
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: UugSpHwL+r9FXzLmT2Na+XZSkDr+C+cJ+kMrb8ugH20=
Subject key identifier: 31:A8:B6:86:00:4E:90:91:A3:A1:EC:EE:D3:5C:0C:46:5B:54:1E:14
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 01976C2B33BF27D7FBD3C3C2B787A185E8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 07AF
Signing time: Sat 14 Jun 2025 02:01:00 +0000
Manifest this update: Sat 14 Jun 2025 02:01:00 +0000
Manifest next update: Sun 15 Jun 2025 02:01:00 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: Jh7n8w7+BCU7h6zGLttZ7Oe7EVJiajoVyKtV4dSvgWA=)
2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:33:bf:27:d7:fb:d3:c3:c2:b7:87:a1:85:e8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Jun 14 02:01:00 2025 GMT
Not After : Jun 15 02:01:00 2025 GMT
Subject: CN=31a8b686004e9091a3a1eceed35c0c465b541e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:10:4e:3f:d4:10:99:ba:49:b7:27:82:aa:
22:48:da:42:a0:4a:9a:78:22:db:c1:dd:6d:65:65:
ed:fd:17:8d:4e:04:8f:93:00:a1:7d:a2:44:f7:74:
4c:b0:b6:66:44:14:b2:e9:a8:b1:9b:47:36:3c:69:
6d:71:88:b9:8f:89:89:6b:c2:34:39:60:e7:28:43:
c9:97:fd:b8:d3:47:62:73:bb:c9:ca:53:12:0d:46:
e9:20:c1:60:d8:b0:18:29:84:c5:10:02:30:5e:d2:
14:b6:cf:2e:6e:4e:e9:18:53:47:11:5c:b9:5e:63:
1d:79:d6:70:4d:9e:91:1f:8b:cd:14:e2:7d:f1:cc:
37:09:74:9c:c2:51:6b:e3:bf:c3:a7:eb:fd:0e:31:
61:1f:a4:b0:54:11:da:d4:47:19:21:7f:de:fc:85:
d9:b5:c3:9d:f3:c7:ea:be:76:e5:75:03:00:03:b2:
a1:52:d2:97:91:80:9f:4e:12:87:de:35:0b:d3:40:
2f:5f:b8:ec:33:b2:7d:9e:5e:7f:de:43:a7:1f:31:
64:26:1d:27:96:4f:4d:f7:4a:b1:c4:e7:08:0a:e1:
bd:f6:4b:fc:50:8d:20:6e:0b:fd:51:76:33:ab:72:
b0:7d:30:f7:27:93:6c:ce:d6:93:5f:21:a8:65:a4:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:B6:86:00:4E:90:91:A3:A1:EC:EE:D3:5C:0C:46:5B:54:1E:14
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d2:5c:5b:d8:34:ce:9b:18:d4:14:93:ae:e5:77:97:2f:65:
d3:41:9b:c0:44:b1:df:c1:9b:28:45:21:5f:94:88:2b:93:9e:
f9:90:fd:9b:50:f2:16:72:56:6d:ca:f3:9d:4d:71:d9:e3:bc:
f6:af:8f:a5:47:3f:0b:f0:83:fe:3f:bf:63:a7:82:92:52:de:
6e:56:5c:a3:0a:e7:43:3c:44:03:8b:6c:87:03:be:26:d8:3a:
3f:34:ef:30:6f:00:a0:b2:83:75:70:c2:9d:5f:c3:4e:83:c6:
3d:39:4f:f9:35:8c:41:cc:27:ab:6b:b1:7c:aa:d5:02:12:0e:
1c:3c:94:1f:4d:0e:c8:3c:1e:81:9f:02:8a:19:64:5c:11:b3:
e1:cc:41:50:32:ca:d7:30:65:b3:56:16:d6:c5:cd:7a:5d:bb:
99:3f:21:64:99:99:90:25:54:ce:6d:20:a9:1a:31:e0:aa:da:
68:d0:bf:e9:77:c2:92:e7:43:91:2a:87:5a:b9:71:36:c8:5c:
28:ec:6a:40:3a:68:70:f8:da:0e:72:17:c7:89:e8:a1:ea:aa:
79:e6:55:bb:c3:95:bb:0b:76:93:23:e0:f4:ec:85:27:ae:73:
de:58:72:08:d0:c4:eb:a7:41:b9:0e:1c:5d:24:3b:23:c1:52:
c2:35:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:13 2025 by rpki-client