Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: RsVextjnbzR10SmWrVrASFXe6OYvTI2N3nhehNatk7U=
Subject key identifier: BF:48:F9:64:35:34:0F:91:70:1D:17:D5:B3:91:C8:78:EC:3F:95:A3
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 0197B6A093E9DB612CFD45A95BE37A5136A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: zOJ27wBL9FVP0Lu8tBFsydZdo35+tKMR7AO+fsKp+hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:93:e9:db:61:2c:fd:45:a9:5b:e3:7a:51:36:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=bf48f96435340f91701d17d5b391c878ec3f95a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:f7:5b:95:b1:58:72:39:f9:3a:3b:fc:12:
fe:32:a0:d7:92:a1:14:72:ea:63:c0:92:ae:a7:5c:
cf:51:34:c9:b2:7c:bd:51:40:79:03:16:49:ef:fc:
c8:a6:bb:8b:a8:64:58:d5:c1:e9:21:01:d3:8e:a6:
9d:82:9c:75:74:d4:b7:3f:04:e7:e4:48:89:cf:10:
68:38:2c:64:a1:28:82:96:50:15:a8:2a:ec:7c:27:
6f:ea:2d:d5:71:66:f2:e2:2d:68:f4:a1:48:b3:b9:
56:6b:13:38:48:3f:6b:7d:18:ac:d6:a7:9d:60:1c:
2c:99:ad:f3:09:bf:db:80:11:1f:9a:85:b8:0b:a4:
2b:a8:74:ef:9b:72:42:e0:c0:fa:e4:bb:c0:69:40:
4e:13:43:4f:27:ca:c2:74:7d:53:4a:97:e6:8e:f3:
93:fc:3c:73:5a:e3:b2:4d:0e:84:26:ff:e8:19:0b:
27:60:60:0d:6e:a9:3f:dc:ee:0a:00:9f:8b:1c:0c:
07:45:ea:ed:09:39:f7:15:f2:ea:1b:20:25:45:5a:
ff:cf:43:14:8e:34:a3:f6:9d:31:6d:ee:25:26:6d:
df:20:6b:73:f7:a7:00:bd:b7:3d:c0:f0:9e:b5:44:
67:99:39:05:99:c5:72:a5:e8:b8:99:34:48:20:1c:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:F9:64:35:34:0F:91:70:1D:17:D5:B3:91:C8:78:EC:3F:95:A3
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:73:23:3e:6c:96:c3:d6:ea:4a:84:c2:72:3d:c1:fb:4f:c3:
43:83:64:c1:82:d9:9f:92:ce:19:51:f1:a1:0f:51:a1:f1:59:
5f:ec:7a:bc:fb:70:4a:4e:ec:eb:33:39:ed:fb:f2:d6:2c:be:
df:22:94:54:a2:98:70:48:68:32:be:1d:9b:1c:33:92:7d:50:
92:1c:d2:fd:55:5a:09:07:87:62:c5:6a:b5:65:4a:9d:8c:28:
05:b1:2f:c4:08:2e:2a:28:f6:f6:e8:98:ea:e5:9c:eb:f4:27:
1c:8d:4f:78:c7:33:18:98:e8:09:af:33:bc:5b:ab:dd:d4:5b:
05:eb:39:53:7a:87:95:d6:8a:9f:dd:7b:59:cd:73:3b:7f:1b:
be:da:91:bf:09:37:29:2e:18:5f:85:10:ba:f0:89:ac:1c:65:
d0:1e:f7:c9:7b:6c:c1:e7:02:24:90:a3:80:97:4d:6f:45:55:
20:31:17:26:b2:13:6d:dc:60:f7:e5:88:26:40:06:3f:84:40:
51:ea:b2:2d:6a:6c:b6:fd:9c:0d:de:9b:c4:b6:fc:4d:5f:87:
8c:c5:9e:37:31:d0:3a:9d:6e:92:a1:a6:f7:3a:72:e5:87:41:
71:bc:ee:38:58:f0:66:20:7d:a8:cd:d9:4f:1a:18:16:b5:38:
65:45:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:34 2025 by rpki-client