Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json)
Hash identifier: u8b6SkBs5FZCBIANXJoa03biDYwjWLIazNq0RUB9Oig=
Subject key identifier: 6C:6D:65:08:5B:D3:FB:A6:84:FA:01:8A:1C:6A:23:59:64:6A:C2:A9
Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084
Certificate serial: 0197B70EE1EC8E02C7BB41FBDA92DFF5CBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
Manifest number: 0437
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: ORpkCupnABtvjVQx6tUfCEN/HlV5kbbY1++gdAQwh6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e1:ec:8e:02:c7:bb:41:fb:da:92:df:f5:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=6c6d65085bd3fba684fa018a1c6a2359646ac2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:c7:05:54:34:be:1d:14:14:5a:c7:7c:83:
95:97:eb:ad:7d:5a:6c:b4:23:59:4b:25:68:59:8a:
67:14:92:0b:c2:37:21:22:f0:83:06:cf:0e:99:14:
d1:ce:67:bf:d6:3a:58:64:b6:18:3e:88:b0:9f:b2:
c4:1a:f1:ce:cc:25:c2:0f:a4:96:cb:53:00:87:4e:
56:98:92:8b:f6:3c:57:b1:78:7c:84:57:0d:6b:9f:
1d:e1:0b:28:0f:90:52:25:e2:54:fb:12:d9:14:af:
f7:61:35:8c:0e:f8:df:55:18:a5:68:9e:c0:93:22:
2c:e1:cb:12:c3:8c:01:7b:58:87:fc:71:37:c1:3a:
ae:4b:73:f6:77:2d:29:0b:ad:83:32:f3:14:13:1e:
f1:54:90:3e:b5:96:18:c0:1a:1a:2d:f7:b1:c8:50:
54:96:bd:4b:3a:d7:1d:8e:fc:55:33:2d:e8:a5:b2:
cc:af:60:1d:c4:f1:7b:14:9e:d3:97:bb:a9:e2:ba:
e4:20:81:d0:df:70:ef:72:9d:83:e6:07:22:5d:46:
26:aa:e6:63:02:30:c6:44:5f:d5:d8:70:ea:7c:30:
36:10:e9:f3:04:b0:c5:7b:d9:ac:d1:91:4c:2f:53:
a9:8b:4d:f6:69:e7:7f:e8:3b:aa:cf:1a:b6:50:79:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:65:08:5B:D3:FB:A6:84:FA:01:8A:1C:6A:23:59:64:6A:C2:A9
X509v3 Authority Key Identifier:
keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7e:6e:24:db:38:58:3d:34:b0:c4:08:22:cc:6f:0c:76:19:
d0:53:cf:06:15:3d:e9:e8:ce:53:9a:67:38:a6:5d:24:a0:30:
4f:42:d7:ef:4e:a7:5c:0c:3b:af:16:7a:48:6d:a4:66:37:96:
7b:17:73:20:71:0f:2b:92:81:76:aa:e2:3b:0c:96:d5:11:8e:
96:a6:26:f0:69:18:10:32:fc:eb:3c:bb:91:55:f1:90:b7:45:
5d:f8:48:86:ab:c9:f1:8d:35:8d:c4:28:73:e1:ed:26:ab:2a:
0c:4a:75:4b:fc:64:64:d3:4f:ed:72:93:22:7e:3a:81:c8:7c:
b2:b6:16:55:42:90:8b:67:4d:b9:69:c3:a1:7c:f5:ec:07:08:
10:61:12:1e:ad:c0:60:80:17:24:63:c1:ca:87:96:f3:ff:14:
19:3f:8a:88:bb:e3:94:e0:c9:87:b5:4a:23:d0:b4:68:01:84:
4a:be:96:d6:3e:5b:78:29:29:27:a2:ec:04:ed:0b:a2:43:fc:
e6:0b:85:30:ce:77:0c:52:68:96:20:5f:33:18:08:6c:f3:ce:
da:04:a1:87:71:7d:d1:94:7b:b2:1a:95:02:fd:6b:6b:4f:35:
07:36:5d:1f:c6:3d:9c:c2:5f:1d:e4:5c:c2:b0:a0:4f:23:a0:
89:b4:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:00 2025 by rpki-client