Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: Fbm9B+03soO275rFaFnTF6z9fHC7KCwEVNGRsQQVEUA=
Subject key identifier: 43:D4:11:47:26:B9:43:7E:71:AB:9E:37:F3:F8:4C:FE:4D:14:0E:A0
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 01976D7498DB4D842C98F256B1A33D14C5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 11B2
Signing time: Sat 14 Jun 2025 08:00:47 +0000
Manifest this update: Sat 14 Jun 2025 08:00:47 +0000
Manifest next update: Sun 15 Jun 2025 08:00:47 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: KxUrWX1hWvhVuFWaqBeaXq9vl4taPk/4BZnApi8vhnw=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:98:db:4d:84:2c:98:f2:56:b1:a3:3d:14:c5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Jun 14 08:00:47 2025 GMT
Not After : Jun 15 08:00:47 2025 GMT
Subject: CN=43d4114726b9437e71ab9e37f3f84cfe4d140ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:4d:6e:b4:94:74:f5:1f:41:e5:6e:79:8e:
9d:db:02:a9:35:ad:77:33:71:0d:74:05:c8:57:3a:
ef:65:b4:34:20:30:2c:be:ac:96:09:1d:c7:a1:62:
0b:38:86:60:19:2d:48:7d:29:11:88:7a:48:6c:85:
c3:32:54:fa:45:e5:e9:4e:2d:c0:e3:a6:df:73:0f:
bc:28:27:3d:36:d1:0a:72:a2:33:ab:60:34:e5:1a:
1b:93:05:0e:37:67:bd:f1:93:36:b2:f6:0f:9a:6b:
45:14:1d:18:e3:a6:d9:8f:02:c2:a0:1f:c7:b7:fc:
61:89:bb:f4:76:69:90:5d:ad:2d:ff:33:e5:14:10:
ef:06:48:61:16:f0:a9:0c:48:9a:21:d7:7c:3e:46:
44:c1:17:18:eb:b2:a9:e2:b8:21:56:5f:89:49:d6:
0f:c1:a0:0c:be:03:cd:42:12:da:cb:e2:a3:16:6b:
36:e9:03:20:bf:b0:47:c4:c0:a6:a4:7f:1c:d2:71:
54:8b:67:7f:31:c2:a3:6e:b8:2c:02:34:ab:75:c2:
94:98:a7:f0:c3:17:d5:db:a4:cf:3f:10:25:66:06:
73:c7:35:e7:ee:65:81:e3:9e:52:3b:b3:16:5b:9d:
1d:1c:af:ae:ce:7c:8d:38:f7:75:40:bb:c0:94:0e:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D4:11:47:26:B9:43:7E:71:AB:9E:37:F3:F8:4C:FE:4D:14:0E:A0
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:92:fe:f0:a4:e7:4b:09:29:e9:20:03:0e:74:3e:c2:7b:52:
b0:2f:46:58:22:67:30:6b:62:72:89:81:84:71:22:1a:32:53:
3f:20:01:41:89:75:c9:43:93:2b:93:dc:e6:94:d4:83:17:0f:
fb:8c:21:a4:85:72:53:22:2d:85:a8:b6:e9:d8:ce:c1:5c:23:
fa:b2:9b:ce:22:4f:2a:28:06:a9:83:30:c3:5b:4f:0a:6b:c9:
93:0f:43:cc:c4:ed:97:dc:c9:ca:c1:95:bf:eb:72:5f:80:3c:
2e:f4:0b:00:4f:4d:d6:cd:02:bf:e5:97:43:87:c2:1b:aa:14:
e4:e9:55:17:d1:80:25:85:c9:ec:99:cf:8c:18:87:46:4d:dc:
bd:90:85:3b:b2:1a:90:7d:47:61:10:6d:f4:90:56:64:64:9b:
53:62:c0:11:2e:74:2e:1c:b9:b2:b5:e6:50:c4:5f:6b:65:63:
93:0c:95:82:92:23:c1:eb:85:09:03:04:59:d6:e8:db:f9:dd:
15:fe:2a:30:b9:dd:db:7f:11:bf:d0:6a:17:a4:4b:96:a8:b9:
11:36:2b:98:ce:c3:09:83:74:9f:89:24:f3:30:51:8d:17:4b:
fe:5b:d0:bc:83:b4:c9:c9:21:86:a3:25:02:60:55:20:9f:aa:
07:ad:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:53 2025 by rpki-client