Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: wqkD9kwlr69mqoyxTR4nHQ3OSDYrRPv9GQEh7NFcaWk=
Subject key identifier: 79:83:1F:9A:65:FA:F9:F7:07:99:08:81:8D:89:A8:34:56:92:55:E5
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 01976E1977B963F5F8DB3D79E9DFFD3A017A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 11:00:52 +0000
Manifest this update: Sat 14 Jun 2025 11:00:52 +0000
Manifest next update: Sun 15 Jun 2025 11:00:52 +0000
Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: VLUPOGSpA5Hon55/PA4EZHQnIy7kZfhuxKdnad97T1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:77:b9:63:f5:f8:db:3d:79:e9:df:fd:3a:01:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Jun 14 11:00:52 2025 GMT
Not After : Jun 15 11:00:52 2025 GMT
Subject: CN=79831f9a65faf9f7079908818d89a834569255e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:48:dc:d7:82:c0:3e:95:52:b3:c3:85:9d:
03:e6:92:37:ee:e0:f1:b1:a0:10:e0:c1:64:97:de:
73:a9:8e:21:e0:0b:0c:d1:cf:1b:03:ce:c9:f4:96:
5b:f6:a3:0b:58:3a:fd:c7:b5:8e:ca:03:3b:63:0c:
68:31:67:f3:1e:36:85:2a:83:3f:ed:94:ed:e1:aa:
e2:6c:ab:6b:ec:7d:d3:d0:c9:3a:c3:41:00:38:3f:
de:4b:6f:47:52:7b:17:c2:64:05:61:23:c1:1d:7d:
b3:63:7c:85:1f:ae:0a:86:d8:7e:3d:75:8b:a9:71:
9b:4d:0c:3f:f9:14:20:db:a4:8a:11:90:b9:8b:e5:
dd:65:a7:2b:26:8d:a0:95:12:76:e5:ca:b2:bf:10:
3c:2f:57:9d:66:c6:2f:9c:1f:53:83:4e:0f:2a:37:
b7:7b:f4:6a:9d:c3:cc:55:25:48:25:f9:1f:0d:fa:
59:7b:de:8f:17:0d:33:ad:40:86:02:c0:e5:19:69:
37:1f:9d:4e:e3:7a:a3:1a:fe:13:2a:f1:71:26:96:
0d:38:cd:9f:e3:5e:2e:a8:50:9f:b0:f3:ea:55:8b:
50:e6:34:ec:4a:22:07:84:d8:86:41:96:0e:1f:ff:
44:3a:44:9b:0c:96:61:33:ef:c0:2b:94:4d:89:69:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:1F:9A:65:FA:F9:F7:07:99:08:81:8D:89:A8:34:56:92:55:E5
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d0:c2:ca:f1:17:5d:86:69:99:d8:3d:03:d3:9c:66:d4:93:
2d:1e:7a:e1:3d:69:f1:0e:3f:26:75:6b:75:16:a7:57:8f:82:
10:16:5e:ef:79:4e:aa:55:ed:22:cf:e4:6a:a0:64:13:87:a4:
9b:46:e8:c2:fd:e1:c1:d5:7a:6b:b9:ba:d7:7e:4a:2a:5f:ad:
db:82:80:48:17:92:71:75:06:bc:5a:de:05:78:b0:1d:22:67:
0f:90:f0:65:63:aa:ae:36:fe:b7:ee:22:8f:76:d4:d3:a5:97:
19:a1:05:18:7a:c4:f1:a7:1a:28:46:d9:c2:9a:d2:17:8b:18:
cd:62:ef:6c:12:bf:9b:d8:d5:c0:05:f3:ad:b9:ac:52:97:52:
73:b5:8c:59:53:a7:0f:67:4e:8e:26:d1:76:50:6c:a9:41:85:
50:3b:40:1c:e9:22:cb:a5:3b:6a:16:d2:1f:4b:ec:34:42:d8:
98:2f:5a:0f:fa:f2:0c:85:2c:0a:e9:cb:f3:19:0a:f0:72:0a:
01:03:3c:fa:80:e7:f9:89:60:db:ca:c8:a8:2a:8c:99:8a:63:
45:8c:82:e5:0a:24:bf:71:c3:b4:6f:76:3c:72:ec:44:ca:03:
f3:cf:45:ca:24:76:4b:35:e4:54:f0:f6:3f:83:66:c3:c8:62:
69:87:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:56:11 2025 by rpki-client