Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: I7QmhCG+RJKlHKMhASuXDdIFQ7yWSxAUv15SGbbnI3w=
Subject key identifier: C4:E0:93:48:59:27:13:33:F8:3B:41:0A:EB:07:77:A3:B5:D6:D9:D7
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 0197B88F962E8567C49A256B5865B6E01908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 0C5A
Signing time: Sat 28 Jun 2025 22:01:47 +0000
Manifest this update: Sat 28 Jun 2025 22:01:47 +0000
Manifest next update: Sun 29 Jun 2025 22:01:47 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: 8yR1mdLRB6KsM00zSvb7jikUYKgZe3td14+JH//ASD4=)
2: qzSVGtS_jWsXuo115ysr12jv81o.roa (hash: 6sU/7Xohp1bS1zbTFVnz4YbGVdQCm8u0BmBoUOstkdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:96:2e:85:67:c4:9a:25:6b:58:65:b6:e0:19:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Jun 28 22:01:47 2025 GMT
Not After : Jun 29 22:01:47 2025 GMT
Subject: CN=c4e0934859271333f83b410aeb0777a3b5d6d9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:70:21:7d:93:d0:5a:29:5b:09:96:5f:54:
c5:f5:97:98:bd:78:e2:bf:04:01:38:e1:60:94:4d:
a5:37:3e:93:f9:e3:6f:84:d7:01:98:ea:73:6a:61:
5e:a6:a6:27:77:b2:ae:2d:58:bc:04:32:93:c5:31:
bd:7f:56:42:7b:cc:54:9d:c3:cc:0c:7f:5b:cc:e8:
c6:24:06:4b:0d:87:7b:07:99:ff:7b:dd:35:91:d2:
85:d9:17:48:dc:6b:19:60:61:e0:3f:eb:a8:5d:c7:
f2:0a:41:6f:1c:c3:66:5f:83:ea:4e:8f:22:53:28:
cb:55:f5:a5:55:ac:15:76:7a:5d:a3:c7:68:e2:a1:
ab:bd:41:e5:ca:23:5c:f5:f0:af:27:d4:4c:7f:73:
b8:fd:8e:b7:6b:4a:7a:5f:ab:d1:a2:df:e9:29:b5:
4c:e7:5e:6f:8f:1a:29:9a:98:ae:b2:46:08:df:67:
27:8e:85:58:bd:2d:b0:09:fc:8d:b1:e0:a3:41:93:
70:46:e3:47:d2:5b:94:70:12:d5:4a:a5:28:61:0c:
91:1b:d9:bd:1a:11:bc:bc:70:04:71:52:9b:47:5d:
da:11:22:81:fd:d2:04:f1:34:d2:2a:09:ec:92:83:
af:41:fe:7c:2c:f1:2c:da:30:d7:ef:bc:36:f9:95:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E0:93:48:59:27:13:33:F8:3B:41:0A:EB:07:77:A3:B5:D6:D9:D7
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:de:de:00:24:fa:dc:67:4e:e3:e3:ca:f5:7b:9a:54:9b:6c:
a8:14:62:9f:e9:a5:04:34:c4:93:01:28:34:76:a5:64:39:86:
af:4b:c4:a2:c1:03:be:ba:d7:0f:28:4a:4f:89:f3:94:bb:cf:
2d:6b:38:50:70:f6:d7:76:56:41:c0:88:e5:5e:63:38:30:08:
ff:0a:9b:a6:5f:14:01:35:ec:52:88:44:dd:3b:4c:f1:de:51:
43:c5:43:0d:dd:fe:83:45:66:d1:a3:52:c7:43:78:b9:d0:a3:
f2:ca:1f:de:bb:98:99:53:13:8d:03:02:49:aa:55:fd:c0:cd:
89:6d:2a:7a:8b:3e:db:0b:c7:42:47:49:87:69:92:0a:4c:b5:
12:bb:74:34:b5:c0:62:00:f0:34:50:49:d2:b0:9f:7f:c6:a7:
1e:ef:55:e7:36:3a:a0:75:e8:36:5d:1f:00:b0:b4:a5:fe:c3:
cf:8e:9b:37:54:94:ed:f4:60:50:7b:be:6a:71:d5:26:2e:40:
59:ae:80:33:76:ea:08:04:d6:40:97:59:7d:ee:48:0c:99:34:
5c:a1:6c:8f:03:06:bf:c1:6e:2b:d8:0a:d1:fc:54:bd:5e:37:
34:a5:d5:44:a9:f1:8c:cc:67:39:e0:fe:3f:7a:8f:c6:55:6f:
4c:ae:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:23 2025 by rpki-client