:e5:13:b4:5e:c1:ae:0a:
6b:87:36:fa:ae:fd:bd:b7:52:fb:eb:a3:72:d1:cc:b4:a4:06:
b7:f9:bd:47:1a:ea:03:5c:67:6f:8c:17:5a:6c:bd:3f:5f:6a:
7a:14:af:3b:be:24:e3:04:cd:a7:9c:9e:dc:8b:85:35:ef:11:
19:1e:d1:3b:71:9b:96:0e:6f:6f:e0:ac:81:10:ca:70:67:53:
5b:d2:c5:4a:24:b9:81:2c:28:03:a1:8c:62:c2:fb:d4:c3:6a:
90:5c:18:a1:f1:b0:34:71:b2:f1:a1:3b:d7:aa:de:dc:b3:d6:
34:fb:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:52 2025 by rpki-client