Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: /AxDixdZuxum2qHQQAo54uqzNHjpoMQakDpjAbFswUg=
Subject key identifier: 71:77:4C:14:1D:16:34:25:1F:25:F0:5E:8F:FC:3E:45:F9:85:69:CE
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 0197B88FEC1A20C6799EC619FBC674336BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 0296
Signing time: Sat 28 Jun 2025 22:02:09 +0000
Manifest this update: Sat 28 Jun 2025 22:02:09 +0000
Manifest next update: Sun 29 Jun 2025 22:02:09 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: b8yvtTUGntDP1/3lpk2hsMO3Yxsnw6c5Ri8VImGywIM=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ec:1a:20:c6:79:9e:c6:19:fb:c6:74:33:6b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Jun 28 22:02:09 2025 GMT
Not After : Jun 29 22:02:09 2025 GMT
Subject: CN=71774c141d1634251f25f05e8ffc3e45f98569ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:19:3e:d4:a4:22:52:a7:77:50:85:57:43:fd:
d6:88:fe:8d:87:6c:56:9c:6a:6a:28:48:09:84:ec:
13:c2:a8:f6:de:8b:10:a3:06:55:45:b8:b8:37:a4:
75:7e:1b:12:5f:13:08:31:92:e5:dc:f1:30:9c:0b:
6a:0b:09:ee:7f:48:ca:7e:7b:8e:5e:3b:95:64:e0:
88:4a:4b:f3:4f:cb:51:87:57:57:d5:68:f1:88:38:
06:ce:1f:5e:f8:3a:02:bf:8d:3d:76:3f:b1:05:71:
60:cf:e5:ec:f9:b8:00:a6:f3:b6:0b:fa:c5:0d:a2:
58:a3:0c:80:c3:25:40:25:81:74:92:77:24:67:84:
e5:48:3e:59:fd:bc:44:45:39:f4:a5:2d:d4:e3:50:
55:38:f6:e1:b3:eb:4e:34:a7:38:bc:0a:d4:42:69:
c1:77:b2:3e:2f:03:78:08:3b:10:97:67:82:67:64:
00:32:db:3b:00:e5:ab:62:44:90:5e:2d:3b:c6:7c:
e3:d2:83:7c:8d:2e:76:18:3d:bd:6b:2e:14:b7:c7:
1a:27:24:ba:61:c4:0c:7d:7c:c3:dc:ec:e6:2e:b5:
b4:c1:3e:ac:ec:9c:45:20:48:d5:bd:0c:19:17:20:
bd:59:9e:ac:42:40:f1:67:e7:33:54:ca:82:47:44:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:4C:14:1D:16:34:25:1F:25:F0:5E:8F:FC:3E:45:F9:85:69:CE
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fe:41:36:93:86:0b:80:ed:b2:6e:79:26:09:73:d0:0a:69:
a5:f9:76:d6:19:d2:5a:47:64:96:60:8e:76:ac:6f:64:50:63:
16:a5:bf:b9:69:fb:68:25:9b:9d:4b:5d:18:79:0b:d9:31:96:
d4:54:bd:97:d5:2b:2c:fa:04:de:9b:5d:57:6d:4f:f1:bb:fe:
f6:a4:59:c2:10:29:09:94:cf:53:3c:a3:2e:6a:59:70:1c:82:
57:a5:37:bb:25:d1:42:8f:39:07:37:e4:cf:e6:5a:3a:f6:ee:
94:67:09:6e:29:c1:56:3c:97:a6:aa:82:75:08:46:89:21:7c:
4a:61:fa:d3:8f:a7:3e:07:d6:24:1c:7f:46:d8:2b:fa:cc:df:
24:0a:db:5b:db:a1:85:87:b1:68:b9:0a:81:1d:39:79:ee:3c:
ba:19:fd:74:ea:9b:25:0c:98:6d:82:48:20:b0:3a:8a:05:9f:
26:d2:3c:39:a4:ea:6c:b5:66:37:e8:d1:d4:fa:ee:8b:21:97:
a1:be:35:ea:c1:70:7d:68:8e:f5:27:37:9c:71:03:ba:b9:4d:
2a:d2:6c:5f:20:98:15:c9:27:b5:de:36:33:9f:5b:b5:69:77:
5e:68:85:98:f4:9e:54:c3:96:1f:dd:ed:0e:e3:0a:cd:9c:cf:
02:6a:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:20 2025 by rpki-client