Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: p5lBuhRY4EckXS9mvil7U9GaEpV+M9ymLhhQ49YHei8=
Subject key identifier: DB:5B:8F:CF:A0:D8:49:75:18:E4:6C:86:8F:76:20:53:C7:66:B2:B3
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 01976D067A77D78A1AB93F49255F6E52E8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 14D4
Signing time: Sat 14 Jun 2025 06:00:30 +0000
Manifest this update: Sat 14 Jun 2025 06:00:30 +0000
Manifest next update: Sun 15 Jun 2025 06:00:30 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: DxlwdlCY8b4loCX280eq/GrMxAwBCRxdyDGZ678gTf0=)
2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=)
3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7a:77:d7:8a:1a:b9:3f:49:25:5f:6e:52:e8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jun 14 06:00:30 2025 GMT
Not After : Jun 15 06:00:30 2025 GMT
Subject: CN=db5b8fcfa0d8497518e46c868f762053c766b2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ed:8b:b0:3f:b8:63:48:65:82:d6:49:52:0f:
d1:b7:90:27:80:4c:77:0f:4b:2e:4c:b5:35:db:91:
86:3f:6b:b3:c2:d0:ac:05:2d:ae:e6:b9:d7:cc:00:
32:40:8c:c8:b0:84:c4:b0:b3:5b:26:de:db:bf:d0:
a3:9c:2d:77:2d:db:5f:41:3e:34:c3:46:4b:eb:9f:
76:a0:43:af:41:ab:97:18:d9:4a:b1:4d:72:d2:ec:
9d:23:b4:24:82:49:cf:ac:0a:b1:3f:d6:55:6b:cc:
93:0a:6e:e2:a8:e3:52:89:a0:a0:03:f5:c1:8c:b4:
ad:dc:b0:29:ce:61:af:45:17:cd:80:c3:46:5d:9d:
b2:92:d5:6f:fa:50:d3:63:f7:97:ef:03:89:bd:92:
ad:82:00:13:84:86:01:04:2c:5a:7a:ad:fa:64:2c:
10:bf:e4:4a:af:cd:e5:97:77:fb:a2:cf:34:e3:44:
9e:a4:2f:10:18:57:d0:ab:69:13:76:7d:52:b7:c8:
2f:ea:10:b9:89:bb:5b:0c:f7:ff:77:8c:c3:51:df:
86:45:a9:2e:9a:a0:79:82:7c:49:d0:f7:de:e2:4c:
40:94:64:47:2b:6e:87:24:be:5a:81:b5:66:ab:f8:
d3:9b:33:b8:99:63:2a:3e:11:59:fc:05:6c:2e:31:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5B:8F:CF:A0:D8:49:75:18:E4:6C:86:8F:76:20:53:C7:66:B2:B3
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5f:87:ce:fd:9d:18:3d:a6:dd:ab:1e:ff:37:b4:7c:8a:49:
28:d4:b1:5d:bd:57:23:12:8a:32:2b:79:16:82:67:b0:ad:bc:
35:b3:11:ef:17:0b:72:d9:07:f5:dd:1d:a8:57:a5:30:1c:cf:
0b:30:5c:70:e7:54:ad:a2:c7:42:27:56:8d:09:9b:d9:af:8d:
27:d9:6b:4e:1d:74:f1:42:3d:30:e1:42:19:40:ee:14:86:fa:
19:1a:0d:38:7c:c4:67:9a:b2:4a:30:5a:01:8a:9b:35:f2:89:
8b:c0:b6:71:9f:1d:e0:89:55:fd:4f:3a:ac:7e:8b:3e:e9:c1:
ca:04:e5:f0:76:22:c3:2a:72:b3:25:04:b0:fd:69:c8:6b:48:
b6:52:48:78:03:9f:dc:75:1f:bd:a3:95:e3:b6:f9:74:1a:8f:
1e:62:3b:90:e5:7d:6d:1e:31:1c:30:60:15:35:d4:ac:08:9c:
b2:39:b8:cb:a8:5e:96:02:1c:dc:58:fe:b6:75:13:f9:58:53:
b6:15:f4:19:2a:59:47:2f:3d:39:a9:e8:6a:34:15:39:7e:94:
2b:cf:ee:01:71:bb:86:23:d2:e5:b5:ac:1b:17:67:48:e6:2f:
70:e9:b6:44:11:81:cc:15:39:e7:6f:18:d5:30:63:bf:2e:90:
58:c8:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:56:36 2025 by rpki-client