Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: kDOi9IrJvfHwR3b/2b1t7GbN7nXIfnIq4gGE4+F+vFA=
Subject key identifier: B7:57:0A:7D:7F:66:DE:B4:57:4D:A2:52:FE:7E:0B:98:B8:CC:1B:8E
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 01976DAB414E64873A0D4ED0F01BFA410509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 06ED
Signing time: Sat 14 Jun 2025 09:00:29 +0000
Manifest this update: Sat 14 Jun 2025 09:00:29 +0000
Manifest next update: Sun 15 Jun 2025 09:00:29 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: aVKriSRyKHLgfDUu3Nf7QYB2vowZX2XoxW8EWcUGoeE=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:41:4e:64:87:3a:0d:4e:d0:f0:1b:fa:41:05:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jun 14 09:00:29 2025 GMT
Not After : Jun 15 09:00:29 2025 GMT
Subject: CN=b7570a7d7f66deb4574da252fe7e0b98b8cc1b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:71:d9:bf:76:a3:76:30:44:31:4b:9a:61:
77:7a:9c:a2:cc:1f:f7:f7:59:6d:dc:99:e8:58:5f:
87:93:c4:a7:e3:a4:c2:37:19:0b:40:bd:05:b6:f1:
b4:d9:ff:cf:d0:4c:85:7a:a2:74:41:61:4b:d5:1e:
b8:62:3c:74:fe:18:51:5a:b8:a4:51:3d:65:b4:b8:
59:bf:7e:bd:36:2c:15:1e:1e:7d:70:69:02:ef:81:
4d:8e:fb:0c:ae:b0:87:b2:28:ee:da:c9:b6:5b:bf:
db:d6:7b:b6:45:e1:e8:66:d0:84:f2:69:b9:4e:32:
68:ff:74:31:f4:19:58:36:ea:c3:2e:8b:c7:07:8b:
5e:d7:12:c2:bc:f0:ac:7d:58:4c:86:a2:85:f1:4e:
92:fa:56:2a:2a:22:bc:30:6e:b2:e3:a6:54:d4:56:
ef:5b:90:19:26:4f:20:fe:7c:50:bd:49:7c:eb:42:
b6:71:51:fd:01:5b:8a:d0:97:a8:c6:5c:13:c6:71:
97:b9:49:03:90:3f:4f:b3:e1:fc:1d:89:cc:bb:71:
92:a7:37:a2:9e:06:01:9b:42:b2:ed:0f:be:48:a5:
b8:26:d3:c1:74:61:f3:b7:7e:13:ed:2b:4b:8f:cb:
5e:ac:67:41:e1:c5:d6:12:5e:8b:84:f9:f8:fa:85:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:57:0A:7D:7F:66:DE:B4:57:4D:A2:52:FE:7E:0B:98:B8:CC:1B:8E
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9e:f3:7e:c0:0a:7e:4e:36:1c:eb:78:be:92:bf:3a:21:93:
e6:cf:b4:5a:56:ef:91:f3:38:fe:0d:8f:9d:3b:ff:a3:f7:06:
c6:c2:1e:69:f2:09:80:35:96:3f:35:8f:b7:be:09:05:5b:20:
ab:89:6d:bb:9d:50:2b:3b:eb:ce:b8:2b:2f:80:fe:73:37:b3:
2f:58:48:7e:d9:b9:a3:bd:72:66:33:f3:f1:a7:e7:f1:8c:a5:
ee:e1:ec:89:cc:af:f2:ad:52:c8:20:11:06:43:62:3e:f3:67:
31:dc:26:97:47:2c:b8:fd:55:25:d6:57:8b:7e:ac:09:6a:dc:
b8:6e:23:28:a5:c8:a3:68:fd:e0:2d:7e:a8:68:71:76:57:64:
b9:59:d4:84:13:40:6e:db:c9:c7:61:2a:a8:71:f0:c7:9e:c4:
07:60:85:38:c2:fe:07:48:3b:a2:e1:d8:a3:30:75:1a:6e:86:
5a:24:69:97:fa:70:f8:58:45:a9:ae:76:60:9a:56:5a:3f:63:
99:17:a4:e0:72:98:a5:bf:b7:25:ba:69:fa:7f:fe:f9:79:cc:
b6:28:55:a3:70:74:79:b3:71:72:12:60:bc:37:8d:12:87:c8:
c7:8e:9b:c0:57:83:43:7d:ee:7b:69:54:d0:37:7f:84:67:ac:
ce:4f:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:03 2025 by rpki-client