Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: Gi85ITV7uD1fT1Ts6aGpIpTOymrhHrV02q+PKWCr910=
Subject key identifier: 8F:DB:F2:96:2D:29:D5:A4:CA:C9:29:28:30:20:A5:0E:8A:0F:FB:BB
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 01977CB1461FE006B2D03294B2559C07E325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 07:01:21 +0000
Manifest this update: Tue 17 Jun 2025 07:01:21 +0000
Manifest next update: Wed 18 Jun 2025 07:01:21 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: GCmX4jPiBtDw/QIgp//IncNoZFuKKfNVIzQazWkJ+FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:46:1f:e0:06:b2:d0:32:94:b2:55:9c:07:e3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jun 17 07:01:21 2025 GMT
Not After : Jun 18 07:01:21 2025 GMT
Subject: CN=8fdbf2962d29d5a4cac929283020a50e8a0ffbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:ef:68:cc:3c:9b:60:73:7e:21:b0:8f:fa:
4f:29:92:5b:e6:a1:be:aa:d0:63:0a:d4:d7:7c:79:
ef:61:7c:f4:91:68:55:16:1b:aa:52:40:8c:43:60:
b8:86:6b:c6:40:15:19:72:1c:c6:e5:f5:ea:a7:5e:
37:6e:89:c3:87:27:9d:2c:b6:6c:10:8f:0e:a0:78:
fc:97:64:bb:16:55:a0:44:d0:f4:92:e7:01:32:d2:
9e:55:54:50:19:1a:0d:a5:0b:83:3a:a1:28:0e:c1:
d3:36:f3:b8:35:85:d4:1d:10:27:e3:b0:47:24:04:
53:62:ac:e9:b1:e8:97:55:ad:fd:98:79:fb:2d:c4:
d4:cd:47:6a:13:78:c9:c5:20:a3:c8:f8:b6:fd:9d:
6a:91:ad:f3:62:b9:64:59:c8:f0:6e:f9:e1:e1:57:
07:ee:05:1e:8a:6f:4d:d1:3b:92:fc:0f:77:20:2d:
cb:4c:b8:bd:6b:55:b7:64:29:96:22:6e:a7:fc:e8:
0f:8e:22:53:37:9b:e6:a8:e8:85:48:19:70:20:63:
40:fd:d3:c3:2c:b5:e6:68:cc:0b:6e:bf:d1:4a:67:
6a:54:dd:40:fb:49:e2:12:c3:35:a9:b8:9c:f2:f9:
bb:0a:4c:3b:88:3d:d1:96:b1:d6:5e:63:41:3a:8a:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DB:F2:96:2D:29:D5:A4:CA:C9:29:28:30:20:A5:0E:8A:0F:FB:BB
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d4:3b:40:ef:44:d5:08:b8:40:39:01:65:9c:a4:bb:1d:19:
5b:29:0a:4d:ad:ff:60:68:e7:d4:33:7a:43:a3:1b:10:b9:29:
c1:91:d5:29:17:06:2c:41:b2:71:87:91:1a:3b:ca:8d:ba:39:
73:9b:f2:02:45:bc:a7:a6:dc:ff:c8:54:30:ef:6e:d9:6c:94:
23:14:5b:7d:b1:9f:28:4c:ca:70:c2:e4:01:27:f4:c4:cc:ac:
7a:e3:56:03:57:6a:f2:2a:e7:a8:94:30:8b:f0:54:59:f5:79:
89:0f:50:85:7c:5e:eb:8d:78:65:f5:ae:25:3b:32:87:e8:f9:
ca:dd:67:b3:f8:e6:8c:c2:78:34:e1:d3:35:55:65:79:9e:f1:
46:f2:24:4c:67:3f:2f:78:db:07:da:09:f4:78:56:0c:5c:5a:
67:30:ec:6d:69:42:5c:4c:32:7d:01:2b:1a:3b:96:4f:44:14:
e8:ca:6a:04:89:19:fc:84:5b:0f:1c:36:b2:0e:65:78:23:b3:
5c:08:6e:ce:3d:b0:6c:c2:90:06:44:67:58:cf:44:55:e3:67:
8a:1d:45:e9:ad:a7:da:ac:e5:a3:42:de:fa:4b:9a:f6:00:1b:
29:f4:65:d8:a3:e0:07:51:4d:02:34:09:78:7e:6d:b6:b6:41:
27:4a:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:50:17 2025 by rpki-client