Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: SljQrUMG+ZRpy+e5JTh72xNemcz5jKjnvy8/fniVEtY=
Subject key identifier: 46:F7:C1:2E:3D:61:01:38:32:1E:FF:AF:1B:51:1E:42:FE:0E:80:98
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 01976997D384BE3A700E23CE8235C3741A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 14:00:47 +0000
Manifest this update: Fri 13 Jun 2025 14:00:47 +0000
Manifest next update: Sat 14 Jun 2025 14:00:47 +0000
Files and hashes: 1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=)
2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: /VQDO+WpQWkxEW/lSjNovrBUB+ScFh7TCkcdDJX5rVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:d3:84:be:3a:70:0e:23:ce:82:35:c3:74:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Jun 13 14:00:47 2025 GMT
Not After : Jun 14 14:00:47 2025 GMT
Subject: CN=46f7c12e3d610138321effaf1b511e42fe0e8098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:a4:71:32:66:e1:7f:ea:e7:ac:1d:31:a4:
82:f7:2b:65:74:aa:d3:3b:44:3b:be:a1:8c:75:9c:
20:b2:03:8b:94:78:de:0d:a7:87:c4:1a:e4:84:14:
d8:3b:a1:4b:cd:68:cd:01:8a:80:33:fe:eb:02:5f:
69:36:87:81:04:12:33:aa:ed:82:f7:db:a6:ca:61:
55:8f:34:39:14:44:66:ad:0f:63:b0:8c:6c:bd:d2:
82:d0:91:77:4f:6a:ef:75:a3:6c:d5:d7:f9:42:5b:
15:4a:26:42:c8:a9:47:41:3c:8e:a9:a3:38:b9:c6:
1a:40:6e:94:0e:1f:b2:94:62:6b:13:7c:86:34:26:
0b:b0:35:f2:c4:2f:03:46:79:49:18:5b:5c:e4:19:
6c:4a:f1:bc:55:e3:f5:e7:64:6c:0a:47:81:e1:35:
71:3f:98:96:81:61:c0:58:60:56:5e:b4:9f:58:24:
ad:d2:cd:4f:47:6b:c4:e6:8d:69:4e:3a:c1:37:57:
b1:7c:97:bf:06:6b:37:8b:b0:7a:05:60:89:1e:7c:
e1:1d:f2:5f:75:4e:4a:05:3a:b0:9d:be:54:68:48:
a5:0c:0d:b7:1a:d7:12:04:7d:e1:24:73:26:2d:62:
df:52:d9:6a:36:82:60:ec:3d:c9:45:ba:c3:a3:0a:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F7:C1:2E:3D:61:01:38:32:1E:FF:AF:1B:51:1E:42:FE:0E:80:98
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5c:d2:c6:ba:39:23:72:6f:1f:6f:21:9f:fd:3d:d6:f7:d6:
c3:7d:19:6a:3f:30:5c:4d:98:4b:09:99:0e:ea:da:25:a1:d8:
e2:19:d4:cd:84:6c:c6:6a:43:20:92:0b:0c:47:42:dc:1d:7d:
3b:2f:1c:4e:2e:6c:d4:90:ac:a4:be:1a:ae:ee:23:90:92:88:
6c:78:53:31:b6:bc:bc:b9:fd:f3:19:36:5d:e0:65:00:24:8e:
07:1c:65:cc:57:9c:cc:6c:7f:14:05:4a:5a:80:66:e9:fc:55:
ec:8a:e8:66:87:14:18:7d:77:61:00:2c:5d:19:c1:a2:97:f6:
14:ed:76:fe:51:ad:2e:1f:65:60:7a:0c:6f:c1:59:93:c3:3d:
82:2a:6c:15:7f:d3:29:fb:97:70:c6:50:8d:1f:1c:cc:be:14:
1d:d3:5b:fb:7c:f8:01:66:16:5c:ce:84:6e:f3:a2:c3:99:99:
b2:cb:28:65:14:58:bc:6a:ab:ec:e8:56:8b:4f:db:de:05:4d:
96:c3:3a:82:8d:3a:2b:66:69:53:8b:8a:7f:18:8a:3a:05:67:
83:ac:4a:70:aa:e7:21:3c:44:f8:e4:f7:0b:f5:d9:06:dd:54:
c3:2e:05:df:b5:8d:94:66:f3:42:db:c6:e3:70:63:04:aa:84:
0c:7b:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:29 2025 by rpki-client