Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: MG8WWYge4kugQDljKF79712FjzVJAMouPYZNWhTdT20=
Subject key identifier: D9:0E:72:7E:00:0D:D3:1F:0D:70:E5:39:D6:07:AF:59:B5:63:2C:FA
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 0197B8FCFE371D19C12DAE1ABD985E7807AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 0FF0
Signing time: Sun 29 Jun 2025 00:01:17 +0000
Manifest this update: Sun 29 Jun 2025 00:01:17 +0000
Manifest next update: Mon 30 Jun 2025 00:01:17 +0000
Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: i7EOKhKA6zHxFYhwpGg00Iom2UmYlvVwrz/N36NZVDI=)
2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:fe:37:1d:19:c1:2d:ae:1a:bd:98:5e:78:07:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Jun 29 00:01:17 2025 GMT
Not After : Jun 30 00:01:17 2025 GMT
Subject: CN=d90e727e000dd31f0d70e539d607af59b5632cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:cb:98:e4:e2:7d:23:3e:fb:6e:5a:40:71:
5e:24:1c:fc:95:a8:b7:1b:2c:e6:5a:38:85:07:e9:
35:7a:f0:00:ac:71:c9:e5:70:c5:91:6d:f0:d7:6d:
c0:df:e2:17:cb:30:2f:d2:93:8a:61:1a:f6:49:9f:
48:c3:3f:71:11:3e:c6:69:5d:23:d0:32:62:13:c2:
65:a2:c4:30:bc:b3:04:49:6c:86:39:df:4f:17:85:
71:38:cf:4b:d4:82:15:25:ac:99:33:06:06:38:87:
a9:36:e2:76:f9:1c:43:bf:4f:3b:5d:da:2f:cb:4b:
df:20:1d:ba:7a:48:a2:83:c6:e6:42:de:a4:04:9c:
bc:4b:1f:fa:57:5c:8e:9b:11:c8:cb:27:f6:f8:3e:
16:c0:64:ad:91:24:9b:17:0b:39:57:be:a7:16:1a:
bd:ac:28:2a:14:71:c0:62:1b:6b:61:62:95:d0:3e:
68:dd:fc:0a:74:f0:d5:d6:de:4c:68:de:6e:f6:ae:
cd:92:be:a6:c1:33:ea:ca:67:89:78:fa:5d:24:03:
84:c5:24:a4:92:de:3c:48:9d:28:35:55:1e:c7:ec:
de:14:70:a5:b2:4f:5e:69:38:aa:5d:95:e2:9e:06:
06:2f:d2:79:98:b7:bf:be:f8:e6:f0:d1:dd:2c:7d:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0E:72:7E:00:0D:D3:1F:0D:70:E5:39:D6:07:AF:59:B5:63:2C:FA
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fd:a3:29:47:5b:10:49:75:e9:f3:02:0c:1c:81:26:35:74:
a2:0f:eb:e4:4f:40:33:52:46:ab:a3:ca:3d:c4:da:d6:65:04:
a4:94:27:49:7e:dc:c8:03:c8:69:e2:eb:49:8b:79:2e:1d:30:
45:9c:6d:89:9a:1a:3b:8f:5b:3a:fd:a6:50:34:9a:b2:37:f6:
cd:eb:3e:ac:7e:b9:25:b6:67:3d:83:a3:cb:d2:8a:05:d8:90:
d3:5e:3f:12:fb:d2:f2:19:5d:c9:cd:e5:b8:0f:b6:62:3a:bf:
ca:88:25:91:fc:02:35:bf:36:7d:f0:49:76:73:8b:a7:f1:32:
bf:83:35:ec:67:ef:e6:05:81:7b:f7:c9:ab:bc:6e:b2:33:4c:
e1:ac:97:22:1a:cf:9e:7a:c3:37:68:ff:6d:f3:4f:b3:7e:01:
f0:b7:62:65:47:34:79:02:de:9b:5c:83:31:a6:6f:e0:b4:85:
af:5f:8f:07:9b:67:e7:09:3f:84:5c:44:90:ad:a8:f9:6c:5b:
5d:1f:d8:26:82:ef:43:93:ec:13:f4:49:c4:56:ae:b6:cc:e4:
91:05:ff:1a:a3:64:c9:27:de:d3:b7:2b:dd:f7:c3:75:07:2e:
b2:bd:a7:81:d2:8c:b1:ea:37:6c:4e:5a:32:f8:38:38:77:e4:
0e:e3:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:45 2025 by rpki-client