Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: R1r+GIf39745ZgSTEaeYz0Kx9e9WMNEN0bDYOuKB4D0=
Subject key identifier: 30:2F:B3:AD:D1:01:96:74:90:A5:68:AA:DD:58:48:F1:71:A0:5A:10
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 0197B6A043A0A3F0A31E32688BED6C56EFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:00:45 +0000
Manifest this update: Sat 28 Jun 2025 13:00:45 +0000
Manifest next update: Sun 29 Jun 2025 13:00:45 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: wQDoDwv6/mAk/FzGuvoI1IlTTadXC1E1bqwiTDo7l38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:43:a0:a3:f0:a3:1e:32:68:8b:ed:6c:56:ef:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Jun 28 13:00:45 2025 GMT
Not After : Jun 29 13:00:45 2025 GMT
Subject: CN=302fb3add101967490a568aadd5848f171a05a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:40:1b:a9:04:20:ee:cd:25:d5:b7:0c:df:
6f:9c:1b:9c:3f:ed:65:39:ea:72:bc:5f:7e:27:2b:
63:67:a0:18:2e:b6:61:58:2f:65:1b:6d:47:3e:b0:
e1:06:5b:b0:d0:c2:a0:06:48:51:14:7c:3d:da:a8:
1f:68:20:29:8b:1f:dd:1b:e3:ed:30:1e:13:e4:ac:
a0:5e:3a:42:73:3f:52:a0:89:63:97:bc:1e:2e:19:
30:cc:46:4f:c9:ea:ff:1a:ae:65:25:da:48:d0:d5:
5d:91:73:7b:fa:58:a3:6c:78:a2:7b:ed:49:0d:61:
c0:9e:2a:f6:5e:b2:cc:fd:34:5b:bf:14:e4:36:d7:
a8:d2:a5:61:9f:ee:62:96:28:ed:8d:92:4a:a9:d1:
6e:4e:17:0e:e7:58:46:f2:9a:3c:79:4f:8a:26:33:
3a:e1:f2:46:5a:55:51:58:13:3c:28:67:63:a9:1d:
4e:0d:76:db:fc:b8:aa:c3:d7:ea:2f:a0:47:79:80:
c9:f4:c8:87:ab:25:0a:d2:0f:8c:78:8b:c9:62:e6:
33:3e:f4:81:84:13:82:fe:79:b6:66:e3:13:78:70:
ab:f3:d9:3e:2e:88:04:6d:e1:76:b4:d9:b3:e4:5b:
07:bb:3f:1c:3c:d3:b9:82:39:17:7c:04:3d:21:10:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:B3:AD:D1:01:96:74:90:A5:68:AA:DD:58:48:F1:71:A0:5A:10
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:16:84:cd:b4:80:8e:68:0f:58:1d:50:db:09:7e:25:3a:cb:
d6:b3:e0:17:17:80:61:41:8b:6e:76:e0:99:3d:ae:bc:59:f7:
fa:3c:f0:e6:26:33:1e:f4:92:e0:4c:47:72:b8:c8:60:a0:37:
84:b1:0f:1d:27:7d:ff:7b:98:52:a3:76:16:5b:85:9e:19:29:
1e:df:e7:54:04:92:2c:9c:7d:f7:9d:7d:94:2a:25:c0:a7:c1:
96:89:b2:72:61:77:73:06:20:09:54:4d:0e:e7:b0:80:24:d9:
2e:44:ab:ae:8d:96:fe:f0:d1:05:72:32:b5:8d:ca:8f:a4:a0:
d1:7f:46:5a:d2:f2:41:f9:c9:20:59:b0:9d:74:4c:fd:fc:99:
72:8a:6c:78:fd:bf:f8:74:be:ce:a8:42:37:da:7e:27:df:d5:
46:82:2e:be:38:58:a9:73:03:63:f0:55:2b:61:03:ae:ce:41:
ea:10:36:af:0a:2c:80:c8:64:34:f8:da:93:3d:37:d6:eb:e8:
ce:14:8d:a2:25:46:74:4e:6a:54:39:a3:34:4d:26:4d:17:a0:
63:a8:b7:bc:47:7b:28:38:a2:17:47:7c:c1:f3:b4:91:ce:80:
25:4f:0e:82:4c:16:c1:26:ac:84:66:65:22:c2:c0:3c:81:69:
1b:4d:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:43 2025 by rpki-client