Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: Tql3t7/0tgqYhilgg6alj0OSzdAxCY0PnUJNoxLvbFU=
Subject key identifier: 9B:D7:60:DD:2E:3B:DE:70:A4:53:72:AD:61:AE:DF:0F:2A:40:50:3B
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 01976D0692053D53400CD9F9A0E73A9E3642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0CAB
Signing time: Sat 14 Jun 2025 06:00:36 +0000
Manifest this update: Sat 14 Jun 2025 06:00:36 +0000
Manifest next update: Sun 15 Jun 2025 06:00:36 +0000
Files and hashes: 1: Hk8OntQ5zqlTFn040DQPSldzYiE.roa (hash: KP+8WLsncYNj0fRydYrCKf8Ah12qAHLXgrBdfpvlTN0=)
2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: W9jTimtxhNcirmZ6leic1pgcOvcRLg9F+arzfQKaYvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:92:05:3d:53:40:0c:d9:f9:a0:e7:3a:9e:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Jun 14 06:00:36 2025 GMT
Not After : Jun 15 06:00:36 2025 GMT
Subject: CN=9bd760dd2e3bde70a45372ad61aedf0f2a40503b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:a1:cf:a5:bd:31:e8:48:00:09:10:24:49:
b2:1f:7b:df:eb:98:de:03:70:0c:3f:e4:32:71:39:
c2:99:b4:f4:ea:8c:72:60:34:6e:f9:64:2e:b9:ab:
d1:47:61:02:48:c7:5f:65:02:e3:f2:be:97:21:41:
0f:3c:dd:f6:19:0b:09:e1:8d:5a:8e:9f:22:11:07:
82:98:06:8d:fa:7d:46:be:1d:42:71:6a:44:bb:59:
ae:78:4c:09:25:bf:dc:b3:d0:be:59:f8:ac:37:e8:
d4:a0:48:2e:62:db:84:a1:6a:2f:29:a8:8d:0d:c3:
fa:de:4c:5e:17:85:f4:18:df:79:d5:96:f3:96:66:
da:d1:9a:f1:00:aa:ec:54:a0:b6:b3:0e:3e:9c:18:
ed:07:87:e7:a6:39:f5:7a:8d:e5:45:7e:f2:36:fd:
37:24:c4:d3:f7:e5:69:b4:2c:54:b7:a2:5f:65:f5:
89:93:ec:85:db:3d:c8:84:c8:4f:22:bb:92:68:00:
15:ca:a0:fa:57:b3:45:e0:8d:3c:96:9f:f8:94:81:
55:62:f9:59:2a:44:81:50:6f:d1:45:7f:c8:4c:86:
71:08:d9:02:b9:08:c0:54:27:1e:bf:65:4a:5f:bc:
5d:29:5c:e7:5a:7c:6f:32:ea:1a:31:60:bf:52:f9:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:60:DD:2E:3B:DE:70:A4:53:72:AD:61:AE:DF:0F:2A:40:50:3B
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6e:cc:13:fa:52:47:85:28:31:d4:f8:fd:c6:a3:55:6c:42:
8c:eb:d1:2b:16:7b:57:28:b8:10:e7:a8:73:2e:9b:e9:c3:90:
86:cb:f7:a9:0c:ef:f2:47:5e:57:6f:54:6c:73:d4:91:a8:fb:
ab:7a:c2:55:2b:bf:86:e2:31:59:50:f7:21:83:df:d2:ce:35:
6c:5a:41:89:0b:e1:71:8b:b4:8b:c0:f4:e7:13:70:57:e7:b0:
42:64:c1:18:8b:80:8e:0e:20:09:96:ab:89:a4:42:a9:8f:a1:
32:04:ed:86:47:90:53:07:64:a7:66:1d:9f:af:6a:53:2b:04:
e5:1e:95:94:5d:14:86:c5:06:d6:52:5d:eb:18:af:d6:9d:b4:
a1:be:cd:75:97:ad:77:d9:59:f0:00:e2:65:80:d5:68:be:de:
07:45:8e:cb:7b:b8:29:4e:14:04:25:f8:3c:ea:27:38:2c:25:
d7:d0:af:a9:62:68:20:17:f9:85:43:00:de:24:2a:00:26:17:
45:8d:e3:67:69:6b:34:0b:76:43:4c:3c:fe:22:77:01:d6:48:
2b:9c:18:80:37:40:24:ea:89:14:4f:49:cd:de:eb:8d:5b:3b:
7d:26:6d:00:2f:68:1e:5d:dd:f8:eb:6e:59:0b:d9:2c:63:87:
54:7c:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:21 2025 by rpki-client