Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier: xp5LXfknmjD7JKAHqQK4Iz1ZdwbmQQtO148aqKoH1dc=
Subject key identifier: B9:2D:75:22:EC:39:05:98:AE:65:ED:F8:AD:77:EB:43:05:7D:D1:C1
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 01976FD0D6D7952E5616C862D3271BC0F141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number: 1597
Signing time: Sat 14 Jun 2025 19:00:46 +0000
Manifest this update: Sat 14 Jun 2025 19:00:46 +0000
Manifest next update: Sun 15 Jun 2025 19:00:46 +0000
Files and hashes: 1: 5kpPrp0PsQaLwN-0f4M5ORyJaIo.roa (hash: sRLtBcmB7NMgyGt87xrsnTDd/kvjgxEDyhMytt8u1mY=)
2: TEQ2s_TPddXgs2TBHawu_QRXdAY.roa (hash: v8GdY3sNaK+PD8iTL9fBBYBUT72JOPHFN0JrePdltX0=)
3: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: ufZ6OWbWy1S768VHfYlTzhWh4q26Zc/Oh7cil26cW90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:d6:d7:95:2e:56:16:c8:62:d3:27:1b:c0:f1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Jun 14 19:00:46 2025 GMT
Not After : Jun 15 19:00:46 2025 GMT
Subject: CN=b92d7522ec390598ae65edf8ad77eb43057dd1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:fa:8f:11:89:92:ec:c5:ee:04:82:99:1a:
bb:cc:3a:77:f7:a5:c0:a7:1d:e6:24:30:6f:52:c5:
76:36:cb:40:6e:04:89:b0:7d:6f:13:b1:4b:f6:c9:
5b:2a:6d:22:79:7c:d2:9a:0e:09:f4:a3:c5:68:16:
08:cb:01:d6:11:86:0d:d6:61:13:09:32:b1:d1:ad:
16:a4:4f:6b:ba:6b:6c:3b:47:b6:64:9d:18:90:ab:
f0:6d:29:ff:49:ff:21:41:db:f0:36:99:67:36:ba:
74:66:4d:24:87:f5:ac:5c:e7:64:84:32:01:97:b2:
c8:1b:32:0e:41:66:34:76:17:d2:4d:ab:1d:75:03:
6e:8e:d9:56:33:04:2c:30:55:5c:5b:0c:63:e7:25:
40:da:b3:4a:c8:ee:b4:24:40:95:90:2f:87:6e:5d:
6e:c2:96:5a:ac:0b:3e:66:9a:ec:be:0f:d9:e2:23:
49:70:5c:3e:92:6a:0e:3b:b7:39:0a:3f:a0:c2:f1:
c7:46:58:8e:45:98:19:7b:53:3d:5a:74:e3:aa:5d:
87:17:f4:22:e2:bf:b2:36:8c:a8:39:84:45:66:99:
9f:90:4f:f2:2f:0d:85:11:8c:eb:53:a0:2a:98:8d:
8f:99:80:6e:01:58:e3:bd:3b:c6:46:93:b1:d7:f1:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:75:22:EC:39:05:98:AE:65:ED:F8:AD:77:EB:43:05:7D:D1:C1
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:68:e4:f0:df:99:26:65:03:6a:c0:c0:dc:5a:96:8d:da:46:
30:01:9e:ce:5f:30:c4:11:c0:e3:e2:bf:98:e3:01:b4:40:c4:
c9:1b:40:3b:ba:c8:1f:f9:da:a6:b2:15:14:03:9a:e6:1d:5b:
37:e6:b6:b5:86:d7:84:81:57:fd:1c:7e:f8:49:d1:51:78:2b:
f0:ae:1c:16:47:7e:69:09:46:60:e0:80:b0:af:cf:1f:62:55:
0a:2f:cb:1c:f8:88:6c:14:1c:83:23:71:36:c4:4e:db:9b:39:
8d:30:72:c4:51:cd:06:b5:f7:f1:28:aa:a7:5f:51:28:7b:ed:
98:cc:f5:6d:8d:cc:bc:d8:6e:8f:f5:23:e0:a8:3b:91:b9:48:
ce:5f:ed:f2:2b:6e:be:61:0b:8c:4d:90:13:98:df:d4:b0:79:
54:87:5c:79:cd:c1:91:b4:75:7c:53:bc:76:05:2d:18:aa:f7:
df:8a:44:df:93:68:16:84:3c:f0:08:e2:e5:01:22:cf:5d:e9:
22:df:7f:38:3c:e7:c0:c3:c6:16:9c:68:b5:0f:8d:fc:74:e8:
b2:09:31:c4:e2:f7:22:cf:bb:50:57:6d:90:c1:20:dc:16:85:
15:9b:e3:28:80:75:fd:8d:f0:7b:81:21:66:6a:93:16:cc:0d:
83:0f:43:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:52:07 2025 by rpki-client