Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json)
Hash identifier: gZyUNgqoehYmVRAK+vrCO3yl+ka8kbYMVxTXmK88CLg=
Subject key identifier: 4F:DF:41:91:9E:09:2D:0F:DF:74:B8:35:8A:EC:B6:B5:A2:B3:BF:C5
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197838EB8000656E8DB034165DE7E0AC305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
Manifest number: 08F4
Signing time: Wed 18 Jun 2025 15:00:57 +0000
Manifest this update: Wed 18 Jun 2025 15:00:57 +0000
Manifest next update: Thu 19 Jun 2025 15:00:57 +0000
Files and hashes: 1: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: C185zhgeuPq0D4ce8gRGyv9DqV7FS7eZs8cbFgSMf9A=)
2: x-UkkAB6bBHjnvfgkifHZfsul34.roa (hash: Z+EoTHR/GmNeC+PGL9FT4NMDxcyauPnVaWgbSwI9JOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:b8:00:06:56:e8:db:03:41:65:de:7e:0a:c3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 18 15:00:57 2025 GMT
Not After : Jun 19 15:00:57 2025 GMT
Subject: CN=4fdf41919e092d0fdf74b8358aecb6b5a2b3bfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:ce:6a:ac:6a:7d:26:f6:41:a9:9d:ca:7f:
19:ff:54:b5:d7:f5:4c:e8:20:ae:d7:83:86:4e:e8:
4c:fd:12:98:68:65:bf:e4:c9:2e:54:cd:bb:be:c9:
10:85:f0:30:f3:77:6a:cb:0c:bd:cc:6a:55:6f:67:
01:4c:07:d9:d0:e5:84:e2:32:63:58:35:30:84:68:
26:14:dd:09:73:04:ab:57:ef:50:08:95:64:11:00:
9c:3e:9f:c4:b1:d9:10:fd:3c:3d:2d:0a:df:f6:65:
96:52:fb:60:01:5c:de:5c:13:80:6b:c5:80:b5:4d:
51:c5:18:1a:78:1f:e0:65:dd:cc:4a:23:f6:35:3a:
c8:d7:dd:b2:a7:de:e1:37:36:6a:69:19:30:ba:94:
02:f7:06:1d:a6:96:8e:1f:ff:f7:c8:0c:dd:d5:79:
a5:f4:14:71:9d:85:c7:12:74:6e:c1:12:85:db:8c:
36:24:b9:38:bb:c4:a6:fe:61:d2:94:42:c0:d5:a5:
20:32:80:8b:4b:de:80:d1:be:68:80:b4:4c:b9:f1:
b4:1c:8e:bc:88:51:97:cb:70:bf:16:be:a9:d1:28:
0d:6a:cc:de:8c:55:4d:61:ad:ac:68:f3:aa:7c:e4:
df:46:7c:5c:65:3f:d6:17:c2:34:d1:57:c1:49:f1:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:41:91:9E:09:2D:0F:DF:74:B8:35:8A:EC:B6:B5:A2:B3:BF:C5
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:68:d4:d2:9c:f9:0a:8a:82:bc:73:3a:0d:e0:4c:4a:6e:d5:
5e:ad:c3:61:90:11:8a:d3:5c:05:ff:98:27:4e:b8:62:83:2f:
37:79:9f:f7:c7:55:34:29:13:9b:2e:32:0b:d6:6a:c1:42:81:
38:75:84:63:5a:4d:28:46:99:88:96:d1:62:60:ec:97:35:aa:
97:e6:d0:98:93:a0:97:be:72:5f:ba:42:57:03:69:1c:eb:5d:
1a:f7:cb:44:2d:66:8e:40:9f:45:3a:16:10:8f:58:1d:25:57:
90:99:d3:75:f8:bb:5a:d6:09:27:15:90:34:44:9b:de:d9:de:
62:0d:f8:57:88:95:46:8e:0f:1e:fe:37:1e:ea:57:0f:74:3d:
c0:a6:f4:09:bd:d6:e2:7b:8d:d5:39:19:d4:ab:b2:23:31:09:
91:77:af:f8:ba:1a:da:6d:8e:3c:13:62:e8:44:ce:39:1e:d7:
72:ee:a1:5a:92:1c:4f:36:a5:28:7d:84:bc:08:b2:58:96:2f:
a8:21:54:ce:29:fc:19:a7:e5:3f:3d:03:84:fe:c4:01:94:6e:
d0:d2:ac:2f:88:3c:24:e3:07:ff:60:b8:c3:9b:cb:04:22:d1:
93:2f:5c:21:d4:de:00:93:80:cf:84:bf:df:07:96:07:b3:45:
67:ec:ef:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:43:14 2025 by rpki-client