Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier: UMRNTZJU4zNoksX5n9amJIepM/0+i9lPmod0bYZY4IM=
Subject key identifier: BC:D5:3E:0B:CA:1B:54:33:6B:8C:9D:88:BB:98:6E:6A:9C:96:10:39
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 0197507CC97D5656BFE95DE37656895BBFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number: 43
Signing time: Sun 08 Jun 2025 17:00:44 +0000
Manifest this update: Sun 08 Jun 2025 17:00:44 +0000
Manifest next update: Mon 09 Jun 2025 17:00:44 +0000
Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: rDTzqqOZi/0FitXomDc63K62Mr/Qq94g+xoRHu1zOXI=)
2: tFY_1oU9xNxzF5JnlbdrLi4cQ9A.roa (hash: Sxl+M0Cfp0KqUWFjQhEzTtXSwHwXwN4AdOusnlZXPTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:c9:7d:56:56:bf:e9:5d:e3:76:56:89:5b:bf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Jun 8 17:00:44 2025 GMT
Not After : Jun 9 17:00:44 2025 GMT
Subject: CN=bcd53e0bca1b54336b8c9d88bb986e6a9c961039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:5b:bb:ee:e2:ac:63:3f:62:98:1e:ae:65:
13:e9:c2:2d:a9:57:81:9e:34:e6:b8:2b:87:a1:6b:
80:97:c2:05:3a:26:8d:18:de:5b:d6:92:1b:e8:9c:
3b:47:3e:6f:82:d6:ab:e6:4f:3a:00:4f:27:f0:fa:
1c:ac:67:08:da:c7:b2:36:df:10:ec:04:bb:59:4f:
30:b5:5e:58:9b:d5:1f:a6:87:7c:38:d2:84:9f:03:
89:cb:a8:a4:5c:28:49:62:66:9d:9a:86:75:a6:d7:
5a:88:cd:8c:46:62:a4:01:68:49:bb:35:69:5a:44:
d9:72:ac:db:0d:b9:0f:a0:49:bc:fa:13:0c:52:c5:
ff:47:f8:f8:36:22:93:8f:1b:99:ca:19:c4:f3:d2:
7d:3c:24:d7:ce:a4:d6:77:b0:9a:2c:62:a8:ae:ff:
da:e3:7b:12:4c:97:bb:c7:46:94:82:5e:89:67:1a:
9b:59:57:c8:65:32:07:0a:45:08:8c:19:2b:f7:75:
9e:e7:a3:6b:84:32:53:4a:1d:77:cc:41:67:90:3b:
2e:62:0b:03:f4:95:c0:3a:29:de:ad:ec:86:f7:c5:
e2:31:7b:b1:49:e1:24:a7:4b:8a:97:06:4c:42:96:
5a:fd:33:54:ef:36:6a:0a:c5:19:1c:dc:46:f2:9b:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:3E:0B:CA:1B:54:33:6B:8C:9D:88:BB:98:6E:6A:9C:96:10:39
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b5:e0:d2:c4:4c:01:bb:60:f0:83:7b:e6:c2:65:90:db:d4:
fb:15:4a:a1:88:68:00:6a:76:29:e6:65:d1:48:a7:71:65:8e:
08:27:21:40:ba:77:5b:20:53:11:35:1d:fa:13:8d:e3:72:a8:
e9:b1:54:c6:42:18:d2:28:ad:aa:ac:1b:bb:9d:0f:ea:be:0f:
61:2e:b5:84:8e:12:ca:19:9d:ab:6d:6b:65:7d:56:05:56:bc:
8d:12:6f:0f:75:56:8d:6d:bd:6a:8e:d9:42:67:be:0e:37:24:
63:e2:b9:1b:a9:70:3f:86:0a:88:61:de:7c:53:b2:cb:5a:cd:
6a:fe:c7:bb:09:6c:a0:1e:01:9d:d3:82:9e:47:89:58:69:6e:
e4:9c:dc:a6:68:b2:77:17:4e:51:a3:06:d0:fe:ae:f7:b9:99:
75:1e:9b:97:9d:c5:f1:2f:a7:6b:11:25:bf:95:25:a0:dd:62:
32:c4:1a:b7:5f:9e:e3:0e:10:77:15:f7:56:7f:dd:52:e8:87:
21:38:81:b5:b1:90:59:33:86:48:1b:7e:b0:e6:1a:55:b1:b8:
6c:03:ad:94:3a:f6:38:18:61:8a:74:70:3a:bc:80:64:83:8c:
63:99:65:57:ff:67:a2:a8:87:3c:3f:d1:ed:91:61:aa:70:25:
5c:28:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:36:42 2025 by rpki-client