Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File: aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier: wYIUbgG345iFlbS9LAEpPktg/uVYZKywxCA8zmBZPiI=
Subject key identifier: 11:52:6A:88:EC:B2:CF:8F:A9:A1:0C:33:35:C9:C6:AC:05:88:5E:ED
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer: /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial: 0197B77C30E35487F1474AAA432685C320AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number: 0CCF
Signing time: Sat 28 Jun 2025 17:00:58 +0000
Manifest this update: Sat 28 Jun 2025 17:00:58 +0000
Manifest next update: Sun 29 Jun 2025 17:00:58 +0000
Files and hashes: 1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: jCGZelLVoY6APCjM9Q1ZN5fxdCq3PlyzRPZ33Op7Crg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:30:e3:54:87:f1:47:4a:aa:43:26:85:c3:20:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Validity
Not Before: Jun 28 17:00:58 2025 GMT
Not After : Jun 29 17:00:58 2025 GMT
Subject: CN=11526a88ecb2cf8fa9a10c3335c9c6ac05885eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:b6:32:76:81:67:8b:c7:72:d3:76:8d:94:
8b:dc:56:13:e7:3c:7d:e7:3e:6d:23:06:4d:78:f7:
63:fe:4c:e4:cb:ef:32:76:9d:a2:0b:50:e7:71:03:
90:0a:09:dd:d9:69:dd:ce:eb:c5:1c:04:05:d9:56:
b8:1b:50:e7:3c:96:22:26:8a:6f:4b:11:24:ff:79:
83:65:48:3c:60:46:68:54:0d:ef:af:8a:b4:58:2f:
36:a5:ec:85:e8:ce:54:0b:5a:47:6c:db:5d:22:a5:
87:11:eb:0f:e2:30:a0:b8:fe:f8:9c:ce:55:b8:d9:
d7:28:9b:1c:03:36:bd:fd:45:54:1d:93:5f:02:da:
1c:3c:c9:56:5f:fa:ab:ec:83:6c:76:cb:58:ae:47:
62:d2:dc:83:72:f4:82:4d:27:3e:f8:d8:b3:19:be:
55:c4:37:e5:30:23:4f:8a:20:de:65:99:c2:7d:7f:
d5:99:7b:88:48:3e:f8:09:f0:e9:21:81:17:07:ce:
53:3c:67:ac:14:17:1f:5f:8d:ec:b9:66:16:32:a3:
ef:c2:e6:fe:78:e8:4f:1a:dd:89:f0:f5:c2:80:b0:
ea:d4:4b:ba:44:18:51:e4:0c:f0:d9:84:b1:d5:7c:
82:70:ea:c1:09:11:9d:a8:63:36:1d:1a:b5:78:2b:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:6A:88:EC:B2:CF:8F:A9:A1:0C:33:35:C9:C6:AC:05:88:5E:ED
X509v3 Authority Key Identifier:
keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:00:3c:9c:f3:8c:e6:07:b3:18:28:60:36:f1:f8:82:1d:b3:
d8:3e:a6:9a:48:a1:ce:fa:f2:e4:ec:b9:3f:75:c4:9b:3b:b9:
95:4f:cc:3c:2a:70:4e:3f:ab:f8:52:10:39:db:d1:ad:1d:f7:
77:67:50:05:b8:80:c9:3c:06:95:8b:9d:d4:6c:11:e3:63:85:
18:a6:bd:d2:6b:a8:9d:79:e5:23:50:19:6c:e9:32:ef:8e:3c:
d6:f2:21:64:30:71:72:ff:24:d8:90:2b:ce:4a:d0:af:77:50:
97:b9:d4:fe:5b:af:86:26:a7:3b:f5:81:f3:10:ea:f8:bb:f9:
8e:c8:71:82:b1:5c:b3:4d:41:d4:36:f1:4e:66:df:39:04:57:
e4:d8:4a:e7:73:44:9c:89:4e:9e:49:63:2d:a6:49:00:83:b7:
77:c0:2b:f1:1b:d5:da:e1:08:8a:63:db:2a:9f:3d:a1:b5:85:
a6:39:00:cf:a4:c0:28:d9:cb:e9:e6:fa:e7:e6:4c:9f:df:74:
db:bb:a9:25:96:ca:53:b9:01:7d:03:8b:48:af:01:63:7c:e7:
ab:19:25:5b:de:2f:ab:11:bc:f1:89:70:c8:10:69:d3:16:23:
4d:27:d5:23:c2:e1:0a:34:69:92:3e:89:18:dc:82:f6:87:e3:
f3:15:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:50 2025 by rpki-client