Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: vXac073YozMC11ijTMT3awmoueRmwXY3Y6IC4AbxcaA=
Subject key identifier: 4A:A9:D4:AB:87:E7:E9:5B:AB:56:9C:8B:EC:C6:59:50:AC:AF:99:26
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 0197BA7EC40AE78FD48F0979A800C0F3D187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: 0238
Signing time: Sun 29 Jun 2025 07:02:39 +0000
Manifest this update: Sun 29 Jun 2025 07:02:39 +0000
Manifest next update: Mon 30 Jun 2025 07:02:39 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: Vxd1GZgEgZJkMTReZStX4X/nqx6MRAqzspOANmBHMk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:c4:0a:e7:8f:d4:8f:09:79:a8:00:c0:f3:d1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Jun 29 07:02:39 2025 GMT
Not After : Jun 30 07:02:39 2025 GMT
Subject: CN=4aa9d4ab87e7e95bab569c8becc65950acaf9926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:21:cc:c4:a0:b3:a5:d0:de:85:ce:f6:d2:
90:9f:a4:86:db:09:8d:03:06:3e:d7:fe:6f:eb:8b:
ea:32:61:d3:12:40:90:6e:9f:48:12:f1:cf:a2:8e:
ba:80:1a:d5:7d:ca:f2:0c:c0:bc:65:25:de:b1:73:
a5:6e:79:c5:27:a1:b7:b6:73:8d:04:da:e4:2b:d5:
4c:ba:93:b4:4b:b7:3c:6a:43:78:25:ff:10:bc:c1:
7c:43:26:78:d3:78:3d:a1:7e:84:bc:3b:5f:27:34:
56:fa:13:e9:ee:1c:08:ef:68:f9:65:30:9c:e8:70:
c4:b4:4d:db:14:5a:ba:d5:76:67:87:52:66:36:61:
44:0a:69:c1:40:00:8d:19:49:a1:b7:cf:5e:1e:03:
1a:92:7e:42:3f:15:de:1e:a7:58:a2:33:6f:93:18:
38:6e:b9:d9:2c:42:13:21:1b:46:3d:88:f2:e3:56:
c8:94:32:e3:a9:97:45:27:85:23:a6:1b:85:03:76:
de:f2:fc:7f:7b:34:e2:51:15:db:18:a7:5d:0f:ef:
0a:89:df:b3:44:76:e8:95:fb:ca:f3:87:fd:4e:3e:
23:ce:a2:19:a3:d8:71:d8:6e:2f:51:6a:82:5a:c8:
9d:e1:b0:e7:99:b6:3b:75:0d:18:9b:fc:38:30:a4:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A9:D4:AB:87:E7:E9:5B:AB:56:9C:8B:EC:C6:59:50:AC:AF:99:26
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:39:7e:f3:90:2a:dd:4d:92:1f:01:26:03:1f:4f:2b:0e:1c:
b0:82:81:7e:f6:53:5b:83:f3:a0:34:a6:56:43:e7:5c:9f:3b:
39:99:d9:96:ef:63:cd:ab:b8:02:6d:91:36:a9:7e:ea:59:d4:
85:37:27:50:29:0f:5d:ed:5e:db:6a:09:82:da:1c:a4:91:dc:
9d:ab:cf:ef:76:b0:8a:02:a6:6d:54:9f:fe:54:06:06:73:f0:
c6:7c:69:f2:97:91:93:f4:ad:88:b4:af:63:46:e5:4e:e5:9e:
94:05:c6:a5:ee:f4:91:e1:51:91:51:b0:4a:0d:c5:fe:8c:d8:
de:9e:90:7d:ad:79:48:4f:b7:c0:70:58:02:73:89:56:02:46:
71:b3:6e:b8:27:c0:7f:c8:22:57:20:f2:08:28:22:4e:c6:82:
d7:30:6e:94:eb:8d:ab:3d:13:41:63:53:a4:02:c5:a0:90:a6:
2e:fc:f8:fd:d7:39:46:d4:11:19:2a:78:45:87:22:b3:18:49:
8a:78:bd:f5:6e:d6:da:d3:e4:a2:c2:20:de:03:3e:d6:eb:d0:
7b:39:a9:87:72:9c:a3:1c:46:6f:a7:10:a7:e8:93:57:4e:de:
ab:c4:76:27:0c:81:89:f5:a8:97:f7:af:64:6c:1d:4c:93:dc:
39:4c:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:36:35 2025 by rpki-client