Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: +nhGouQ96xKVCtKMI6Xu6nGq03EmbRK8bLjwjlRhddM=
Subject key identifier: C7:99:0A:D1:87:A0:C8:E4:0D:41:26:7E:60:8D:F6:1E:D1:7E:2A:4B
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 0197B6A2365942EFD4F8E42C6FC0678A163F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: DC
Signing time: Sat 28 Jun 2025 13:02:53 +0000
Manifest this update: Sat 28 Jun 2025 13:02:53 +0000
Manifest next update: Sun 29 Jun 2025 13:02:53 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: ynvgUKZznhO3NHExH5IkLWisw6FHC1JCjiHLC20gfVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:36:59:42:ef:d4:f8:e4:2c:6f:c0:67:8a:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Jun 28 13:02:53 2025 GMT
Not After : Jun 29 13:02:53 2025 GMT
Subject: CN=c7990ad187a0c8e40d41267e608df61ed17e2a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:88:c4:c6:0f:66:13:13:04:33:cd:1f:27:
41:8b:1c:01:a1:9c:f5:77:24:73:53:52:27:b0:d0:
36:b6:15:15:09:be:9a:52:b9:00:5f:ee:33:b8:ad:
9e:c6:41:b9:05:4b:d5:94:e2:e3:b7:41:83:55:fc:
5e:f7:03:97:e8:24:5d:f7:60:93:fa:c7:8f:1a:e8:
cd:c6:76:f7:94:94:d0:84:4d:66:4d:df:e6:01:9d:
81:fd:4d:49:6d:ec:b4:39:df:89:53:7e:22:20:7f:
b6:0d:84:fc:e6:07:45:70:56:a5:88:51:44:bb:ff:
63:7e:da:0d:0c:1f:70:5c:cb:ab:94:58:27:f2:b7:
6f:17:9a:8a:10:db:36:5c:7b:8a:74:17:b5:f1:a9:
25:3b:a9:63:b0:f6:12:f0:30:5b:43:d2:6c:8f:1d:
0e:7c:e7:63:70:bd:96:69:ff:b6:09:9e:4f:64:14:
b3:b9:8f:5a:41:e6:71:88:c3:62:ad:02:f9:16:1a:
04:4e:5e:d4:e8:f1:9c:30:d0:c7:4e:0f:0e:ed:03:
ab:ee:5c:96:f9:30:49:b8:24:38:32:8a:9b:92:1d:
8e:92:32:f3:3d:1a:b8:55:42:2e:8d:b2:c8:42:28:
20:b6:81:a1:d9:38:cd:9b:5e:8f:e4:dd:dd:50:33:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:0A:D1:87:A0:C8:E4:0D:41:26:7E:60:8D:F6:1E:D1:7E:2A:4B
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ef:12:35:59:b6:68:ae:64:fc:03:cf:2a:6b:c3:01:fe:fd:
85:66:6d:2b:30:cf:c6:48:34:59:3d:91:a1:a3:fb:36:ed:c3:
af:91:ba:5c:dc:93:c9:35:12:92:c9:3d:24:34:ae:87:4b:aa:
28:dc:48:24:45:9f:06:1c:67:6a:ee:3a:14:e1:a6:d7:ec:9a:
dd:37:c2:37:23:96:a1:fb:d8:1b:26:d4:15:31:1b:de:6c:2f:
ce:14:86:5e:bd:a1:65:93:67:7e:2e:ab:15:77:9c:e8:a3:99:
35:ab:4f:d2:ab:ab:42:ff:14:99:3a:fd:56:67:de:9e:31:b1:
23:b3:f8:af:76:ae:44:e1:17:7d:b3:d4:a3:0d:d1:32:2f:5b:
81:a8:b3:f5:b1:66:50:33:77:19:af:20:26:9a:03:61:d2:1a:
18:d2:72:e3:b4:0c:eb:b2:68:e4:9f:83:87:46:67:40:32:67:
d9:6b:e7:09:9c:d4:e3:d9:33:a1:65:1c:f1:ad:b0:fd:5a:85:
55:d6:5c:d7:cb:d0:38:57:5e:37:19:eb:02:9f:b5:36:88:58:
37:55:4e:46:25:6b:e2:42:90:62:bd:59:ce:08:4d:73:16:72:
a4:ef:b2:de:b9:47:99:9d:ac:6e:3f:7e:26:85:00:59:44:8e:
b8:63:f4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:02 2025 by rpki-client