Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: WhciFV8N+/RrThuETgJyYtzPv7hXOmtsl7keoFJyEGQ=
Subject key identifier: 29:6C:8B:B5:DE:9D:C7:12:49:07:4B:61:EE:A6:5B:C6:7E:42:DB:F8
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 019768F2ECE1DBF859F829AF0E16F1AEDF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0B01
Signing time: Fri 13 Jun 2025 11:00:40 +0000
Manifest this update: Fri 13 Jun 2025 11:00:40 +0000
Manifest next update: Sat 14 Jun 2025 11:00:40 +0000
Files and hashes: 1: 7TO4e8lijWMlxMa1DByMrXD5jOw.roa (hash: cDwhkc8bh/DTSiy1V4KBQ3fFakHZ/iT/sbs5LQBmNws=)
2: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: r33NanxX3BGHXidy3w4dpeziHVmiaV+nbqge9BQ1g30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ec:e1:db:f8:59:f8:29:af:0e:16:f1:ae:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: Jun 13 11:00:40 2025 GMT
Not After : Jun 14 11:00:40 2025 GMT
Subject: CN=296c8bb5de9dc71249074b61eea65bc67e42dbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:a2:51:02:9f:74:e0:3e:8f:81:fc:c9:8d:
ea:c1:fe:45:16:cd:6f:fd:7f:b9:0e:af:4b:09:db:
15:99:e9:07:3c:9a:e0:6f:c7:24:b6:7b:ca:4e:5e:
44:8b:df:f0:ab:2f:de:2d:4b:b4:86:d9:9f:0c:72:
eb:99:63:f7:8f:b2:64:b3:00:5d:15:d6:df:fb:0a:
8c:36:57:cd:a2:63:9c:dd:fc:a3:23:3d:9a:e8:f0:
6b:2b:29:00:62:39:1d:d1:88:33:c9:6c:e6:f0:82:
5a:e0:6b:5a:67:53:7b:fe:5c:83:5e:2f:6a:52:a9:
73:ee:a2:c6:4a:88:a7:45:c1:6d:22:da:f3:08:ea:
5d:b5:d3:d0:15:11:3a:b0:ca:05:68:51:34:bd:cc:
9e:5d:00:41:85:b3:c8:ee:6d:2f:8f:89:13:a1:24:
0a:b8:02:08:28:72:da:4d:e1:61:54:71:c9:3a:b2:
de:fe:56:08:b2:c8:48:f8:5c:5a:08:36:d0:c3:ef:
76:b9:ed:64:b6:e5:09:94:56:0c:59:ab:ce:a5:63:
69:f7:d6:96:b5:fa:d9:81:9a:a3:0a:99:b8:d8:b9:
36:71:43:9a:52:0b:3c:d4:16:06:79:4a:8d:32:0c:
b9:58:73:19:a7:c2:e7:51:14:55:ab:63:86:0e:e6:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6C:8B:B5:DE:9D:C7:12:49:07:4B:61:EE:A6:5B:C6:7E:42:DB:F8
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:6d:26:88:d3:1e:1e:32:55:81:37:cc:ad:4d:05:26:b8:
19:94:51:79:43:73:e2:41:10:b5:cd:e8:5b:ca:e0:1a:bc:4f:
b9:c5:8c:ba:17:08:2a:d9:ca:50:af:f8:3a:03:e6:69:c2:9b:
ae:37:14:57:e7:60:9f:42:26:a1:a6:4a:70:6e:9a:18:6a:0f:
6a:d0:ef:67:1d:9b:01:f4:f3:41:85:ed:09:6a:17:15:a3:50:
08:46:96:8b:03:23:ee:77:63:e8:1a:01:f3:ce:41:8e:3f:82:
bf:86:d4:45:43:e3:68:bb:47:b3:52:b2:d8:2f:42:e3:da:40:
5e:db:7b:f9:c4:d2:4d:3b:35:f9:3e:ab:6a:4b:83:07:e8:8b:
ab:32:19:55:29:88:35:0d:82:72:e2:c3:3b:bd:59:d1:08:0c:
ab:76:c2:5f:6b:a7:cc:e3:8f:35:f4:df:01:6f:6d:af:fb:cb:
c6:d9:14:a7:0b:88:21:86:de:0b:dd:18:84:b7:b0:b1:1a:ae:
36:2f:bf:af:2b:ee:0a:76:36:c1:15:19:1f:93:2f:17:8c:7a:
32:d8:70:91:73:08:29:1e:f0:38:d8:ed:d9:e6:b3:69:cb:bc:
6d:f3:10:26:3a:cd:ff:b0:bd:97:f6:a8:bf:61:e8:6d:56:c0:
91:bf:82:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:10 2025 by rpki-client