Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
File: aEdQ3w66d01LTWROyOM1CPj1OP4.mft (raw, json)
Hash identifier: kzxiNPOggk44hrOjMTibssen7V1AIXC8e7u8KrS216g=
Subject key identifier: E0:CA:95:04:AB:A6:4E:02:AB:BC:69:7D:9C:CC:73:62:D0:D7:C1:BA
Authority key identifier: 68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE
Certificate issuer: /CN=684750df0eba774d4b4d644ec8e33508f8f538fe
Certificate serial: 0197B7456B9AD019C19FD538844D16068F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
Manifest number: 065E
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: aEdQ3w66d01LTWROyOM1CPj1OP4.crl (hash: g0tyokDyIudMqwRIcZ93S5c5x+vrKzp4UMqMerIxh/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6b:9a:d0:19:c1:9f:d5:38:84:4d:16:06:8f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684750df0eba774d4b4d644ec8e33508f8f538fe
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=e0ca9504aba64e02abbc697d9ccc7362d0d7c1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:87:5e:6e:2a:7a:b7:fb:aa:e6:18:41:c1:
55:8d:bd:1b:2f:56:81:00:a3:0e:79:75:b8:e6:33:
36:d1:43:4b:c3:c5:88:0c:10:fe:8f:d6:b0:65:a6:
fb:3a:17:93:7c:56:ad:cd:f6:2b:0d:09:90:b3:19:
49:a6:5d:59:6b:78:d4:41:0a:27:e1:dc:ac:ac:11:
9b:15:8e:f2:49:62:48:02:f7:37:a1:b7:2e:2e:b7:
fa:b3:7b:b4:bd:c3:48:f1:62:0e:fe:cf:ba:65:49:
22:5d:c6:8c:c5:49:f9:c1:5a:01:e2:9c:e0:47:75:
f2:9a:64:29:c9:57:18:24:74:b5:63:e1:c0:38:78:
38:dc:3f:3d:9d:6c:c3:94:ea:0b:0a:82:4d:eb:80:
5a:d2:7b:3c:16:77:16:7d:63:0e:eb:bd:10:8b:d1:
e9:62:e2:de:06:14:72:59:42:b7:0b:2d:01:80:8e:
34:51:ad:3d:e4:5e:8f:92:c1:74:ba:c7:81:3a:a5:
78:55:bf:fd:70:d4:b7:2b:39:eb:d7:69:b1:95:ef:
14:2e:bf:63:e7:4f:5e:81:9b:d1:e6:ba:05:3d:f0:
a2:7f:f9:65:97:bb:69:95:d8:30:be:08:af:59:ed:
9d:16:2a:fb:00:ab:7c:fb:c9:79:fd:f9:1e:a4:71:
4e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:95:04:AB:A6:4E:02:AB:BC:69:7D:9C:CC:73:62:D0:D7:C1:BA
X509v3 Authority Key Identifier:
keyid:68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:17:a5:e0:cc:26:a6:55:79:d3:c1:7a:d6:63:f3:ab:11:28:
ac:a2:76:4f:ee:33:8c:5c:67:13:a3:ed:d4:4f:18:19:ca:12:
cd:61:23:a3:be:64:f9:6f:44:07:fb:7a:97:0d:59:3c:f6:6b:
c7:90:32:ea:51:ed:4a:7f:b7:be:1b:bb:e0:d6:e1:26:24:9b:
37:ee:a0:50:2e:a9:3d:bb:a2:33:f4:3b:c7:4c:49:26:78:c8:
70:9e:14:83:13:85:c4:89:b0:a2:c4:69:bb:bd:cc:e4:df:26:
bb:a8:b0:32:5b:79:43:d7:c9:b5:1c:68:22:37:d7:4e:d3:25:
94:f3:97:eb:ce:a6:79:e1:4e:79:cf:cb:31:0b:60:76:ed:0b:
34:14:67:60:0d:e1:2e:f0:e2:a9:3e:dc:8a:2e:2b:75:15:9c:
01:8f:7e:24:d9:34:74:ea:bc:4f:18:12:54:88:0e:a0:45:5d:
29:1c:d5:59:c1:91:af:4e:9d:c9:ed:ad:79:3c:14:1c:f7:fc:
0a:b2:f7:a4:7f:e9:80:72:ca:f8:f4:e4:a9:28:55:ad:a9:c4:
97:cd:4e:53:2a:4f:61:15:29:af:07:1a:a4:a1:35:87:c1:7f:
32:fc:4b:dc:d2:86:58:c5:c3:a8:2f:6c:84:37:c3:ff:01:e5:
aa:d6:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:35 2025 by rpki-client