Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: viML6w1x1WyEMa4DItw+cfIm/lvR9ARxReDFQe3WYek=
Subject key identifier: F2:00:27:BB:59:2D:93:24:24:60:E4:FC:BA:12:D1:7C:EC:88:C7:17
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 0197782F6BD18B0597071E6520B43A66C80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 1208
Signing time: Mon 16 Jun 2025 10:01:03 +0000
Manifest this update: Mon 16 Jun 2025 10:01:03 +0000
Manifest next update: Tue 17 Jun 2025 10:01:03 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: YU7vtazrPdB1K6OtHTrkBuSobYQfhsh/06pD+gVydwk=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:6b:d1:8b:05:97:07:1e:65:20:b4:3a:66:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jun 16 10:01:03 2025 GMT
Not After : Jun 17 10:01:03 2025 GMT
Subject: CN=f20027bb592d93242460e4fcba12d17cec88c717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:68:51:ae:c7:71:07:99:db:af:e5:95:f3:
de:41:e0:de:b7:a9:f4:cb:75:5a:21:c0:e4:d5:a5:
4b:cb:af:53:3c:c7:6b:99:47:b4:1a:d9:fc:72:8f:
1f:70:52:20:8d:16:3f:a9:40:38:e2:16:36:8a:ad:
11:68:35:9f:70:f7:32:87:b5:7f:6b:96:89:81:77:
d1:bb:ed:a0:b9:f0:53:52:75:b7:fd:34:0b:42:ad:
09:eb:9d:a4:67:f4:16:ae:8b:95:88:96:dd:f9:c7:
de:d7:f1:3e:80:04:d9:40:6a:ea:3c:25:51:3f:7f:
78:64:80:d0:da:36:b4:dd:93:6c:19:ef:fe:d7:eb:
c7:fc:d4:9d:6a:26:3b:4e:d9:35:ea:dd:9b:7c:d8:
0c:18:81:11:51:42:9c:5e:a1:ef:78:b7:00:b4:1a:
4a:3c:8c:0b:04:0f:3c:4a:1f:65:22:00:1d:58:a1:
c0:6d:6b:68:21:7b:b8:bf:00:50:9a:34:f6:0f:10:
eb:b9:3a:82:2a:2a:6c:9c:85:cf:5d:f7:e3:b5:cc:
c5:81:73:5a:ae:76:76:7a:e2:d6:6d:70:ca:45:15:
78:07:76:a2:d9:d2:04:86:9a:44:08:7c:a3:02:b1:
6d:d8:38:e0:51:65:e6:0b:90:25:b9:b4:b4:f1:4c:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:00:27:BB:59:2D:93:24:24:60:E4:FC:BA:12:D1:7C:EC:88:C7:17
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:25:fb:95:42:78:72:50:49:32:65:f6:8f:cb:2a:9e:6d:07:
c7:2c:b4:5c:2f:bd:1c:31:3b:ef:29:47:7a:7b:8a:12:9c:24:
10:54:4d:30:99:13:25:a0:69:d3:ed:ac:f3:4f:50:68:bc:52:
f3:cd:0c:47:8b:81:48:73:fe:a1:ae:dd:4e:eb:e9:cc:9d:d7:
29:05:51:e9:c8:78:63:ff:13:b3:e3:92:fd:64:e9:f3:66:4b:
3e:dc:a5:ac:e6:76:00:76:f1:98:90:5e:14:f9:36:87:0d:bb:
77:48:db:f2:7d:07:48:47:83:cd:29:83:4f:7c:c4:37:85:ea:
c7:79:85:fc:4d:4f:8c:a1:97:6c:db:71:0f:bf:1d:44:35:72:
28:7f:ac:61:19:78:e2:eb:01:1e:26:8a:b7:f7:60:33:55:18:
a1:4b:35:1a:85:82:02:45:53:bb:04:8d:7b:d9:e9:83:25:58:
e1:f5:cf:39:74:31:ea:ce:a0:56:3f:dd:68:fd:ad:c7:27:03:
d0:0c:f1:0f:fa:80:47:7a:09:61:a6:f3:43:2a:0c:06:5a:9a:
86:93:f2:b1:f4:8e:3b:4f:23:86:d0:d4:5f:6f:50:ac:c3:0e:
f4:85:ff:fe:38:fc:c1:d5:3c:e6:f7:cb:d3:0b:60:92:57:db:
63:63:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:43:26 2025 by rpki-client