Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: YZ+QckUXxEG7VgNN5tUfA68ksgNGLhxVaiOlOWJXPoQ=
Subject key identifier: AD:1B:9D:74:F9:C8:45:58:BF:36:AD:2F:8E:07:B4:A2:70:A8:5D:2D
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 01976BF3F2B00FC83F7BEB7DFB4CEB7ACD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 12A7
Signing time: Sat 14 Jun 2025 01:00:38 +0000
Manifest this update: Sat 14 Jun 2025 01:00:38 +0000
Manifest next update: Sun 15 Jun 2025 01:00:38 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: SUrMduW6Y5Yc8uPPEkVjz/eh6yFo2i9O2PgsY2CuvPM=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f2:b0:0f:c8:3f:7b:eb:7d:fb:4c:eb:7a:cd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jun 14 01:00:38 2025 GMT
Not After : Jun 15 01:00:38 2025 GMT
Subject: CN=ad1b9d74f9c84558bf36ad2f8e07b4a270a85d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:bf:73:c7:ec:3c:60:17:f1:79:c5:ee:ea:
17:08:c9:d3:2c:0e:82:38:e9:71:7d:d5:6e:9b:31:
5e:24:94:b6:3c:bc:95:aa:66:11:10:07:5f:6d:85:
07:75:24:db:16:4c:94:97:ca:25:07:d1:49:1b:45:
9d:3d:5b:ac:26:33:9d:87:d7:2d:7a:02:89:3c:fb:
d0:f7:c2:0f:a6:17:a1:ba:aa:34:54:b1:3a:83:70:
cd:98:82:41:34:de:e0:43:26:3d:5a:5c:04:cb:b9:
67:97:a4:ff:83:fa:8a:4e:59:fa:d3:06:0f:b1:8f:
82:b2:b3:6a:eb:9d:37:a5:87:63:c6:df:92:25:27:
3a:c8:27:59:5a:00:f4:4f:40:d4:3e:79:12:d9:a6:
e6:48:c2:83:ca:7a:f8:fc:c1:da:76:8c:15:e6:c3:
d8:fc:96:81:e9:39:20:bc:c5:03:9d:02:4b:9c:ce:
4d:00:76:9f:6a:b9:64:4c:e7:1b:fa:99:77:1f:8c:
22:04:18:1c:06:0b:26:8c:62:58:28:c3:94:91:e2:
7e:83:bc:53:06:3e:a1:5f:02:98:68:c8:05:fa:19:
03:0a:07:f3:7e:17:16:c8:ca:82:8b:bf:c7:f1:30:
4e:ec:7e:c9:dc:f3:dc:00:f4:63:ac:ee:b0:c8:22:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:9D:74:F9:C8:45:58:BF:36:AD:2F:8E:07:B4:A2:70:A8:5D:2D
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:83:cb:45:87:3e:a2:24:f2:ba:e1:e4:ba:93:fa:e1:a8:02:
c7:38:25:53:48:5d:c9:f1:8d:de:9b:d0:e3:6d:95:e9:c5:9c:
ca:a5:9f:30:84:90:a3:f0:20:be:73:d9:91:cc:53:47:32:5c:
15:60:20:c0:99:b4:54:d8:e6:f3:3d:6a:c6:94:bb:26:17:38:
62:12:65:4d:e0:2f:47:3f:c6:25:ee:de:05:f8:17:0a:7c:d2:
1c:09:ab:b2:8c:cd:e2:61:df:35:84:b7:bc:0c:54:6c:fd:7e:
b5:33:c2:1f:6c:e6:da:31:0a:60:a4:93:2d:3a:7f:b7:26:ba:
fb:5a:61:c3:db:ff:eb:14:ef:73:ed:a8:c1:fa:89:3a:aa:b2:
4d:22:49:b8:70:bb:20:0a:6f:14:5c:3b:b4:06:7f:2e:3f:8b:
16:a9:87:4e:31:d1:34:d1:ba:45:ae:31:92:f0:53:20:22:b3:
0f:b1:cb:bf:b6:4f:86:27:9d:ff:b9:b5:80:94:1c:1c:b9:9b:
b0:ef:02:5f:c8:a1:1e:58:72:bb:b4:e6:b8:97:3a:f9:7e:07:
e5:38:66:6c:bf:dc:25:66:31:3e:fa:0a:c7:55:5b:9a:04:8e:
6b:bb:b0:08:6d:5f:73:59:ce:4f:4a:69:33:a8:b2:dd:8b:11:
6e:4f:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:46 2025 by rpki-client