Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File: aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier: L84fc0os9wC0f5Nqj7vNbGglrdOpWe9BZBbUjTuH7zo=
Subject key identifier: E5:79:91:1E:DA:92:B2:55:23:9B:58:4A:6F:91:9D:9B:2F:16:DA:7D
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial: 01977C427BCBE2D5F77DFA182F799FA90B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number: 1595
Signing time: Tue 17 Jun 2025 05:00:21 +0000
Manifest this update: Tue 17 Jun 2025 05:00:21 +0000
Manifest next update: Wed 18 Jun 2025 05:00:21 +0000
Files and hashes: 1: Ph3sC6aqh0tNsltd6hAZJC7Ft9U.roa (hash: qAtjPwqhqmQ2dOk999UdwCjCLH8v0wMpJPym5FDXFCs=)
2: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: 1W9WDpVmQhKQuEKwzwRD1c2oiww8/6lL8f6ukOHBuDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:7b:cb:e2:d5:f7:7d:fa:18:2f:79:9f:a9:0b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
Validity
Not Before: Jun 17 05:00:21 2025 GMT
Not After : Jun 18 05:00:21 2025 GMT
Subject: CN=e579911eda92b255239b584a6f919d9b2f16da7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:c4:3d:25:9f:1e:67:e9:eb:79:4d:e4:23:
8a:bf:5b:4b:d1:c6:87:bf:4e:89:62:81:f0:17:da:
92:ce:04:af:19:06:37:c9:9b:80:cf:03:6c:0c:86:
7c:9e:fb:57:e6:c3:d3:c3:cc:3e:9c:06:d9:4f:4f:
cb:a0:da:dc:0b:11:34:93:07:14:bb:e6:fd:0a:a1:
a0:6f:06:7b:8c:20:22:eb:c6:4d:0b:99:d8:af:df:
a9:51:f7:a0:c8:1b:6d:db:d1:f4:08:25:40:6a:ab:
04:e5:59:10:12:14:40:8c:f7:26:52:80:e0:ad:50:
05:6c:87:6e:43:76:d2:44:be:9f:0c:29:69:45:58:
71:d0:72:f3:c2:36:c0:cd:3f:89:bb:dc:90:1e:0b:
2b:01:b5:bd:bf:7d:67:e8:0c:61:ed:fb:8b:30:fa:
7b:3c:65:7c:5d:f7:d6:f1:e5:90:58:1a:b9:a9:31:
d4:e5:c2:7f:51:5d:8d:60:4d:8c:ea:80:34:a7:5e:
d9:45:e8:dc:b1:01:54:33:05:16:14:1a:bf:46:0b:
6b:e2:fb:56:71:13:18:e8:78:be:b8:51:ea:ca:00:
ba:1d:82:8c:ce:89:ab:db:cf:dd:86:06:6b:3f:b3:
4c:9a:74:c0:30:df:6a:db:43:08:0f:19:d8:4e:5e:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:91:1E:DA:92:B2:55:23:9B:58:4A:6F:91:9D:9B:2F:16:DA:7D
X509v3 Authority Key Identifier:
keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d2:2c:9c:0b:eb:f7:c3:b6:33:a6:1a:8e:27:ac:ef:b9:f3:
24:66:13:9f:39:c8:99:9a:f3:90:8f:5f:27:f4:ca:a1:ac:21:
c4:91:78:17:0e:65:e2:34:35:e7:bd:c7:df:d1:40:d1:54:41:
7e:a3:00:12:f4:d1:72:21:b3:6d:a8:a6:c3:2d:8d:1f:56:ff:
d4:b5:94:33:ee:1d:3a:99:8c:70:03:e7:71:4f:e7:85:3b:40:
d2:27:8f:53:2b:b6:2c:0b:eb:39:e7:70:d3:c1:29:a4:49:f0:
a3:d5:59:37:59:e0:f3:52:f2:05:ca:df:42:91:00:bf:aa:fe:
b0:e4:02:fd:b6:fa:28:d8:66:01:33:2f:ee:c0:ab:1c:30:1b:
53:e4:77:c0:c8:03:a8:ca:9e:be:5c:21:9f:06:0d:0c:9e:f4:
01:b1:22:c1:13:9f:0a:96:46:3a:a1:c4:26:da:24:bd:dc:b8:
dd:7c:4b:a4:6e:ba:50:56:dc:c9:b5:ef:1f:f5:b9:8f:29:02:
e7:ca:0d:93:cc:9d:50:8e:a5:98:70:07:29:89:94:bb:58:46:
a0:15:8f:c2:52:0b:aa:8a:d9:56:04:3c:57:1c:4f:c7:09:8a:
cd:7b:f2:19:a8:d4:e2:e1:23:20:fe:7d:65:bc:14:95:0f:10:
8b:94:0d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:13:21 2025 by rpki-client