Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: bY8dE61KQUoEwk8T7BwDkkjkGsP5mQCChaq8doyp3rk=
Subject key identifier: 3C:36:EE:BC:06:32:AF:0A:A6:9E:91:E1:B6:13:52:44:AD:88:F9:11
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 0197B7B37374950075F1DB11A53E740BC577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0C56
Signing time: Sat 28 Jun 2025 18:01:20 +0000
Manifest this update: Sat 28 Jun 2025 18:01:20 +0000
Manifest next update: Sun 29 Jun 2025 18:01:20 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: x/42bGqlo5rvMyUS/+m7sefITankwEt01Tqikk2JLb0=)
2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:73:74:95:00:75:f1:db:11:a5:3e:74:0b:c5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Jun 28 18:01:20 2025 GMT
Not After : Jun 29 18:01:20 2025 GMT
Subject: CN=3c36eebc0632af0aa69e91e1b6135244ad88f911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:f0:ba:74:49:80:d1:c3:a4:dc:8b:dd:ed:
4a:86:f1:ee:a7:83:55:b4:43:69:92:dc:7a:0a:1c:
27:b2:ce:df:53:5e:67:67:56:9b:eb:9e:70:ea:c3:
a1:86:1a:48:6f:aa:a7:35:72:ea:49:50:71:cc:f3:
01:4c:d5:cf:23:72:73:88:22:d1:d0:01:47:34:2c:
ff:c0:fd:9b:97:e4:e3:23:5f:e9:53:8d:91:c8:1d:
1d:89:ca:55:df:cd:f4:9f:50:5d:f6:31:0d:bf:2a:
6d:a0:43:c6:d8:f4:62:61:ed:b6:c4:cc:0e:d9:98:
c7:09:86:30:aa:46:20:7c:f7:26:78:31:0e:48:1d:
60:75:15:c8:7b:58:7a:0d:64:4d:c8:26:e5:a0:fc:
6f:a2:07:b1:b9:3e:67:1e:55:38:67:16:d1:41:c2:
d4:19:a7:86:9e:4e:0d:52:2a:63:32:d0:f8:f5:a4:
9b:c8:bd:4b:87:28:73:ae:95:cf:50:80:55:78:39:
21:ae:e8:e4:c3:09:b6:7c:53:eb:81:34:ac:a9:33:
22:6c:67:98:45:9d:00:3e:54:c0:53:2d:47:c9:90:
65:bf:58:41:7a:49:6e:af:37:39:7a:ca:7e:52:86:
f4:f0:83:fe:6f:be:e1:16:05:87:e5:de:22:ef:ac:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:36:EE:BC:06:32:AF:0A:A6:9E:91:E1:B6:13:52:44:AD:88:F9:11
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e0:56:9a:19:13:8b:a5:2d:34:a1:1e:e6:f9:26:af:01:eb:
d5:a3:82:c8:bf:cd:ad:79:70:3f:ac:01:0a:26:2c:31:0f:58:
41:2a:72:d0:b8:3c:34:38:7d:c7:18:e3:60:f3:65:15:7b:24:
df:78:b1:b7:8f:2a:9c:27:05:68:99:70:a1:e8:9b:d2:39:80:
8a:c0:b5:fa:21:ed:60:ec:72:6f:8d:92:ab:36:7e:a9:5d:51:
e2:ac:d1:63:39:31:00:82:a0:1d:d6:d0:c9:ec:2a:56:cd:ce:
0a:24:be:aa:ee:1e:a7:3d:c9:c4:6b:28:bd:62:38:f0:06:37:
9e:84:b3:e0:53:1f:b9:27:46:33:3c:43:08:67:4b:7e:7b:12:
b1:34:c4:f8:58:52:b5:6c:8f:0e:6f:40:68:34:cf:d4:e7:78:
c9:22:5a:71:6c:1f:19:58:be:d3:cd:21:02:03:e4:32:84:2d:
12:4e:a9:66:b5:14:be:ab:f6:00:3c:c3:79:f1:e8:61:61:87:
18:c8:4e:7d:7a:83:05:18:a8:39:c3:83:44:5b:44:75:08:6f:
e7:80:e2:ab:23:4a:5e:18:e4:54:0b:44:8d:c9:b2:af:0b:c9:
5c:71:a8:40:e9:96:07:50:25:31:53:b8:a9:fc:26:0d:45:d7:
60:df:0c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:17 2025 by rpki-client