Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: YN/488fzM40HG9CoAXniak44Oi/N48x58aLAM8rJvdc=
Subject key identifier: 73:3A:3E:11:A6:F1:3A:A7:8C:16:E8:0C:E1:75:5A:B8:D2:B7:B2:66
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 0197B6A0FA56AE6BC7B8370C7A74DA04D35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0C6E
Signing time: Sat 28 Jun 2025 13:01:32 +0000
Manifest this update: Sat 28 Jun 2025 13:01:32 +0000
Manifest next update: Sun 29 Jun 2025 13:01:32 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: wXndDLZwTlHJiiDDTaSYlTg428P0m5oNj+AbuhsNg0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fa:56:ae:6b:c7:b8:37:0c:7a:74:da:04:d3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Jun 28 13:01:32 2025 GMT
Not After : Jun 29 13:01:32 2025 GMT
Subject: CN=733a3e11a6f13aa78c16e80ce1755ab8d2b7b266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:52:c4:57:fa:28:a4:19:79:3f:bc:6f:76:
e9:4d:37:96:15:3b:aa:c7:65:84:ef:2f:8f:6b:48:
ad:13:a3:0e:7b:b3:6b:0b:b2:7c:73:78:21:69:89:
15:2d:41:8b:b8:30:55:14:94:c8:4e:a1:27:d0:e5:
65:17:86:cf:18:21:82:31:ab:37:36:b9:68:d9:d0:
af:d5:62:4f:d1:2f:5e:2e:c3:74:75:19:91:d4:53:
68:37:47:a3:03:43:5a:b7:62:05:01:0d:b0:a2:c3:
6f:d6:4d:48:eb:39:bc:43:38:f3:91:99:8d:76:bb:
f0:8c:76:8e:cb:0c:33:d1:d6:c4:9e:aa:d1:31:2d:
ab:25:32:bd:18:cb:1f:0d:2b:91:d9:c5:01:e2:94:
3f:ff:c6:81:a3:d0:a7:fc:96:b2:9c:ce:51:36:66:
eb:05:d1:e7:4e:ac:c5:fd:0d:d8:4d:16:4e:00:d2:
ec:5d:e1:c9:25:49:5c:a0:05:62:74:06:5e:9c:f9:
e6:a7:62:c1:bb:eb:fb:62:4d:57:6f:7e:ed:e3:d7:
ef:37:84:a9:cb:05:4d:55:6d:b7:14:fa:aa:40:b5:
32:0b:67:f1:5e:7a:99:88:51:76:30:72:63:b8:27:
90:6b:a6:af:0b:ff:43:9b:53:3f:bb:0d:6b:ae:6e:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3A:3E:11:A6:F1:3A:A7:8C:16:E8:0C:E1:75:5A:B8:D2:B7:B2:66
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:98:fd:d9:a9:6d:49:b5:08:39:5e:52:d2:d6:f5:e6:c6:be:
57:c9:aa:61:01:2f:2a:1e:5a:a9:96:db:bc:c5:04:01:75:98:
88:78:14:d7:88:80:6b:00:72:fa:c1:2c:2c:11:7c:66:e1:43:
64:14:3a:1b:22:6a:30:8a:e0:8c:47:96:f6:40:b2:c3:ba:5f:
9f:17:d4:c1:a2:0b:ef:d0:69:22:b0:fe:72:ff:80:83:d6:b8:
3e:f1:1a:6a:85:ed:66:8b:f5:49:e5:7e:ec:1e:47:b3:7a:36:
74:e4:0c:08:b5:3f:b1:52:d7:7b:a3:c1:b3:d6:8c:1d:bc:7c:
44:41:da:d3:b4:cf:db:2d:16:01:cc:30:de:23:ca:82:57:56:
26:db:a2:8e:42:2c:ec:91:87:c3:5c:46:96:4d:6c:3b:10:e2:
9a:5a:c9:e3:69:97:e1:b7:ad:d4:46:83:bc:4d:e1:5c:e3:cd:
16:28:14:7d:bb:cc:22:17:23:9c:b2:35:4c:33:3a:c8:e2:43:
bd:e6:d3:27:39:69:26:4e:66:d9:c9:27:bc:67:62:c1:8a:5d:
86:b9:9e:45:4e:4e:7b:99:77:27:2d:56:cd:a2:56:96:1f:9e:
9c:4c:9e:11:19:a6:c1:1f:e8:33:2b:f8:c5:28:04:f0:1d:da:
ef:c1:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:24 2025 by rpki-client