Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: adBeMRg+M7e1Wwz+krCdam9ARCpXngbzRj1dGVh+uyA=
Subject key identifier: AF:EE:84:69:4E:98:01:F9:17:95:CA:47:29:6A:C6:3D:CB:A8:00:F7
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 01978846FD5E3625101F51F08514897ADF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0BA5
Signing time: Thu 19 Jun 2025 13:00:43 +0000
Manifest this update: Thu 19 Jun 2025 13:00:43 +0000
Manifest next update: Fri 20 Jun 2025 13:00:43 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: CZygJOf7OFmnGhbL/kySv9ysbOkrm42TuuxkvsAcBZc=)
2: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (hash: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:46:fd:5e:36:25:10:1f:51:f0:85:14:89:7a:df:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Jun 19 13:00:43 2025 GMT
Not After : Jun 20 13:00:43 2025 GMT
Subject: CN=afee84694e9801f91795ca47296ac63dcba800f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:c8:28:24:7c:03:f8:ac:01:97:03:b7:21:
65:83:13:39:ee:be:01:cc:f7:f9:ca:aa:02:ff:8f:
74:3f:e4:cc:b4:47:0b:9e:ba:93:ec:82:14:97:71:
fb:e4:6e:f1:04:4c:ae:99:f6:88:c2:0c:1d:05:06:
2d:a6:dd:1e:a4:4e:65:5a:af:22:2b:05:35:f0:13:
ad:eb:b6:a6:72:df:bb:3a:1f:cf:6e:87:be:6d:44:
ae:cb:82:3b:62:70:59:13:4a:76:c9:54:22:b3:fa:
f4:24:a6:dc:72:7e:36:c5:f7:98:7b:64:50:68:d0:
3b:be:c4:32:3b:3c:a4:0e:8d:41:86:a7:d4:c3:1a:
a6:db:73:bb:fa:a2:59:36:15:a8:a4:43:2c:cb:8f:
53:6b:b6:00:5d:2c:d2:2f:1e:6a:4e:80:64:85:0e:
69:35:e5:50:40:0a:dc:e7:9b:f5:61:40:ad:47:40:
c8:7d:98:a9:f0:12:d5:12:c9:8c:46:c2:39:a9:31:
77:4e:b4:b0:5d:bf:45:a4:58:dc:1c:fb:38:ed:b5:
9e:1c:75:08:e1:81:6f:ee:c9:90:32:cf:a1:d3:72:
8c:ef:a3:65:5b:ab:41:03:1f:c8:f3:7d:04:43:2d:
f5:9b:ac:b0:cd:2d:a9:42:d8:88:ef:ab:81:d2:22:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EE:84:69:4E:98:01:F9:17:95:CA:47:29:6A:C6:3D:CB:A8:00:F7
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:93:cd:ac:ab:56:e8:64:b3:54:35:01:4c:1d:11:ad:54:70:
76:d0:d9:3b:a7:54:dd:70:f3:e3:b8:dc:1a:20:41:31:bf:10:
c6:9c:d5:6c:8b:ae:22:db:c5:96:44:d3:d3:a0:6b:9d:01:43:
d9:76:47:7b:ac:dc:6e:0d:2f:ef:d1:2f:4a:d8:29:b1:50:1f:
6b:cd:93:90:40:29:4c:40:27:e0:f8:5d:eb:25:5c:d7:d0:1b:
b3:6c:62:6a:7e:fe:0e:69:04:6b:70:0b:98:b6:de:63:ad:ec:
e1:db:d6:41:55:24:10:64:ae:d4:63:a7:18:d2:4b:5e:89:5b:
4a:8b:89:b5:79:cb:61:cd:56:15:8c:af:15:91:db:6c:13:64:
96:ea:2c:c9:88:f2:f2:6c:6a:94:4d:26:db:a9:c8:97:c0:9c:
05:d8:f0:89:69:20:d8:09:2e:33:65:8a:df:8f:79:0a:4e:91:
ee:71:5e:99:f4:56:64:02:8a:b9:b4:3f:bd:4f:fd:f3:49:58:
0a:36:c8:89:0d:bb:5a:8f:f0:92:2e:5b:0b:cb:9c:67:68:00:
90:77:ed:f2:31:08:9e:c3:8e:18:ac:15:73:ea:27:47:7e:d6:
78:ff:e1:92:38:d8:e4:64:66:ca:5f:1b:90:30:16:0b:ee:58:
b7:b6:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:10:35 2025 by rpki-client