Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier: bmW75tIruRuFQjY6BcfATnURU7qU5bT0OU3G+4CBYYk=
Subject key identifier: 06:25:F1:23:86:FA:CD:19:AA:88:9F:DC:6C:1D:F2:48:C9:9C:55:9D
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 01976CCFE33EB53E4E6D1628BCAD7BFF93F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number: 12D1
Signing time: Sat 14 Jun 2025 05:00:52 +0000
Manifest this update: Sat 14 Jun 2025 05:00:52 +0000
Manifest next update: Sun 15 Jun 2025 05:00:52 +0000
Files and hashes: 1: 0dT9gx4qOXkpqZlNkbev_-uBl0c.roa (hash: AhSSJUvXXS4MCpfi02OS/Sl/WMScliKSAGKKpGr/omg=)
2: Jqr-CXHYnZmzg_xVdImaXbMmVEI.roa (hash: XvpOhA/u1tpu0r7xTILje32qKTHGeywG7gPta8XZExU=)
3: S7cvUB4j_UAWLlorKkQpKplvSek.roa (hash: BzDMJKCxDcsJF5G/pnwJpmaeHc/VSanQaPg+mRpgeIU=)
4: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: x8/hsoeVsWWdVq3WQpj2VKc5sj/d8tJ6BThaDCLb4K0=)
5: p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa (hash: 8XfSlLN4HMzOCIW1k555GHmyKjvtxd9c3WvZ5/ZNc5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:e3:3e:b5:3e:4e:6d:16:28:bc:ad:7b:ff:93:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jun 14 05:00:52 2025 GMT
Not After : Jun 15 05:00:52 2025 GMT
Subject: CN=0625f12386facd19aa889fdc6c1df248c99c559d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:e2:fd:1d:b7:f8:b8:47:32:f0:a9:5d:de:
20:d1:77:cc:d6:46:a9:c1:e1:44:66:ae:0b:66:55:
cc:5d:7b:c9:07:5f:e9:21:0e:6e:e1:9b:80:3f:42:
2f:3a:2b:41:ac:30:6a:a9:2c:d5:62:bc:29:e0:73:
dd:f3:a8:33:5d:d2:2a:79:57:e2:fe:48:05:54:1c:
d1:07:87:a6:0f:35:ad:4f:ee:be:96:83:3c:4e:c7:
9e:99:48:1f:15:35:91:b1:98:43:85:c4:b4:7b:af:
b1:50:b5:40:a0:e2:aa:d1:8d:4d:16:55:e2:f7:e8:
b9:9e:2d:69:60:4d:ec:ab:2b:b9:61:a2:a9:f3:3a:
14:37:6e:17:ed:16:c6:e8:46:88:91:fc:ed:b2:d3:
ea:dc:93:da:50:29:91:e1:a4:39:72:22:4c:7f:51:
b1:b3:44:ed:7b:58:8e:3b:07:a4:94:b4:ee:15:ed:
de:10:42:44:14:59:c8:71:e4:77:0b:b1:9b:f8:54:
c5:c5:68:51:fa:ec:73:2d:05:b2:31:0f:af:a1:ff:
39:c8:fe:fa:f2:83:5d:c8:24:a2:0e:d1:aa:a3:54:
05:27:ef:38:cc:03:2f:05:8b:3d:fc:c2:8e:3d:7c:
e1:57:fc:07:26:69:d1:70:c1:e1:7a:69:bf:55:89:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:25:F1:23:86:FA:CD:19:AA:88:9F:DC:6C:1D:F2:48:C9:9C:55:9D
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:93:a6:c4:45:c8:ab:82:ee:51:8d:5a:6a:7a:18:fb:f6:87:
fe:df:6c:e3:e2:00:b4:64:7f:1b:37:d3:59:49:08:6c:34:70:
b8:59:5a:f0:29:72:44:53:51:82:8e:51:f7:ae:ff:79:aa:00:
f5:99:ab:e8:f9:4f:df:cb:6a:f5:80:a2:23:73:58:08:60:57:
d5:4a:7c:4f:f6:d7:30:07:7b:d9:e1:eb:77:cf:60:d3:cc:fa:
c6:c3:be:8a:f6:b2:a7:d2:39:1d:2a:41:69:47:e4:b8:ba:a5:
fb:d1:2a:0e:a9:24:03:3a:1e:2a:72:a9:c8:3f:05:37:3e:1b:
b0:bc:2e:0b:74:84:f3:7b:8d:35:0c:a4:25:e0:69:6e:d9:62:
d5:42:ab:d0:82:e1:0d:76:15:5e:7b:00:3a:47:4e:75:e4:b7:
07:d1:ea:6b:5c:40:1e:4e:42:09:9b:64:db:b6:4c:83:a5:01:
fc:1c:8b:4e:b8:7c:bd:25:33:2c:a3:6c:e5:f3:d1:2f:8c:82:
bd:86:5a:1f:66:98:dc:58:90:99:a6:4e:61:ad:ce:53:66:59:
bb:61:08:f2:98:e1:9a:83:80:ed:15:37:9f:81:ef:06:67:a8:
fe:03:28:ae:b6:ae:32:67:7d:fe:13:ab:60:07:10:8b:46:92:
ec:da:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:30:27 2025 by rpki-client