Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
File: aXRbBMvmNgtewTo67LMvuIXUhvs.mft (raw, json)
Hash identifier: sz4F8PhYTXcwk2uu/bzOo0CNw2QiadtVBwEBZltPKw0=
Subject key identifier: 82:A1:A2:EE:EE:7C:9E:69:12:9A:61:98:E1:B8:FA:8A:9A:5B:21:5A
Authority key identifier: 69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
Certificate issuer: /CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Certificate serial: 0197B8FDA37CCAEC2DDC1356596D4CEB4D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
Manifest number: 13E3
Signing time: Sun 29 Jun 2025 00:01:59 +0000
Manifest this update: Sun 29 Jun 2025 00:01:59 +0000
Manifest next update: Mon 30 Jun 2025 00:01:59 +0000
Files and hashes: 1: aXRbBMvmNgtewTo67LMvuIXUhvs.crl (hash: OMRFDn9JwDEd/VhK7JcjZS3u19iozyCxcdl/gOUYbKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:a3:7c:ca:ec:2d:dc:13:56:59:6d:4c:eb:4d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Validity
Not Before: Jun 29 00:01:59 2025 GMT
Not After : Jun 30 00:01:59 2025 GMT
Subject: CN=82a1a2eeee7c9e69129a6198e1b8fa8a9a5b215a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:f8:cf:22:c8:5d:0a:14:ec:cd:3f:4f:88:
4a:02:6b:7a:80:aa:02:2c:d6:e4:90:bf:e4:c6:cf:
f9:ec:ce:d3:95:a0:d0:3e:0d:5c:4c:43:1b:21:2d:
e2:65:06:56:7b:aa:00:40:64:41:bc:bb:01:97:bd:
59:09:1d:a8:55:56:7b:39:ee:b9:36:63:60:15:c9:
9f:61:46:cc:0d:15:6a:8e:fa:94:8c:ab:12:40:a0:
b4:ff:59:4a:03:35:f5:01:0d:fc:e6:f5:01:c0:18:
b4:7f:8f:fe:79:72:e7:9b:7f:26:e3:32:56:bd:bf:
c6:f7:5d:3c:37:23:5d:c0:63:53:07:17:9c:0a:0f:
f3:1e:c8:67:13:b4:c9:eb:d1:e2:cc:f2:6d:30:d0:
e8:1f:ba:84:78:c3:0b:93:91:53:1c:70:b5:96:40:
1a:60:bb:85:26:89:c6:9c:1b:ad:9b:ba:14:78:9b:
bd:c4:a1:7e:09:78:9c:fe:b8:c2:a3:f1:c8:aa:de:
82:9d:75:94:78:38:0d:ba:09:e8:cb:12:aa:09:66:
bf:80:be:c5:e4:4d:9e:1f:5c:78:d1:d8:db:0a:ff:
e9:bd:13:1a:38:d4:a1:91:57:08:c2:f8:8a:0b:e8:
0f:fa:8f:09:f2:52:07:63:6d:85:26:69:60:b1:93:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A1:A2:EE:EE:7C:9E:69:12:9A:61:98:E1:B8:FA:8A:9A:5B:21:5A
X509v3 Authority Key Identifier:
keyid:69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c2:ea:ae:88:7b:d4:07:62:71:b2:cc:cf:35:77:9a:9c:14:
d4:43:56:0e:33:84:68:4b:27:a1:74:5f:6b:dd:cb:ba:5e:e2:
41:c2:25:80:df:0c:7b:65:0c:04:69:9b:41:6a:ab:34:71:50:
58:b4:36:6e:06:fe:ab:cd:47:02:b1:ae:a8:28:7b:7a:ac:ee:
18:52:5d:70:ac:9c:8c:c4:cc:2f:b0:ea:f1:24:b5:50:ff:68:
9f:1b:73:63:4f:73:33:8d:3d:9d:f6:9a:b5:24:fe:11:14:07:
c5:7b:d3:48:bb:f6:46:51:55:2f:7a:de:1a:a9:d9:c1:5c:c6:
41:c5:52:e5:81:2e:ff:70:79:8d:19:2f:c3:8d:77:56:a6:db:
4d:90:fb:67:b6:6e:84:8c:26:c6:c3:a9:ff:dd:78:d8:75:e1:
cf:99:73:1b:bd:49:25:01:6b:83:26:15:53:31:b2:5c:11:b0:
fc:f1:9b:7b:91:a4:ab:66:ef:f1:22:f3:8e:94:38:81:20:a3:
a0:85:8f:05:91:46:54:fb:e8:29:ed:bd:32:29:e3:98:33:62:
d6:27:05:df:43:03:3e:14:e7:f6:6a:99:55:02:2e:a3:12:38:
e2:fc:d5:ce:77:4e:ed:ce:4c:41:ed:29:cf:c3:90:36:0c:c1:
45:c7:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:32:01 2025 by rpki-client