Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: XzQ+ifl6wVSudu7lXOUqhBnAg3LHZ6kcBUrDA446HFY=
Subject key identifier: 09:1E:A7:6A:C9:C7:9B:AF:CE:54:A9:20:CB:60:39:80:57:2C:A8:19
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 019771F5DF370811244FD051FE6C56D16F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 154C
Signing time: Sun 15 Jun 2025 05:00:28 +0000
Manifest this update: Sun 15 Jun 2025 05:00:28 +0000
Manifest next update: Mon 16 Jun 2025 05:00:28 +0000
Files and hashes: 1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: coItHjlikbB5Tx8u5VI40EHZbr99Ql9ZZZMc0vvEXLU=)
2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=)
3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:df:37:08:11:24:4f:d0:51:fe:6c:56:d1:6f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Jun 15 05:00:28 2025 GMT
Not After : Jun 16 05:00:28 2025 GMT
Subject: CN=091ea76ac9c79bafce54a920cb603980572ca819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:ac:49:db:ea:29:85:c8:8d:42:6b:36:b6:
1b:81:df:d1:b4:1f:04:87:68:ac:9d:2e:b6:e6:f1:
98:01:d5:dd:b4:19:05:f5:ab:c8:47:92:9a:c7:65:
8a:6f:f3:03:73:b6:d2:71:6d:32:64:28:81:19:83:
7e:b9:62:0f:b2:44:5e:1a:ee:81:b7:98:cb:29:ac:
ab:8a:e1:06:a0:bf:dc:ce:1f:c1:6f:fb:25:c2:06:
87:2e:91:06:62:fb:2b:fa:73:26:ed:79:82:1e:a8:
b4:e5:2e:cc:6a:c9:da:00:33:0d:97:23:de:bf:3c:
6d:95:67:4b:3e:90:38:ac:a5:c7:fc:93:f8:e2:6d:
78:07:c8:08:2f:ab:66:a6:b1:6b:7d:bf:76:60:3b:
99:21:9e:30:01:3b:d2:96:af:bf:43:5b:17:4a:93:
80:a6:4c:06:65:bc:0f:a8:38:23:5f:50:d6:37:6b:
91:5c:54:93:a3:94:72:7d:cc:6d:84:a2:a5:9e:c2:
42:18:e7:f6:a4:cc:75:c0:a6:42:9e:d7:9c:d6:ce:
95:77:80:ed:b2:a7:a7:22:b1:11:17:6d:bc:18:1f:
97:69:e6:ac:f1:0c:5c:1c:29:f3:60:16:6a:1c:7e:
1d:2c:cb:7f:16:9a:c1:73:1d:ce:a6:2a:af:69:48:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1E:A7:6A:C9:C7:9B:AF:CE:54:A9:20:CB:60:39:80:57:2C:A8:19
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:24:23:01:f2:d6:2b:eb:86:4b:5e:0f:e8:fe:54:9b:2c:
f3:c1:50:7f:28:b5:ba:78:38:41:87:ff:89:70:bd:0b:07:8b:
c1:46:8a:25:b7:73:fc:60:f0:c7:46:d7:c7:b4:2e:52:d3:96:
63:51:70:0a:d9:22:08:b9:3e:73:8c:27:1c:67:4c:b7:19:e9:
74:2a:81:3b:21:e9:5b:d1:5a:00:d4:f2:97:6b:69:0b:76:51:
10:39:e1:97:e2:a9:7d:0e:b8:0c:ca:e3:bb:c9:7c:50:94:03:
8a:b3:46:b3:8d:3b:96:d3:78:6e:6f:c1:e2:7f:2c:58:16:09:
98:14:9e:2f:58:a0:fb:06:3e:39:6f:a2:08:cc:ff:36:02:55:
f7:db:64:88:42:8a:f1:1c:fc:54:e6:c7:3a:f3:cc:c2:f7:96:
70:c8:ed:04:a1:bd:16:75:6f:17:d4:52:a3:4a:23:fa:3d:18:
cb:e5:80:e2:61:d2:65:c4:67:eb:d2:90:a6:6a:c8:b6:5b:16:
6d:2c:45:7a:79:42:c9:b8:36:41:44:b6:05:38:69:70:8e:bf:
7b:00:5c:d2:9a:85:36:29:65:08:2e:8e:47:48:75:85:87:04:
90:08:34:48:39:56:7e:36:65:6e:74:5f:14:73:6f:92:31:23:
9c:c2:ac:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:32:36 2025 by rpki-client