Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier: QK2uedHyk+negvvUw/CDxdgkmsbUGAbxSFrZyMAqQ7M=
Subject key identifier: 2A:B9:36:C9:D8:1B:58:9E:07:5C:ED:0F:A7:35:16:01:FB:DB:58:5C
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer: /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial: 01979481CB0CC2DD17D9773EA5A4891AB15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number: 072B
Signing time: Sat 21 Jun 2025 22:00:23 +0000
Manifest this update: Sat 21 Jun 2025 22:00:23 +0000
Manifest next update: Sun 22 Jun 2025 22:00:23 +0000
Files and hashes: 1: 5qlyqHqHN9fm7YIJbWQAFC8mvBE.roa (hash: i7ncddTAht6A90LZTtfDRpJSDX/ZI6t1vgckOHtmIjg=)
2: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: KV3uV2uu5YEZ65W0wvxFGEEylAULD85vcr8kzi9oEII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:94:81:cb:0c:c2:dd:17:d9:77:3e:a5:a4:89:1a:b1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Validity
Not Before: Jun 21 22:00:23 2025 GMT
Not After : Jun 22 22:00:23 2025 GMT
Subject: CN=2ab936c9d81b589e075ced0fa7351601fbdb585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:98:c1:74:99:bb:d2:c9:30:63:ac:4e:23:
28:b4:48:fd:58:c0:e8:83:37:41:d3:29:66:ee:6b:
38:3a:27:42:30:43:0b:a7:cd:cf:c5:d8:18:84:59:
28:6a:d1:a0:fb:76:0c:51:e4:be:a8:52:98:44:09:
50:fd:39:54:6b:a3:cf:ce:e3:44:e4:7b:0f:1b:20:
cc:ca:5d:ce:07:46:d1:3a:59:2b:d8:1a:a7:2e:73:
e4:58:ee:ed:94:2b:f8:2b:4b:a8:08:53:72:85:f0:
ca:1a:da:43:cf:c0:71:49:59:05:57:4a:92:61:8e:
6c:3d:1f:31:1b:5d:58:8d:09:d3:b0:33:a8:45:98:
2c:39:71:49:78:7a:51:97:7d:59:cd:d4:0d:59:4d:
f1:3e:a5:43:e2:5f:e7:c6:ca:ff:84:52:20:f0:f9:
2b:53:d6:3f:29:a9:2f:47:6a:34:c6:52:32:d0:9c:
1b:9a:cd:23:c8:bf:5d:52:95:8f:70:e0:be:de:42:
93:1a:1f:76:39:d7:f7:1c:72:cd:da:99:ff:26:8e:
d4:a0:5e:24:98:15:4d:09:67:98:7f:52:7a:30:38:
29:ce:0d:41:f7:ef:41:ca:ed:a5:d9:87:08:77:18:
68:fc:8d:e8:a8:f1:c1:0d:b0:94:26:e4:c5:18:6c:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B9:36:C9:D8:1B:58:9E:07:5C:ED:0F:A7:35:16:01:FB:DB:58:5C
X509v3 Authority Key Identifier:
keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:58:7b:5c:cd:0f:b4:d3:17:d2:90:b0:06:79:03:2d:25:ad:
38:5b:e3:74:b4:4f:9a:9d:ba:46:59:89:66:6e:cc:2e:43:e2:
f7:f5:56:eb:a3:34:b3:db:b1:27:76:63:5d:e4:2a:80:67:af:
b6:35:85:5d:47:1e:5d:3f:93:17:a5:ae:36:91:9e:9e:2d:76:
c9:d2:9c:4d:dc:d6:5c:9f:1d:31:dc:61:eb:fb:c4:f6:72:cd:
5f:24:78:60:c2:c9:62:10:c9:2c:ca:cd:94:3e:28:1b:88:0f:
e9:f0:7a:77:6b:c2:ee:f5:31:da:b3:1b:76:a1:73:7e:c7:fa:
89:15:3a:e7:9d:f9:ae:17:b7:2e:f6:8b:34:5c:35:6c:7d:a5:
da:5b:57:05:a8:08:b7:b9:b0:72:8e:c7:8a:27:97:4d:b3:fd:
70:18:0f:c8:14:90:0b:ea:9c:75:14:71:ba:89:9f:81:53:97:
f2:04:1c:95:8b:c9:25:a4:09:8d:5f:13:fa:17:dd:22:a8:7e:
b0:6b:37:0d:08:9c:b3:74:62:bb:bd:7e:7b:0f:73:b1:35:a1:
0b:c5:f4:fc:58:84:b8:20:86:76:63:2d:f3:77:f5:6d:14:72:
c7:7b:97:51:38:32:f1:08:10:bc:ea:e8:a8:08:37:01:35:b4:
db:01:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:53:26 2025 by rpki-client