Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: BHBeh+PDIwMNZipxOskM4ap8VEABf+GqHxWZrtfTBbU=
Subject key identifier: D5:C2:8E:82:76:B9:9F:AA:FD:F6:1B:A9:A5:23:DB:83:93:E2:04:BD
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 0197B70EC9B2D9232A646B375B1CD9446C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 0A2B
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: 3SbnZWqPWBmwsRcKdFzBQzvlgHDWYSFeINVowzh13mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c9:b2:d9:23:2a:64:6b:37:5b:1c:d9:44:6c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=d5c28e8276b99faafdf61ba9a523db8393e204bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:4b:ec:f6:03:46:5c:dd:84:05:07:ad:3b:
79:73:3f:52:8b:ca:59:09:61:46:13:e2:16:f6:d6:
6b:fe:32:39:2e:be:30:da:7f:b2:1c:ad:ef:e7:86:
21:22:c3:85:41:5e:83:f4:b6:b5:be:98:b2:16:7e:
67:e0:e9:8e:a9:11:96:b5:28:51:0d:7f:e4:fc:81:
66:14:52:07:a0:50:25:9b:f7:9a:cb:16:89:82:56:
fa:76:b8:3b:13:a5:16:cf:db:16:c7:9b:69:a0:c6:
7a:43:b2:f3:c2:b2:dc:37:0a:46:49:cd:fc:bf:f7:
c7:f8:d3:d9:32:40:a3:d5:a0:05:56:9e:0b:2b:73:
3c:4c:28:72:b6:ca:a1:44:39:97:d7:3a:44:58:bd:
56:4e:d8:36:67:55:3d:3b:0a:51:f8:9d:8e:9b:6e:
2d:86:fd:4f:ae:55:38:64:05:f8:4c:fb:c1:1c:1f:
7e:e8:3a:fb:1c:6c:e4:cd:c6:6b:f6:97:8a:9b:cd:
3c:35:cd:ca:3b:ee:16:ca:be:58:1c:32:ed:92:84:
72:14:f2:22:4b:d0:77:0f:e1:34:3c:21:19:59:59:
8a:bd:aa:9f:d7:b3:2d:e0:b4:21:28:00:a0:6d:ec:
fa:ad:9f:b3:a9:ac:34:64:c5:17:0f:29:ab:9c:e4:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:8E:82:76:B9:9F:AA:FD:F6:1B:A9:A5:23:DB:83:93:E2:04:BD
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ac:60:65:e7:b9:a5:fc:1c:e3:40:72:e0:8a:20:86:36:86:
03:e8:a7:05:3e:38:39:21:2d:53:de:82:70:e4:7b:67:71:36:
3c:14:15:42:95:18:fe:a4:7e:a1:7c:78:05:f4:28:41:dc:93:
94:f2:ff:be:2b:97:ee:57:d9:7c:04:2f:5e:dd:6f:26:d6:e3:
6b:83:b3:4e:6f:e4:c0:9f:ce:a1:fd:de:a2:b3:68:d3:20:a8:
88:bc:64:99:25:a2:12:f1:b4:fe:45:d4:4b:13:12:56:6e:1a:
1e:28:75:80:2e:f1:83:e7:a2:7b:83:8a:01:95:ae:7f:35:91:
bf:3e:cb:27:f1:97:11:93:9a:c0:8a:ca:e1:e0:66:fc:12:29:
53:8c:f8:4a:99:48:2e:ea:64:7f:9e:19:ee:84:8d:cd:94:65:
98:44:6c:7b:16:19:4e:3c:66:23:de:ba:05:1a:84:de:30:54:
64:65:2c:58:d1:91:22:7f:59:f7:db:50:20:94:25:4b:4c:aa:
1b:16:97:b5:10:ba:64:10:aa:2f:e2:20:74:36:cc:fc:d5:b8:
27:6f:a0:99:54:59:83:72:eb:80:d3:da:bd:e0:c8:bb:ae:f2:
33:e6:60:fa:e7:17:3b:45:87:09:9e:01:3a:c7:22:4a:05:a3:
bc:20:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:32 2025 by rpki-client