Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
File: aU0ylbrOkvvFQHllxly2WWm60Cg.mft (raw, json)
Hash identifier: vv7/spAj4HjxDb1KlyiKqW8ct0XjoGdYDZ6PZ7GaZMg=
Subject key identifier: 5B:57:78:E2:8A:3D:2B:68:50:CA:0A:35:20:69:B4:D5:0A:45:2D:13
Authority key identifier: 69:4D:32:95:BA:CE:92:FB:C5:40:79:65:C6:5C:B6:59:69:BA:D0:28
Certificate issuer: /CN=694d3295bace92fbc5407965c65cb65969bad028
Certificate serial: 0198499BF99E50AF9A57C6C5BF053DF46AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
Manifest number: FF
Signing time: Sun 27 Jul 2025 02:00:15 +0000
Manifest this update: Sun 27 Jul 2025 02:00:15 +0000
Manifest next update: Mon 28 Jul 2025 02:00:15 +0000
Files and hashes: 1: aU0ylbrOkvvFQHllxly2WWm60Cg.crl (hash: CrwbETi8JskXnHdXb1HVYe8T8DhmRgctNsvzLfgxK6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f9:9e:50:af:9a:57:c6:c5:bf:05:3d:f4:6a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694d3295bace92fbc5407965c65cb65969bad028
Validity
Not Before: Jul 27 02:00:15 2025 GMT
Not After : Jul 28 02:00:15 2025 GMT
Subject: CN=5b5778e28a3d2b6850ca0a352069b4d50a452d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:2c:27:24:2a:a4:73:fc:88:dd:37:85:b7:
9f:f7:18:71:af:4d:61:88:e8:71:33:f0:83:25:62:
ab:5e:1b:0a:85:f6:c3:2e:ef:1a:83:18:68:2b:16:
72:72:3d:1c:58:7a:58:e0:d4:89:47:dc:9c:60:09:
c6:98:53:51:90:56:4e:e2:0e:23:dc:e7:0b:3d:5c:
86:1b:87:49:a8:ed:b2:f9:48:92:ce:1f:e9:d6:9b:
c2:df:b4:d2:79:de:3d:95:29:87:9b:9d:20:c9:09:
1b:9a:16:31:fb:c0:37:07:ea:78:f5:60:6f:92:a5:
80:0f:0f:09:07:1a:d5:af:3a:81:07:86:e8:56:79:
f2:a4:49:c2:31:a5:61:6c:5d:bf:dc:0a:94:39:9b:
6a:56:d2:88:97:80:d6:53:7b:d0:ab:ee:3e:7a:a6:
6a:01:9b:50:50:d1:9d:3d:2c:74:b3:f6:6e:ad:25:
72:bc:52:d7:fa:4c:75:40:86:c3:d8:80:7d:76:6b:
b6:e9:7a:a2:c8:ab:3c:83:f6:82:bd:af:16:1d:4a:
ca:49:31:4d:5b:5c:df:2a:b9:29:7e:65:53:6c:78:
83:9b:60:aa:45:fc:77:77:ca:a6:0c:89:80:8d:48:
78:48:66:14:0e:a9:f8:d5:77:20:bc:9b:5f:6a:6a:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:57:78:E2:8A:3D:2B:68:50:CA:0A:35:20:69:B4:D5:0A:45:2D:13
X509v3 Authority Key Identifier:
keyid:69:4D:32:95:BA:CE:92:FB:C5:40:79:65:C6:5C:B6:59:69:BA:D0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:28:31:80:96:a1:ce:72:b2:b6:59:54:35:35:1b:1c:0d:12:
63:b4:59:06:86:e7:0f:60:65:20:2f:cb:32:0d:e3:39:68:98:
65:b1:52:d4:f6:99:f2:a2:84:34:d6:a3:3b:34:62:61:37:56:
5c:d4:3a:49:69:7f:7e:e0:ec:3d:08:4c:d5:7a:fa:c9:fb:14:
8e:ca:84:2d:a2:55:3c:70:75:3d:c7:0c:a4:63:b0:17:61:03:
23:19:f3:2f:62:cf:5e:4b:9a:f4:fa:66:5c:0b:98:13:3f:2b:
54:81:43:4e:08:c3:77:30:7b:3f:5a:ca:19:88:22:62:88:39:
66:75:6a:dd:4d:cf:72:3d:09:44:df:c7:ad:ff:c0:ae:e0:e6:
ed:d7:12:6e:95:30:af:f4:4f:45:41:e1:e7:d1:2e:17:d1:5f:
5a:3d:01:e1:84:bf:a3:26:e1:c1:11:b1:a1:5d:3e:39:2b:09:
3d:7d:34:e6:ed:d4:74:f2:95:37:07:57:71:de:5d:c2:03:9c:
de:ff:23:12:30:64:49:bd:12:77:dc:2d:29:1c:82:ee:5e:34:
81:94:10:9f:93:db:74:4f:eb:4c:6f:ec:dc:77:9a:8a:1d:a2:
82:28:4a:92:bf:f1:2d:65:b0:32:0a:92:15:7b:28:76:c3:52:
46:9a:84:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:01:57 2025 by rpki-client