
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: 8fXydn3zJcm/eVtwgqdivQ6spv8VmC3V7A0GoVUEDcg=
Subject key identifier: C8:DE:33:54:5D:62:8B:CC:4E:B1:CB:C2:1A:75:CA:B7:CE:F9:1A:C9
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 01977376FAEBE7A3662DB1A3EB47E19C1CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 06EC
Signing time: Sun 15 Jun 2025 12:01:06 +0000
Manifest this update: Sun 15 Jun 2025 12:01:06 +0000
Manifest next update: Mon 16 Jun 2025 12:01:06 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: /lOpt4Tm8futbOB9vbV44wMOCiiiVRUNxpseZauPais=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:fa:eb:e7:a3:66:2d:b1:a3:eb:47:e1:9c:1c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Jun 15 12:01:06 2025 GMT
Not After : Jun 16 12:01:06 2025 GMT
Subject: CN=c8de33545d628bcc4eb1cbc21a75cab7cef91ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:4b:3b:a3:a7:bc:4c:a8:39:1f:76:90:e4:
f4:c1:2a:9d:9a:7f:43:2c:14:50:bf:e4:66:65:cc:
17:1f:e3:d0:7b:02:dc:18:30:c2:df:6a:8d:94:7c:
2c:18:4d:7e:bf:95:45:21:93:a2:23:41:df:ad:1f:
c4:15:1f:88:2b:1f:9e:c5:4a:7f:a0:ef:bf:74:34:
06:3e:80:be:7f:4b:f4:b3:2c:96:ab:a7:d7:0b:99:
4c:de:49:76:69:6a:d7:7f:7e:46:12:09:96:ed:e7:
31:54:a3:3c:9f:db:58:89:fa:77:4b:c3:d6:65:f0:
21:7e:ce:6c:8c:c0:cc:1e:ae:8f:2f:73:a9:1b:bf:
31:05:ab:9c:f8:1e:a3:66:12:44:12:c6:32:fa:97:
4a:6c:6e:64:61:50:ac:6d:b7:47:5e:8c:60:56:d3:
4e:86:6c:d1:f2:da:51:8e:ae:71:60:83:48:9a:a9:
4b:7e:4b:44:ca:a2:6e:46:9c:6a:5c:89:63:5e:94:
10:a8:39:b4:30:b4:4c:3d:42:a7:ea:b1:bd:a8:e7:
a5:58:2f:d5:c4:35:d6:a0:e1:02:c7:cd:4d:96:f8:
36:d7:b1:fd:cb:43:aa:60:9e:5d:61:4d:bf:ba:da:
99:f3:21:5c:f8:25:a8:b7:57:8d:2b:ae:25:a9:79:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DE:33:54:5D:62:8B:CC:4E:B1:CB:C2:1A:75:CA:B7:CE:F9:1A:C9
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:f4:b6:3e:f6:10:69:39:65:98:73:ab:53:f7:1a:67:57:
39:d9:ee:af:51:48:63:ed:84:e7:8e:31:f6:1f:5c:08:70:53:
cf:b6:ec:dc:5e:d4:08:c7:96:72:e5:15:de:11:9e:9b:c3:6c:
33:8e:27:dc:44:f4:91:c9:d5:bd:26:95:93:36:6c:bc:f5:5f:
e3:9c:25:ab:db:b6:c5:f8:6c:dc:18:ce:21:88:8f:e1:16:62:
8c:cb:28:8a:f8:6f:88:f4:fa:91:26:56:99:e0:d4:91:67:55:
24:31:d6:02:fe:20:cb:6d:f2:d1:be:1f:c2:35:0a:3c:54:eb:
ea:97:07:c4:5c:13:7b:58:ab:f2:63:97:fb:45:0d:76:ce:65:
75:e2:17:f2:e8:d0:42:06:ac:c9:37:82:26:2d:c8:de:a8:5d:
b3:f3:22:0f:ee:76:f6:44:ad:a1:56:e3:2d:e0:88:dc:b4:8f:
55:ad:60:9f:8c:28:ad:17:fa:0a:fa:e1:5f:75:8b:a5:a6:af:
9c:cb:a0:24:f2:ce:6e:93:5e:8c:f9:4b:c8:ac:0d:7c:93:7f:
a6:9d:3f:96:dd:95:1f:ff:4c:f2:43:a6:61:dd:2e:66:5b:7e:
e5:56:3a:8f:85:1c:ee:4d:9b:58:08:cf:d3:41:ee:2a:a9:9a:
6b:4c:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:28:17 2025 by rpki-client