Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json)
Hash identifier: cePSOwKJBmE+xQN7JgP3WCLGdzAnlXfXNFDwWI/XB5c=
Subject key identifier: EA:DE:D2:0C:8B:A1:D5:7A:E3:04:EE:99:00:B1:95:41:F3:39:5B:0E
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 019771889EC1C32F99D63E044A5BE4BBB07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
Manifest number: 0CA5
Signing time: Sun 15 Jun 2025 03:01:08 +0000
Manifest this update: Sun 15 Jun 2025 03:01:08 +0000
Manifest next update: Mon 16 Jun 2025 03:01:08 +0000
Files and hashes: 1: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: AwmD5Yeu3DD867fKhT6nQLUta9y6bOOiHTafgVxs1IE=)
2: jT8P4HyIvKh8r7FQFBaidUndh0Q.roa (hash: Wroxjw87hFNcZdv8/bJmsCuX0IjtBBcn8Xp1138BSK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:9e:c1:c3:2f:99:d6:3e:04:4a:5b:e4:bb:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: Jun 15 03:01:08 2025 GMT
Not After : Jun 16 03:01:08 2025 GMT
Subject: CN=eaded20c8ba1d57ae304ee9900b19541f3395b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:7a:70:31:15:d3:15:ac:1f:48:4a:20:46:
e1:96:6e:dc:a7:d9:9d:dd:b8:18:38:88:81:67:bd:
0e:d0:8e:fc:7d:57:da:fd:77:43:83:42:71:de:11:
76:ef:c4:0f:83:70:58:1c:ac:bd:c5:fe:c6:f3:55:
b9:03:f7:ef:11:df:c5:ac:ef:8e:07:e9:65:4a:52:
e2:7e:13:41:bb:62:3c:43:b0:a7:e9:76:2b:1c:9b:
bc:43:06:54:00:09:ca:21:36:45:90:95:95:9a:e5:
46:a4:e1:20:45:78:4f:0d:d1:c2:b6:7a:8e:2e:25:
82:57:75:56:33:77:65:e0:19:f6:c2:6f:8a:cf:af:
23:8f:48:c3:ef:90:68:d0:cd:3b:a6:a4:97:26:b7:
f5:7b:c0:34:5e:9c:1b:e7:21:46:fd:1f:e4:df:1c:
33:15:77:2a:cc:03:5c:24:5e:3c:2f:82:ad:16:cb:
4e:fa:f5:2a:4c:8e:a6:e1:c1:c5:a2:7d:29:dd:92:
f3:25:26:33:fd:dc:39:a8:97:fe:30:8a:ca:b6:56:
00:3d:70:8e:db:e0:ab:b9:62:08:3c:b0:83:cb:ad:
05:09:94:cf:a6:f4:a8:ec:7d:01:3c:6f:55:a0:97:
6d:7e:c1:2a:bd:0e:fa:67:28:4d:e8:15:b4:28:c5:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DE:D2:0C:8B:A1:D5:7A:E3:04:EE:99:00:B1:95:41:F3:39:5B:0E
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:db:08:13:0e:d7:69:86:2d:50:d8:5e:03:60:5a:64:0c:aa:
71:d0:f7:79:c4:63:63:1c:e4:4d:04:0b:4a:fc:40:a6:59:98:
b8:c8:17:7c:56:b8:71:47:1e:53:b8:42:99:b7:ec:87:1e:e8:
03:0c:4f:1a:e6:5c:fc:6a:02:8c:45:2c:97:f1:c6:14:6e:c7:
90:59:06:f5:4b:da:62:b3:3c:d4:10:28:ee:83:2f:9a:c4:c4:
e4:66:0d:32:16:49:2d:3b:de:e9:75:01:3a:05:ec:e9:d4:c3:
9d:d0:0d:72:67:65:7f:fd:0e:20:fa:80:9a:87:8f:9d:67:2a:
1f:50:16:f4:73:7e:7e:01:d7:dc:9a:c2:df:a9:48:95:22:55:
3c:53:a0:6f:2f:46:2d:be:0c:7e:89:1a:15:01:92:f2:19:da:
d5:74:d7:68:54:1e:77:09:fc:3b:ea:14:e4:b8:32:7f:6f:7d:
26:27:c1:38:45:e2:ad:e5:07:7c:96:c1:4d:bc:75:25:5d:c9:
aa:7c:ce:48:b6:bb:6d:f5:2e:c2:80:4e:0b:8c:91:a6:c7:dc:
08:48:70:72:8f:d3:2c:76:29:ad:66:67:d6:83:e1:82:58:a7:
53:74:a4:e1:69:74:b5:d2:ae:de:63:59:b1:4d:56:5b:db:b0:
60:3b:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:38 2025 by rpki-client