Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier: U78ToVLLnR04I8VBeBPKaAZ1GFap6wh+ocjMOw8YrXw=
Subject key identifier: 08:E8:FF:66:0A:4F:52:DA:73:B0:8B:C8:4D:BE:59:EF:5E:35:F7:06
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial: 01978C91B026E01055BB627F84F0E5119370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number: 0362
Signing time: Fri 20 Jun 2025 09:00:47 +0000
Manifest this update: Fri 20 Jun 2025 09:00:47 +0000
Manifest next update: Sat 21 Jun 2025 09:00:47 +0000
Files and hashes: 1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: WaTG004hpxcENMKsvnCZs07I+HJzTmRfiiu11CUxJpc=)
2: ddFSz5BHQOYnaU-gHg3YrxEkhJw.roa (hash: adygbfjd+yjXvUTx2yOuoRyVaLmd0xsTX9kZsgRNyYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:91:b0:26:e0:10:55:bb:62:7f:84:f0:e5:11:93:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Validity
Not Before: Jun 20 09:00:47 2025 GMT
Not After : Jun 21 09:00:47 2025 GMT
Subject: CN=08e8ff660a4f52da73b08bc84dbe59ef5e35f706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:98:9b:ba:a8:bf:91:5e:ee:90:12:0a:da:
0b:df:5e:ac:9a:92:86:d8:44:76:24:75:48:37:da:
20:74:7b:a6:7f:40:e9:76:63:32:b7:4c:4f:c4:d0:
02:ba:08:29:34:a8:67:40:e4:4d:39:1e:e4:a7:13:
d7:a4:a2:9d:39:90:c3:d2:3b:f3:e8:24:fc:66:e9:
c4:58:47:fe:de:86:b7:30:52:5f:2e:da:69:a2:de:
8b:54:89:ce:9e:c1:75:63:38:9c:81:f8:73:7c:af:
66:24:4b:d9:55:93:e0:c4:c3:24:60:fa:30:6d:9a:
aa:8d:2b:d4:05:6c:8c:16:d4:61:36:b1:3d:c1:ea:
38:d0:a2:20:41:ac:00:55:f7:55:5f:c2:57:79:e0:
74:05:85:02:7d:ab:fc:6f:f9:ed:3d:16:dd:3e:a0:
40:a7:98:99:9b:ed:31:38:4a:9d:24:71:a7:88:6d:
b0:8a:8a:99:b4:1b:8c:62:4b:0f:3b:32:7f:35:fa:
5d:34:1a:77:92:97:c2:6d:94:df:79:00:33:dc:3b:
39:2c:81:13:b2:6b:7a:10:2e:5a:a4:90:87:2d:fb:
88:c9:52:fa:c5:be:1d:94:a7:47:f6:f7:27:ee:e7:
99:db:e0:3e:3a:29:a0:f3:8f:58:08:b6:ba:de:1f:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:FF:66:0A:4F:52:DA:73:B0:8B:C8:4D:BE:59:EF:5E:35:F7:06
X509v3 Authority Key Identifier:
keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:21:a4:8e:36:47:86:5d:0d:c3:d6:6f:bd:bf:9c:01:d0:36:
6e:75:87:b0:6a:ed:14:f4:92:4e:1a:56:f4:f7:b1:a2:43:33:
32:7a:ab:b3:0f:aa:66:d4:a9:9a:ac:38:5f:d3:0f:cf:05:db:
05:6b:37:fa:28:6b:7e:50:47:14:b9:95:55:26:5a:35:a1:bc:
bf:91:cb:b1:4e:fe:25:56:12:69:b7:c8:06:b8:fa:75:d4:aa:
8e:93:9d:05:a4:c4:02:96:e6:92:45:46:57:57:15:0e:b4:a6:
85:c8:82:85:ce:82:1f:4b:f9:7c:41:74:28:25:8b:35:38:46:
21:22:0b:20:bb:87:4e:c9:db:c8:f7:76:64:be:81:ef:5a:e0:
d7:f4:77:c8:8d:97:ee:80:79:ab:29:51:a3:78:b4:43:ee:0a:
a5:76:fa:04:b5:a7:7d:f0:3e:1d:44:c4:4b:c6:15:76:5b:0c:
9b:98:fc:b1:1f:db:a5:f5:0d:60:91:b6:f3:ba:5d:bc:d6:a5:
75:0f:24:b6:c0:db:cf:df:fa:76:f7:51:2c:2d:81:92:f9:48:
a3:e9:82:db:8a:0b:c2:11:56:f5:4d:db:b3:37:70:ee:2c:30:
94:5a:fa:97:37:54:96:56:2f:f5:ae:e6:23:b7:d3:e8:6d:8b:
2d:b2:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:14:45 2025 by rpki-client