Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: kn8OWrw8yyUTZujU02T7WM/oYApRkePvcmK/2eKgM4A=
Subject key identifier: 0E:B8:CF:8D:4D:49:78:0E:A9:62:82:1F:BA:05:55:DD:B4:AA:41:3B
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 01976C2B066D46D6F045BB0BE5F35A79BF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 0EB9
Signing time: Sat 14 Jun 2025 02:00:48 +0000
Manifest this update: Sat 14 Jun 2025 02:00:48 +0000
Manifest next update: Sun 15 Jun 2025 02:00:48 +0000
Files and hashes: 1: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: UUj2FRC0L4Ba3hXINsV7og0T6Y2qv6QDzas4TAd0pHU=)
2: g6aF_sPRUTumEgKyygfiqs9RnAY.roa (hash: rvpq14gdtNJHSBubmTdr4iiG6SshNjIec7cz2rKU0Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:06:6d:46:d6:f0:45:bb:0b:e5:f3:5a:79:bf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Jun 14 02:00:48 2025 GMT
Not After : Jun 15 02:00:48 2025 GMT
Subject: CN=0eb8cf8d4d49780ea962821fba0555ddb4aa413b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:fe:b7:a3:ce:a2:ce:f5:9a:a6:72:79:ad:
1f:e3:91:df:dc:35:15:4e:5f:83:4c:22:41:de:99:
84:40:16:13:9c:bc:83:9e:04:2d:50:27:9f:dc:c3:
ea:a4:8f:da:8a:0a:bd:44:d2:e0:5d:49:3f:ad:00:
ed:f5:47:52:7a:b1:a2:9c:58:e2:bd:c7:e1:cc:10:
da:fa:6d:2d:fe:0a:80:bd:f3:6c:33:32:9f:7d:d8:
8f:6f:00:86:f0:90:0f:97:29:65:5d:97:16:f3:1e:
ee:36:e7:de:92:0e:13:91:86:da:a3:6a:d6:8d:b0:
0d:96:4e:4b:99:22:4a:03:25:ae:40:6a:22:bb:eb:
04:ed:1e:91:38:3a:15:d3:c8:60:52:ff:27:55:ba:
bb:3a:94:5c:ba:81:bd:be:a5:63:cb:ab:e4:56:43:
bd:ce:f1:ad:34:fa:0a:ac:5f:2b:0b:c3:14:f3:d5:
7a:b4:ff:7f:ca:1c:e6:2d:b1:60:46:62:32:2c:fe:
60:f6:e7:bf:c6:60:83:77:63:73:09:49:00:06:39:
0f:2f:f2:06:47:78:ee:a6:8f:da:3a:e4:e2:f6:12:
21:87:3f:2f:ea:f1:d3:2a:f3:53:43:9b:1a:5f:97:
bd:0b:d1:8c:78:ec:b8:da:13:4f:06:3d:3d:98:50:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:CF:8D:4D:49:78:0E:A9:62:82:1F:BA:05:55:DD:B4:AA:41:3B
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ad:94:a1:5c:fb:78:f2:48:41:3c:e6:87:1b:4e:97:f4:f5:
b8:4f:33:eb:74:90:9d:47:74:c8:ac:c7:c8:93:f0:9c:a3:54:
a9:b5:6f:ff:38:de:f1:6a:7c:c5:ff:f0:cb:62:21:17:66:e2:
de:b3:db:78:a8:ee:a7:1f:92:ff:01:00:1d:46:de:ce:5e:34:
40:4f:4f:cc:c4:a1:8e:ce:56:8e:e8:39:4a:ea:b5:70:b0:7c:
5d:e2:9d:53:e0:73:da:03:ce:ba:db:3f:2c:ae:60:23:b3:eb:
67:a6:3e:d7:53:8f:c3:33:fc:18:1f:00:bb:c1:63:38:56:0d:
cb:27:e3:97:c6:94:a1:86:3a:ae:75:3d:72:84:7e:43:09:f2:
a2:b5:9d:ef:ec:82:6e:97:c2:3e:c9:22:ef:68:90:dd:a8:7e:
69:02:cb:9c:12:76:b2:94:50:c1:85:7f:3e:e9:25:f3:b3:34:
ff:60:f5:9b:7b:64:28:50:cb:88:27:1c:73:28:5f:f6:fc:71:
8c:1e:9a:3a:e0:77:47:2a:54:2c:ab:d6:d2:39:cd:c1:69:86:
eb:2c:33:e8:88:c7:c2:ba:9b:9a:dd:91:01:21:7f:cb:57:d1:
0d:b4:11:22:91:ad:2d:9e:c1:f4:2a:79:cc:ee:fb:c8:f4:85:
2f:5e:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:27:51 2025 by rpki-client