Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: cqff4H+sZ5a11UTwUH8hWTWsMra/s3/i1U6Vv+2ndHc=
Subject key identifier: 9E:AB:39:5E:44:3E:27:24:0C:9D:C7:19:CB:E5:19:7A:56:9D:5D:24
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 01976BF41B37252FA9085FBED20123871339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 1225
Signing time: Sat 14 Jun 2025 01:00:49 +0000
Manifest this update: Sat 14 Jun 2025 01:00:49 +0000
Manifest next update: Sun 15 Jun 2025 01:00:49 +0000
Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: 9KrPcysWlc7Wk9EsoJ7CRzZwuzrBhZzXyjKhLoXxeXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:1b:37:25:2f:a9:08:5f:be:d2:01:23:87:13:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Jun 14 01:00:49 2025 GMT
Not After : Jun 15 01:00:49 2025 GMT
Subject: CN=9eab395e443e27240c9dc719cbe5197a569d5d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:67:3e:c7:f3:c6:cc:0d:fd:65:d1:8a:96:
a3:ef:07:d8:98:e1:4c:af:e1:d5:8b:b2:43:fb:3c:
39:b5:e7:b6:a3:63:94:64:09:0d:d9:8c:07:c0:eb:
3b:46:12:dd:6e:d0:3d:5a:d5:3e:ec:8d:3f:9f:e4:
98:bb:ac:f6:48:46:ac:c3:ab:53:a6:49:7b:e3:43:
e2:6c:39:9c:dc:35:84:63:1d:89:7d:90:bf:1f:0e:
1f:01:cc:67:e0:a1:95:39:23:e3:b0:94:77:66:5d:
92:a6:84:0b:a6:bf:3b:07:ca:64:a8:a2:55:6f:85:
39:02:d3:30:52:88:26:d4:46:73:3a:77:e8:0c:eb:
8a:a9:90:ff:e2:8e:d4:fa:3f:91:39:69:bc:4a:88:
f5:62:c4:bc:75:c0:77:1b:01:56:b5:3e:44:2e:79:
85:40:d5:89:82:01:30:10:82:0e:73:e6:50:c9:60:
1b:dc:19:4d:09:3a:09:e8:a3:82:80:77:4e:cb:b0:
25:07:68:3d:ab:d0:59:81:5c:4a:10:31:b0:54:8c:
36:6b:b2:f4:61:0c:6c:ea:bc:3c:2c:ea:4f:04:45:
87:64:ca:87:86:bc:12:c4:3e:c1:53:ca:98:3f:15:
5c:65:4b:dd:19:a8:51:58:20:7b:0a:e5:84:03:63:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AB:39:5E:44:3E:27:24:0C:9D:C7:19:CB:E5:19:7A:56:9D:5D:24
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0a:c4:58:af:f6:f0:f8:38:3f:cc:66:b5:a9:4d:b2:a0:28:
88:5b:65:22:4e:0b:37:f8:93:0d:26:ec:df:f6:bf:f9:22:43:
38:22:3d:64:5e:a2:b5:a0:2c:17:52:24:06:55:d2:1e:c3:ec:
82:b8:79:f7:f4:15:45:d6:5b:0e:da:fb:56:89:4d:62:d0:50:
7c:91:ca:42:51:63:90:83:e1:67:00:f6:e9:06:d4:b8:df:11:
51:c7:f9:5a:35:83:4f:5a:0f:9f:69:3a:fb:0f:f0:4c:58:65:
43:f8:7b:4c:be:0e:bb:f6:d3:7a:60:9c:38:ba:11:70:55:82:
c1:dc:8c:e1:61:23:85:51:f6:79:3d:47:56:3f:2f:6d:60:f7:
ac:52:ab:e4:60:d8:ed:88:83:4c:0f:1e:3f:07:01:af:94:12:
86:a8:5c:3b:78:d0:53:ca:ac:81:41:d1:77:93:80:e3:01:72:
33:dd:96:ba:77:ac:b4:e6:4c:59:7e:cd:1a:25:e1:01:a3:73:
84:bc:ff:b9:8a:28:e0:f7:37:18:e3:4d:50:82:22:de:ae:9b:
6d:c5:af:9d:bf:96:73:59:a6:eb:5f:d4:3e:fd:20:7a:51:ec:
c2:db:a4:c3:04:01:e7:04:5d:a4:f6:25:ab:7d:0c:55:98:64:
09:86:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:49 2025 by rpki-client