
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: yQnQrXhPN4I8mkXMtoD2xISbuEr1ZuuvSQf+ZZQYnjc=
Subject key identifier: 33:A2:E8:2F:95:6F:0D:57:DB:F9:BA:8D:B9:3F:67:C2:36:49:EB:F8
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 0197B6A0A690CC12C7D9BB6DA2668C19D43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 0889
Signing time: Sat 28 Jun 2025 13:01:10 +0000
Manifest this update: Sat 28 Jun 2025 13:01:10 +0000
Manifest next update: Sun 29 Jun 2025 13:01:10 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: E/uWjXnWNI+owk+ZTS7X7EpGU619LkC7DAqaGLid8EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a6:90:cc:12:c7:d9:bb:6d:a2:66:8c:19:d4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Jun 28 13:01:10 2025 GMT
Not After : Jun 29 13:01:10 2025 GMT
Subject: CN=33a2e82f956f0d57dbf9ba8db93f67c23649ebf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:c3:ef:2a:81:c4:21:89:4c:61:a3:53:c6:
84:f2:b4:c4:4c:30:38:c5:02:eb:82:67:5d:a8:c8:
f9:e3:e8:3a:93:41:67:10:28:18:d2:2c:83:6a:c6:
97:82:94:43:7a:68:7a:c0:b8:fe:4b:3d:ca:0a:b1:
31:15:ee:4c:32:a5:25:15:79:f5:79:76:d6:9b:b5:
e0:dc:6f:ac:df:18:26:80:56:6f:6c:a2:61:37:36:
53:55:69:b8:f0:52:d5:dd:11:c6:f5:12:d9:d0:c6:
dd:aa:e6:c2:73:8b:de:3a:b3:a7:16:94:6d:78:99:
8d:17:5f:82:be:ef:f0:52:eb:41:90:c0:57:0c:ca:
fe:db:38:e8:8f:35:a9:03:f9:fe:d5:b0:cd:71:cc:
d1:15:42:40:8e:7e:b7:de:5c:01:4f:dd:88:fc:12:
05:e1:41:31:a3:4a:44:0f:20:39:98:2f:4e:08:fd:
9f:d1:fb:d4:5e:f4:ff:4b:2f:3e:0e:ae:20:17:24:
30:53:17:76:05:6d:56:4e:3e:c0:b6:2b:5e:84:3c:
86:0b:9b:20:20:91:09:f2:cd:e6:93:34:31:78:e1:
ee:a2:4a:b4:3f:25:90:c7:86:22:0c:90:ea:63:11:
43:d9:1c:6c:6d:d9:1d:b5:a1:aa:d6:f5:5c:99:f1:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A2:E8:2F:95:6F:0D:57:DB:F9:BA:8D:B9:3F:67:C2:36:49:EB:F8
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:53:23:6a:d7:ca:e0:45:e0:d6:df:6e:38:b0:01:97:f4:df:
bf:cb:1a:ff:a2:f4:c1:12:e7:d8:96:be:75:42:70:3b:1b:90:
f7:b2:26:7e:70:8b:82:5d:5b:3a:67:d1:dc:f6:40:26:c5:d8:
aa:76:fe:84:32:01:76:cb:75:c2:5d:37:6a:29:31:73:6e:ea:
0d:63:b2:ea:cc:37:6a:c9:e2:f0:af:af:29:1f:5b:31:8b:c1:
c1:36:ef:8f:e6:86:b0:9a:7b:d7:6b:e3:47:fd:27:fe:52:f8:
c2:28:97:ae:e9:7a:0f:37:e5:bc:08:b4:95:56:9d:11:d4:de:
8d:ad:7a:39:46:e2:75:35:21:7f:a4:26:57:db:bd:c4:ad:9f:
d8:0c:4d:7e:7b:0f:81:02:22:e7:af:ef:78:e6:65:20:ea:f1:
54:08:43:5a:ff:3e:23:47:2d:15:31:0e:56:06:71:33:ea:08:
f3:a5:a6:65:75:a5:6b:0a:bf:23:fe:07:60:21:00:9c:7a:ca:
4e:ae:14:da:ad:de:1e:c8:87:0d:93:31:56:db:5f:fc:6a:89:
be:ee:a3:06:5d:6a:36:9d:cc:fd:aa:e9:56:a6:51:a3:2a:7f:
98:09:ac:f1:61:c0:0b:d9:bc:21:ce:87:db:97:cd:7d:ce:0b:
26:1f:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:23 2025 by rpki-client