Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: LRCTuSbFoMC5CII0LJP7iZu29idkYZ2NSonezk6srkE=
Subject key identifier: ED:22:EC:37:EC:67:87:4C:06:50:24:6E:53:32:E8:7A:FF:04:7E:C0
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 01983A973220FC1AA622F9E6742DC5E5B830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0631
Signing time: Thu 24 Jul 2025 04:00:43 +0000
Manifest this update: Thu 24 Jul 2025 04:00:43 +0000
Manifest next update: Fri 25 Jul 2025 04:00:43 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: TQdXCp7AHpQvuzvIxzRtbKkmEexQT8Ce0pzgkacQrlg=)
2: BJSflswBbF0KTW1WxnqGispYE6A.roa (hash: 0G9L1AGhPY7c7LWy6WEMdnKFLYng4LvVWndIKcOm2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:97:32:20:fc:1a:a6:22:f9:e6:74:2d:c5:e5:b8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Jul 24 04:00:43 2025 GMT
Not After : Jul 25 04:00:43 2025 GMT
Subject: CN=ed22ec37ec67874c0650246e5332e87aff047ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:12:d5:95:c5:d6:76:4a:fa:4a:d6:88:5e:
57:f8:f5:34:e7:73:66:1e:9f:79:05:0e:4e:dc:96:
55:4e:7d:ee:35:9d:c7:c2:28:6b:a6:d2:3b:09:02:
15:01:27:43:b7:29:3f:d3:55:b9:76:6b:68:21:a8:
b0:2d:d4:79:7c:13:9f:cb:e5:6a:1e:66:19:10:16:
95:01:25:4e:a6:52:dd:af:be:38:c6:41:b9:5a:6f:
c2:75:16:2a:be:03:70:ca:53:d5:74:f8:58:95:74:
c9:e7:08:a9:2d:fc:20:af:fb:8b:b8:2e:d5:59:f3:
e7:2e:75:d9:87:c1:57:ea:01:fb:37:99:82:bd:7e:
25:bf:6f:68:06:c6:7b:79:ac:0d:f5:e3:00:b3:b3:
f7:e7:91:0e:ce:8f:53:e4:11:ed:2b:17:db:5d:1e:
17:f3:86:bb:ff:6a:b8:9c:ed:56:f4:87:d8:0d:03:
dd:7b:b6:b6:c2:9b:c6:03:ab:38:cf:6a:10:84:72:
fc:c7:23:d7:40:cb:8b:81:4c:8f:16:bf:ce:e5:64:
6d:2a:45:bc:59:4f:ae:f3:3c:11:a6:64:21:cd:91:
9c:85:1a:ca:60:05:9a:3f:6d:e2:fe:38:f3:9f:46:
6f:00:64:10:3f:b0:0f:b1:b2:8d:16:4a:9c:39:8d:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:22:EC:37:EC:67:87:4C:06:50:24:6E:53:32:E8:7A:FF:04:7E:C0
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:57:d2:1d:ab:5a:dd:34:b1:e4:e9:6f:88:77:8c:b0:f1:d0:
09:aa:a3:7b:ad:42:e7:4d:7f:18:16:b0:a6:04:5a:8f:c8:9b:
54:7a:ad:e6:95:25:be:8f:10:30:14:d7:9d:cc:d5:55:84:db:
56:ed:df:13:f7:78:4c:56:73:cf:45:20:74:b5:8a:20:57:c8:
de:60:9f:cb:2f:43:51:8f:1d:61:0a:94:3c:8e:04:8a:2d:e7:
18:5d:a0:d5:12:de:13:c4:d1:07:06:aa:21:d2:e7:5c:43:00:
bb:8a:82:a4:a5:80:d2:2b:1a:79:c8:a4:b6:42:63:7a:81:e1:
83:16:5c:8d:c2:5e:c9:2a:78:fd:fb:75:cc:ff:17:c8:96:50:
e3:b5:6e:18:a3:04:0d:96:f7:44:5a:60:f7:5d:48:e8:bb:ef:
f7:1a:51:03:ee:f5:ea:23:3f:4f:8b:a6:10:9d:55:9a:18:de:
91:8c:b0:0b:6c:40:27:23:33:34:3f:29:46:dc:3d:4b:59:58:
1c:de:bf:99:78:df:c2:b2:cf:3d:12:ec:77:ac:bd:81:07:cb:
a5:5e:b9:d8:da:77:13:6d:71:5c:53:82:ed:bb:54:ec:21:ee:
19:77:6c:e0:12:85:47:1f:6f:a4:7a:68:b8:d4:92:d6:d9:2b:
10:16:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:10:49 2025 by rpki-client