Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: 78RtUu1jObBMmEdeJmfVm60dscO9uf4W1lDdyaG2Biw=
Subject key identifier: C5:BA:32:6E:6A:31:98:2C:F8:D1:E2:C8:82:92:C3:6E:C9:90:62:AF
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 0197B5FC12D8025D5949FFED0CCD6169D192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 051F
Signing time: Sat 28 Jun 2025 10:01:25 +0000
Manifest this update: Sat 28 Jun 2025 10:01:25 +0000
Manifest next update: Sun 29 Jun 2025 10:01:25 +0000
Files and hashes: 1: AJ5wMI6kFAAGgXfPHZAVtLCSnP8.roa (hash: O5F5OKdgmFhYvl6NemyAslo9muG5v3CdZb38avB1q8I=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: +ol1nIRZxbpGsYu+vV5VjR0cnZKDUKb9sTWjidtZpys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:12:d8:02:5d:59:49:ff:ed:0c:cd:61:69:d1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Jun 28 10:01:25 2025 GMT
Not After : Jun 29 10:01:25 2025 GMT
Subject: CN=c5ba326e6a31982cf8d1e2c88292c36ec99062af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:41:5d:1c:29:21:11:a3:55:f3:f9:75:e1:
8e:c0:20:70:97:1f:e3:c8:17:43:10:ca:d0:c5:06:
40:b0:66:d3:f1:e0:49:c6:d2:79:9a:db:40:75:0a:
11:37:12:04:80:1b:e7:e8:cf:c4:1c:2a:8e:41:2c:
f9:20:ab:e2:dd:7d:a4:95:97:3d:cd:9d:90:2d:24:
de:8b:b4:d6:d6:d4:36:7b:4c:c0:44:e5:c1:8d:ea:
a7:2e:b3:fd:67:07:dc:f6:70:2f:95:d2:8b:d5:2b:
37:09:03:73:f3:39:fd:e9:48:4a:2a:b6:a1:e8:3c:
d4:16:5c:aa:b9:7a:cf:95:06:af:e7:57:e3:ef:dd:
ec:33:5a:f3:d7:cc:d3:23:1f:3a:5e:d7:29:55:49:
35:c8:24:ac:e2:f4:bb:c2:91:63:ab:56:29:8b:b0:
5c:15:35:fb:6f:76:1d:f6:22:62:69:9e:39:82:30:
37:99:e2:b3:cc:64:92:68:e4:04:fe:e4:cb:c9:93:
72:d1:92:6c:3f:91:98:92:5e:49:c0:a1:fe:ca:b7:
30:b4:a1:d2:95:64:b3:49:69:1c:cf:64:42:c6:b6:
51:f8:99:d2:1e:d7:2c:27:3d:d0:61:a4:23:fa:67:
4c:6d:f9:e9:97:7d:a5:72:1e:b7:95:9f:29:fd:76:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BA:32:6E:6A:31:98:2C:F8:D1:E2:C8:82:92:C3:6E:C9:90:62:AF
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7a:e5:cf:e2:00:3b:0d:1f:8b:e2:3d:84:37:b1:68:95:e3:
40:3c:c4:e6:b4:0b:cc:bd:e2:99:98:30:49:d7:65:37:bc:a4:
26:ca:52:12:b1:b1:97:e6:ac:59:33:47:ea:8e:e8:da:8c:93:
e9:55:32:9c:46:bb:a3:c3:48:d7:db:88:83:f8:5d:8e:a3:50:
79:de:25:cd:b2:29:73:d1:27:f9:d7:68:b9:48:44:36:88:a0:
ec:cf:86:0c:34:e5:2d:f9:0c:ff:bc:14:0a:8e:e8:bb:31:e4:
e1:9b:18:2f:f6:86:70:2b:18:8f:fb:17:61:11:21:c2:82:a0:
6d:7f:09:76:96:be:46:17:57:d6:ef:39:1f:57:7b:c1:3f:72:
8c:20:4d:ad:fc:8b:f3:28:94:89:f1:2d:7d:41:5c:10:e4:06:
85:63:d3:e1:a9:a3:98:d7:1e:80:40:9b:09:47:3c:bf:70:b9:
f0:2a:f1:3a:62:a2:64:11:98:fd:14:9c:97:2c:ea:55:66:08:
82:82:cf:2e:e9:bc:18:fa:10:fb:3e:64:35:99:fe:d4:b5:81:
60:c4:bd:81:bb:63:fd:21:71:4e:b9:71:51:b6:56:8f:55:db:
b8:b9:6c:43:5c:45:5b:69:29:cc:4a:0a:9c:c2:65:f7:b1:36:
70:91:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:12 2025 by rpki-client