Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: Bq0ic0Bla4W70sRwWu1YP1miq3QHiZlGlaVgvXsoxgM=
Subject key identifier: 53:21:43:F2:CF:DB:F4:D3:DA:5F:8B:18:46:03:4C:58:02:AE:4C:2F
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 0197B5C50CD7C936D55187119A84CB52658C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 0500
Signing time: Sat 28 Jun 2025 09:01:19 +0000
Manifest this update: Sat 28 Jun 2025 09:01:19 +0000
Manifest next update: Sun 29 Jun 2025 09:01:19 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: kSkvNIg73RCNUncaKg49dKZc88fVBkdFZOrjqubOG8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:0c:d7:c9:36:d5:51:87:11:9a:84:cb:52:65:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Jun 28 09:01:19 2025 GMT
Not After : Jun 29 09:01:19 2025 GMT
Subject: CN=532143f2cfdbf4d3da5f8b1846034c5802ae4c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:4c:b0:c1:e8:bb:3b:d2:50:38:51:c0:69:
b5:ba:1b:59:d2:41:4a:e3:3b:f7:ab:a2:2d:37:25:
9b:0c:ce:fe:3c:ea:b2:1e:cc:1b:1e:6c:c8:71:15:
f7:79:d0:9e:9b:68:1a:d3:03:44:db:d5:76:bb:3d:
4e:16:cf:2b:c3:10:d6:f7:a1:8e:75:37:54:2c:3a:
fb:c5:c9:d7:56:40:f4:76:5f:8b:13:ff:9f:9d:44:
05:d7:25:38:f8:98:19:c8:c0:75:24:6b:6a:4c:4d:
a2:1d:cb:d9:c1:89:f5:3c:8a:d5:1b:13:e1:77:e3:
61:57:af:5d:a3:c8:43:66:20:8f:bd:8c:7c:8c:14:
0d:6d:00:47:43:da:15:eb:be:a7:74:75:d9:15:ea:
d0:47:bd:52:e6:a2:f3:3d:e3:e2:94:69:c4:6a:24:
08:c1:21:b4:47:b6:7a:28:ea:fc:2f:cc:4a:b4:70:
74:b1:7c:cb:4e:59:03:df:bc:fe:af:23:c5:1e:e1:
bc:b0:8e:64:b8:e2:fd:75:20:43:fd:1f:ca:7f:11:
14:46:8c:bc:bb:8c:d3:c5:90:e2:d4:9d:41:df:81:
34:ca:67:d2:ae:16:8a:cd:01:46:59:4d:dd:77:b5:
c7:59:44:fd:a8:8a:34:6a:55:03:c7:80:b1:00:51:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:21:43:F2:CF:DB:F4:D3:DA:5F:8B:18:46:03:4C:58:02:AE:4C:2F
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9d:d2:cc:27:f5:1b:30:cd:ec:0b:88:8a:9e:a0:35:49:e4:
41:c1:5d:01:77:a5:4b:9c:fe:de:c7:39:07:2f:59:3b:05:6f:
be:4f:c3:91:cb:fd:51:6a:a8:d3:7c:7b:e3:6c:4b:89:5d:7a:
a6:e3:aa:17:11:a1:ee:ab:54:a2:83:1d:7f:a0:0f:fb:67:eb:
78:52:4c:1d:ce:1f:b8:3b:d9:e5:2f:68:f7:a3:ad:37:8d:43:
15:59:f1:d8:9a:db:3d:06:51:0c:b3:11:18:12:3c:3a:fc:39:
5d:8d:ed:15:65:cf:4e:ae:c6:a9:5b:b2:5a:be:51:a5:01:cb:
4e:92:2b:d2:15:dc:8e:42:fc:36:86:0c:fc:e0:2d:bf:ad:07:
0a:fd:3a:53:72:99:c3:16:15:08:d3:b3:48:01:4f:1d:55:9e:
94:35:6c:d0:b1:d8:46:36:42:c1:db:ff:c8:2a:80:e7:7b:56:
93:37:d5:1e:3f:43:f5:1d:89:cc:1b:fc:2d:6a:4f:c1:8c:ff:
6e:88:53:bc:35:68:60:fd:5e:4c:d9:19:f8:3b:32:eb:8e:57:
12:3e:dd:d0:f2:b6:28:32:94:f1:7e:c2:f5:0c:31:60:05:fb:
b5:e5:f3:67:c4:07:54:ed:a2:b6:ea:71:79:50:ec:78:49:64:
12:39:10:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:13 2025 by rpki-client