Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: yQaJh53FfSLolNzIIrRQxIaCBsOnedhZiYav3anP9cU=
Subject key identifier: BE:E4:C5:D0:64:DD:9A:47:52:2A:FC:2A:35:B0:6C:3E:60:8B:64:96
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 019770E32E32B0789142C3D3B55499F402B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0950
Signing time: Sun 15 Jun 2025 00:00:26 +0000
Manifest this update: Sun 15 Jun 2025 00:00:26 +0000
Manifest next update: Mon 16 Jun 2025 00:00:26 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: VCl5zCsVUPgTHK/LWAipz/kkZJbe+nbA1uM3a6wuvLE=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:2e:32:b0:78:91:42:c3:d3:b5:54:99:f4:02:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Jun 15 00:00:26 2025 GMT
Not After : Jun 16 00:00:26 2025 GMT
Subject: CN=bee4c5d064dd9a47522afc2a35b06c3e608b6496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:ae:44:c7:33:05:75:40:55:47:59:48:ef:
2c:84:2a:bf:2e:52:1a:0d:24:9d:56:5e:31:a8:16:
27:21:86:45:71:1a:9b:e4:69:0f:84:18:93:e0:2c:
cd:6a:50:97:7c:a9:ce:b9:e5:db:81:95:62:97:9a:
8c:68:98:a8:54:1c:60:4f:c6:01:82:d3:7d:8e:e9:
56:72:76:24:a6:7f:85:0b:e0:e1:b3:a6:3b:ab:24:
31:4c:87:ce:7b:c7:4c:29:9a:49:1d:7a:73:9e:af:
7f:7e:19:ee:4b:f4:0b:6c:0e:8d:74:d7:a0:72:b0:
0b:ac:77:4b:1c:00:2d:00:af:79:11:ed:13:cb:91:
d8:94:e8:aa:9e:c3:6a:36:78:a6:85:ee:b0:32:aa:
9c:14:d5:bb:0b:b1:9d:14:2b:5d:50:ef:d1:77:29:
62:47:93:e5:c2:69:1e:0f:bf:a5:36:29:cf:e4:85:
a1:2e:0e:04:be:9b:d1:c3:bd:8b:cd:64:24:a2:4d:
95:09:37:f9:a5:d8:54:0c:db:de:8a:b2:89:68:39:
3f:1b:1c:0b:be:4e:88:ee:ed:23:dd:9b:d8:da:16:
9e:0c:2b:f2:b1:43:a5:d6:d6:02:d1:1c:45:c2:00:
d0:f3:1e:b9:5e:8b:5a:64:54:ef:8b:43:b5:6c:cc:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:C5:D0:64:DD:9A:47:52:2A:FC:2A:35:B0:6C:3E:60:8B:64:96
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:12:6d:f3:3f:9b:0b:4f:f9:e6:8d:27:b6:0c:0b:2e:95:50:
cc:77:32:da:48:3a:e8:cd:7e:25:32:a4:39:fb:17:78:fe:b6:
93:a8:9f:fb:bc:8b:f8:13:44:4a:ff:21:bc:7f:b9:e5:2d:f2:
09:ec:8c:cd:68:d7:41:95:c7:89:20:ce:2a:da:31:24:3b:d6:
0a:7f:46:47:16:c3:6a:b6:51:20:61:46:b6:b4:43:70:a4:c4:
a1:72:88:75:bb:cc:fb:08:1b:1e:db:a0:20:63:a8:cd:e7:fb:
a4:53:07:84:ed:41:7f:0d:32:97:da:3e:38:e5:99:8b:82:c9:
c8:9a:e5:3c:cb:6d:60:ee:a3:e7:02:53:d2:0d:7d:17:a0:19:
58:a1:7d:30:9f:9a:e3:39:37:29:f6:63:f5:70:c6:82:91:b3:
d3:39:15:46:b6:b4:1d:1d:bb:e3:a0:b2:1f:f8:58:0e:af:ff:
b8:89:52:43:6c:c7:25:7c:ca:96:6d:84:b1:43:ea:2a:f3:e8:
9a:44:f8:db:dd:4c:17:01:17:dd:69:c2:69:88:8a:a7:a3:32:
91:ba:72:c0:dd:6c:ea:5e:b2:0c:23:98:0b:ac:13:b7:e6:5e:
a7:b8:21:af:46:eb:3e:71:a8:bf:f1:75:00:43:67:cb:0b:49:
f7:6e:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:44:35 2025 by rpki-client