Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: McZtsz+lbUYvDQFQbhl3ZVWG8qIj9w4Ej3ZJgN3Kc8k=
Subject key identifier: 0D:8E:03:B9:B3:6B:26:55:55:89:BB:59:E1:46:D1:4E:EC:EE:67:42
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 0197B7EA8E21E8484B64B477DA41AF11DDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 02DC
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: FK+0p0W4fUK+sYmiJWIhBv164CZJsgnf/kN48LIJKKA=)
2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8e:21:e8:48:4b:64:b4:77:da:41:af:11:dd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=0d8e03b9b36b26555589bb59e146d14eecee6742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:b2:64:af:dd:8e:5e:61:f0:71:a8:75:81:
1a:9f:e1:56:56:23:72:c9:d3:f3:d2:bf:54:6c:06:
85:df:7d:81:ec:ce:12:71:6d:86:1e:15:2a:40:7b:
53:9c:72:52:09:9f:96:3e:53:e0:5c:43:02:9e:58:
92:b6:ff:60:47:ae:c0:9d:ab:53:86:12:05:84:52:
1d:74:6e:47:36:ed:ff:d2:3d:63:d1:79:40:49:af:
92:d1:87:eb:4f:e9:0c:2e:a3:65:78:4f:ca:bb:ff:
e9:70:8b:c2:17:50:ae:57:1e:11:40:e4:04:48:ce:
71:87:2c:be:16:8b:3f:c3:ee:e1:2c:49:44:95:69:
26:e7:cc:04:e8:a3:88:df:76:f2:d0:b6:53:bf:b4:
9e:86:f5:b9:38:f9:88:e3:cc:e9:75:fa:c4:40:54:
85:92:70:ea:e1:70:94:9f:bc:5f:e2:84:2c:f4:a9:
a6:91:56:dd:ff:b9:35:b6:63:cd:78:9c:ed:6d:2c:
2f:78:d6:75:5b:df:56:d2:0d:57:d5:3c:59:13:a0:
02:a0:41:da:c9:c6:a1:d1:b4:05:a0:cd:50:42:f4:
25:a2:7f:78:b4:cf:52:64:29:4e:34:d4:9d:2a:a1:
0b:a1:c0:40:53:50:76:c3:8f:31:02:70:a6:67:28:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:03:B9:B3:6B:26:55:55:89:BB:59:E1:46:D1:4E:EC:EE:67:42
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9c:c5:40:99:a6:6a:dc:62:35:04:02:75:9f:b0:65:74:6b:
60:19:f4:1b:61:fb:d8:00:2d:15:61:46:c6:5c:35:19:85:19:
b5:1c:8e:38:86:e6:81:20:a0:c0:a9:0f:2a:79:2a:7e:33:b8:
ff:c1:95:59:c1:f5:7c:c3:11:7e:ef:b8:7a:86:0d:b9:77:e7:
a9:06:43:51:09:47:fe:b6:7d:08:74:26:00:60:be:cd:5a:c3:
29:af:61:e3:90:e4:8e:ae:74:b1:af:83:73:dd:63:c2:95:0f:
d2:8c:54:28:1a:c0:f3:8b:c1:3d:2b:c5:4b:bc:5b:aa:b3:c2:
4e:9f:c8:59:db:69:72:9e:7d:c3:22:2f:0d:b0:00:65:24:e1:
e6:f2:75:78:44:08:62:ae:b3:a6:25:40:a4:b6:b3:73:b3:9e:
fe:ff:2b:9d:31:a1:a9:7a:a9:b0:e6:9b:fa:16:35:77:f5:96:
b9:15:f4:e1:1c:a6:0f:af:36:35:6d:ce:09:d2:67:f1:1d:f5:
28:65:bf:57:df:dd:d0:db:79:cb:88:e4:79:16:98:ff:62:6c:
bf:41:22:30:30:6f:df:d1:97:58:fb:5b:1f:d4:3d:f7:10:ff:
08:c6:98:f6:97:ef:28:a0:7e:dc:eb:22:97:01:e1:fe:a6:ef:
01:34:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:16 2025 by rpki-client