Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: SFn5yvNBsgnafbxor1vh2r3uP3Vp6Adcw+YZCBwLKBQ=
Subject key identifier: F3:13:8A:C4:38:E5:5E:15:4D:B0:87:82:3C:1E:61:C2:8C:34:0B:AD
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 01976C991DF44C81513AE8398F774F27E32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0DF6
Signing time: Sat 14 Jun 2025 04:01:03 +0000
Manifest this update: Sat 14 Jun 2025 04:01:03 +0000
Manifest next update: Sun 15 Jun 2025 04:01:03 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: TVrjT2fpb0V826COsNCYdAUpR/JURZ87jDJkj7AwChY=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:1d:f4:4c:81:51:3a:e8:39:8f:77:4f:27:e3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Jun 14 04:01:03 2025 GMT
Not After : Jun 15 04:01:03 2025 GMT
Subject: CN=f3138ac438e55e154db087823c1e61c28c340bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:cc:4f:fe:6e:a3:15:98:fd:b5:32:67:76:
0c:53:27:91:7e:22:99:80:70:cb:d7:ea:b4:06:37:
0e:65:e0:55:6c:e3:20:4b:cd:63:b9:e7:96:15:95:
ed:79:a1:21:5e:04:e8:d1:97:98:ab:a5:e7:38:d3:
92:7d:05:d4:9a:94:68:49:b4:dd:8d:09:1d:f3:f7:
d6:24:cd:37:fa:dc:fa:33:11:f2:64:c7:1a:13:9c:
65:35:b5:71:87:ba:95:4e:a2:02:3b:8f:c6:bf:e8:
28:0f:b1:6d:b7:74:6c:63:5a:f7:76:20:07:ff:d4:
53:5a:de:e2:e8:85:23:e2:c1:de:be:91:08:c2:72:
bb:2d:22:b4:f7:1a:12:1a:6b:53:22:9f:ae:57:17:
1e:b6:7b:86:bb:2e:b3:52:43:be:68:34:27:8d:39:
75:f1:9f:b2:9a:d6:72:8f:9e:8a:af:c6:b1:52:b4:
30:5e:3e:af:fa:d0:8e:bf:8d:6c:f8:d1:ad:4c:06:
19:ee:f3:d5:c9:fd:5a:3e:aa:09:32:75:4d:3c:fa:
e5:0b:41:a2:28:90:5d:42:11:ce:61:8d:91:37:ec:
d7:68:94:1d:3a:de:d2:0a:42:5c:f4:d2:f4:aa:7b:
b2:47:4a:41:fe:3f:9b:7f:38:59:f7:66:ae:cd:b0:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:13:8A:C4:38:E5:5E:15:4D:B0:87:82:3C:1E:61:C2:8C:34:0B:AD
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d6:64:1d:d8:dc:a8:dd:8d:55:9e:b4:78:07:38:bc:c4:1b:
65:26:27:85:bd:7a:12:df:4c:93:4f:2c:c4:91:38:b8:7e:00:
96:68:0d:83:de:e5:12:c9:54:5c:3f:e8:bf:04:3d:70:38:15:
4e:7b:10:c3:c8:e9:3f:da:af:e4:bf:e5:e3:96:7c:c7:cd:d0:
b2:11:82:4b:31:ca:d9:c3:1a:7d:39:3c:f6:0d:e8:14:10:77:
88:8a:82:77:ae:d9:59:00:aa:22:f7:4e:1f:8c:36:c4:f6:f0:
3e:d3:2a:57:0e:4c:e0:86:b8:26:0e:12:c0:58:82:fc:6f:f5:
49:7c:4d:35:39:02:4c:bd:cd:a2:4d:63:06:f9:bc:d5:ad:11:
3b:27:5a:95:da:2a:3e:c4:ef:81:cb:84:35:bd:d0:35:da:05:
54:18:8a:b1:95:75:d0:dd:20:e5:fd:a5:5f:8c:fc:51:eb:f0:
07:fd:06:21:ca:f6:df:30:9c:07:03:ff:03:cf:90:4c:00:1b:
6e:12:25:bb:01:8c:eb:bd:21:85:3f:ef:25:9c:d5:1d:d2:0c:
40:2e:67:7f:52:1e:5f:44:06:93:05:e1:b7:a6:2a:c9:5a:8a:
0b:bb:a6:90:6a:df:2c:17:a2:54:fa:8f:08:86:e0:d1:0e:37:
b8:ea:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:25 2025 by rpki-client