
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier: tJcxlX9Zqiw2pmw6c8E4mhU6Cu9RJoW+9FhEDUqjdT8=
Subject key identifier: 35:41:B7:58:3D:37:A8:77:90:79:8D:6E:1A:12:BF:76:C0:51:57:C9
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 0197B70F2D13DA20B6BBF3395D2121C0DE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: aaVYEAeHH184w6rrMPT0+WlMGf86d1Y7GFJYwCvO2t0=)
2: Mda1l0AwsWFxrFKAO5UAIaaO2ew.roa (hash: XNbIfF2ySZOzwZgfT+giemW2vec9LK6qJHTp6caSWC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2d:13:da:20:b6:bb:f3:39:5d:21:21:c0:de:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=3541b7583d37a87790798d6e1a12bf76c05157c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:e2:dc:d4:61:d4:79:f1:dd:bd:17:54:81:
d6:7c:ae:70:8e:74:ff:a3:3d:f6:57:1e:35:f3:2e:
5d:0d:df:cf:51:1b:87:b8:36:1c:5e:79:b5:1d:cb:
49:62:81:b6:6c:6d:38:13:c7:4c:ab:d1:58:14:61:
cc:cd:02:91:8a:bc:fa:73:b9:67:c1:10:e0:b2:54:
91:fa:c5:ff:67:43:c1:6f:74:46:df:16:d0:da:41:
36:01:30:c6:a4:f0:27:b8:c7:d2:ee:c8:8f:17:a4:
2e:9a:bf:09:be:7f:3d:33:98:71:cf:14:2b:f8:64:
0d:49:9a:eb:69:17:6f:3c:42:de:69:46:44:3c:eb:
bf:70:71:64:80:e8:d9:5b:43:dd:8c:87:a8:b5:4a:
75:ec:95:37:1a:26:13:87:9c:d9:66:7d:ff:8f:cc:
67:d7:90:7d:1e:11:1e:f8:23:47:f8:cc:3e:b0:35:
58:df:66:63:1d:49:9a:f1:87:f0:6d:de:78:0c:9a:
26:af:86:b5:8b:3f:3a:83:1f:ee:97:73:96:38:08:
86:31:b6:f5:10:58:c0:7c:35:21:8f:23:7f:d6:ff:
76:bf:21:fe:27:e5:8b:9e:79:30:e6:0a:60:e4:76:
6e:a4:02:64:72:8b:86:36:3f:dc:43:c4:b5:90:6f:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:B7:58:3D:37:A8:77:90:79:8D:6E:1A:12:BF:76:C0:51:57:C9
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0f:9b:4f:44:a5:b2:1b:d3:36:e7:3d:31:88:0e:bd:a9:65:
3f:14:b2:6d:b1:1b:bd:86:90:2f:a6:35:c2:77:46:d9:6c:4a:
82:e5:c7:e8:ca:83:33:42:64:24:b6:8c:52:1d:e9:11:a1:2c:
3a:62:b3:b0:25:e3:45:2e:2c:1b:4a:a8:c1:83:95:8c:15:fb:
a4:f4:22:81:cb:36:d5:57:e1:67:7b:2b:8e:79:c3:d2:ce:41:
c9:bb:dc:a6:63:df:44:e7:f3:70:9a:90:b1:05:56:f8:47:88:
81:59:79:8b:2f:b8:e8:df:25:e8:c8:f1:40:6c:6e:d0:f2:c1:
51:cb:cc:df:60:ff:6a:75:fb:d1:89:b9:13:77:8c:e7:cf:06:
f0:3a:4d:ff:38:60:fd:30:09:49:59:96:c6:b7:45:ca:95:a8:
db:fb:df:74:14:7b:5f:66:bc:2e:a5:ba:19:05:f4:e9:2e:e6:
e6:88:c0:88:ed:e1:ba:bf:8b:6b:95:2d:ae:13:d2:7d:1a:5b:
66:6e:b4:4b:3d:c4:59:5e:ff:be:86:f8:cb:94:a4:c8:ca:b7:
02:6b:02:30:d0:80:fe:49:92:94:15:e7:a0:74:1f:73:fa:45:
95:1c:cc:20:17:85:9a:ee:c0:9f:c7:2e:0b:b6:bb:53:12:53:
f6:9e:27:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:46 2025 by rpki-client