Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: yW7lR97NSUShoyxJRZeSkxQv7iCCHv4sppKcTcdMcMQ=
Subject key identifier: 58:2E:DB:38:53:5E:61:99:B1:43:E6:AD:41:78:E9:57:A1:E1:6A:BB
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 01977ED5C0AC09089223211235886D4D4632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 0771
Signing time: Tue 17 Jun 2025 17:00:26 +0000
Manifest this update: Tue 17 Jun 2025 17:00:26 +0000
Manifest next update: Wed 18 Jun 2025 17:00:26 +0000
Files and hashes: 1: aHJU3TtGM9M9L2c33hiqaeAD6-M.roa (hash: Jnk6c3GJ5E4y6b+inckEyRoPVADxMl1TsyYlid/Y0Y0=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: YBvTxDt1cxID9qCyxX6TsmRbVkdAyNhnW1o+uSh0guk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d5:c0:ac:09:08:92:23:21:12:35:88:6d:4d:46:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Jun 17 17:00:26 2025 GMT
Not After : Jun 18 17:00:26 2025 GMT
Subject: CN=582edb38535e6199b143e6ad4178e957a1e16abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:ab:5b:b9:88:62:7c:af:9c:bc:de:94:b7:
57:8f:92:cf:20:7e:8b:13:d8:bf:42:99:42:82:df:
7a:33:6e:e3:c9:6b:d9:99:09:7c:82:86:bb:ec:f2:
b9:ab:94:ba:60:e3:cc:91:d0:e5:48:ea:92:d9:57:
13:a0:ae:80:03:8c:b3:e7:ea:eb:be:b2:c1:0b:b3:
28:5a:fe:ed:50:05:c2:fd:2f:b2:21:5c:0b:21:72:
a8:e6:aa:a6:a1:e2:e6:95:9a:1e:0f:03:de:14:f2:
4c:35:9a:bb:ba:e2:41:a8:cd:f2:1c:43:3e:67:6c:
9c:0a:18:bc:01:92:45:d7:92:88:ab:d4:a7:33:49:
c4:d8:4a:60:fd:df:41:87:a0:7c:59:5d:c2:fe:d2:
ac:d1:b0:a1:13:c9:75:1f:92:26:e5:11:59:4c:0d:
b3:0e:97:47:0e:fc:6c:93:e7:0c:1e:df:6d:08:2f:
1d:0a:8d:b2:58:f7:15:94:fe:9c:0a:91:a9:9a:92:
a8:09:89:33:d5:4d:b2:60:52:32:c3:97:82:d1:57:
bd:1f:4a:b0:d7:ad:87:1b:06:c5:8e:67:95:d2:af:
64:18:d9:3a:19:a1:cb:42:6c:b3:ea:5a:8a:0e:68:
30:7c:ce:00:e5:72:41:0a:e7:b2:46:32:bf:84:69:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:DB:38:53:5E:61:99:B1:43:E6:AD:41:78:E9:57:A1:E1:6A:BB
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:3f:b0:67:ee:20:6f:66:94:1a:4d:e9:1b:90:00:37:40:fe:
51:42:0e:08:3c:af:20:54:b0:a1:e4:53:d7:fb:ac:8b:fd:c4:
55:bd:44:94:5e:42:43:05:79:5e:55:15:cb:ee:e5:d7:0f:31:
ca:ab:f0:4c:b3:a1:db:b7:f6:21:cc:47:39:69:85:c9:a6:96:
b6:e5:bc:a6:41:43:42:ab:94:60:b5:d2:10:30:a4:a5:d1:80:
48:95:fd:72:42:75:da:db:e9:42:94:cd:27:ab:67:8c:7c:82:
cb:26:19:8f:d5:d7:00:12:2f:b7:ec:fa:dd:1c:ee:5f:0c:9d:
26:13:cc:4c:b5:04:ac:b5:e1:81:46:cd:c9:0b:ac:73:91:b0:
27:1d:5b:06:b6:a2:d4:10:de:4e:b1:e9:27:c9:23:1d:52:3d:
15:12:e0:ff:1f:7e:e2:8b:12:96:4e:dc:9f:3a:29:78:c0:48:
31:cd:70:79:11:f1:ee:1f:d6:bc:9a:d4:53:33:da:df:d8:3d:
b7:98:8c:1a:7e:23:2b:15:2d:3a:99:d3:4d:80:a9:73:aa:88:
cc:c7:e7:c1:63:9c:2c:a7:bc:16:0b:3e:a5:fb:47:fc:d1:da:
32:e0:bc:38:52:5e:3f:16:80:a3:2b:1d:1d:cf:d3:7a:de:97:
08:17:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:09:54 2025 by rpki-client