Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: tw/b/SkyNF2s1ljtllvmxNmuoyfBso+xDjKaIL91ufY=
Subject key identifier: 2A:69:11:C3:C5:EE:CF:91:F9:B4:53:10:FB:8C:CC:E2:3A:11:BD:D0
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 01983E73B81533BB935B1B056A2F68AC1B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0633
Signing time: Thu 24 Jul 2025 22:00:27 +0000
Manifest this update: Thu 24 Jul 2025 22:00:27 +0000
Manifest next update: Fri 25 Jul 2025 22:00:27 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: 95Mur7Grk7E9d2/YVqwmywFXreGoOFxmPUe9DtlHxiQ=)
2: BJSflswBbF0KTW1WxnqGispYE6A.roa (hash: 0G9L1AGhPY7c7LWy6WEMdnKFLYng4LvVWndIKcOm2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:73:b8:15:33:bb:93:5b:1b:05:6a:2f:68:ac:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Jul 24 22:00:27 2025 GMT
Not After : Jul 25 22:00:27 2025 GMT
Subject: CN=2a6911c3c5eecf91f9b45310fb8ccce23a11bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:4f:ed:09:03:0d:30:fb:48:f0:1c:5e:ba:
78:c1:9f:33:83:b3:50:5f:8e:d7:d6:c5:49:7b:d6:
76:e4:3d:1e:70:4d:c0:ae:11:d9:58:4f:11:39:09:
3d:8c:e8:af:89:9d:7a:bf:ae:a3:4d:b6:2a:cc:3a:
53:b8:92:56:39:27:63:c6:45:31:fd:9d:2c:b5:af:
cb:36:bf:57:e8:ae:ac:52:5c:96:bb:dd:aa:ae:18:
a0:cd:b5:b8:ac:25:76:38:8e:db:2c:6f:ef:84:3e:
96:8d:ac:1c:ce:03:2d:22:79:9b:e7:e4:a9:71:a9:
b0:7c:7f:af:23:25:ad:8a:0c:6f:24:90:2e:27:e6:
6a:dc:33:9a:36:97:53:93:23:0e:a7:81:20:6e:fd:
cd:e0:36:9d:43:a1:6c:84:34:41:8b:88:df:7c:5c:
59:78:c9:3a:22:bd:a6:02:c2:a3:86:aa:9d:3f:d2:
17:c4:6c:d8:f6:0c:e4:58:c9:79:95:8c:0f:76:3f:
e9:a8:bf:fa:02:68:95:73:e8:ce:85:52:26:f6:3f:
7f:76:58:94:13:64:24:cf:d8:d9:10:3c:01:54:ba:
e0:b7:f6:78:dc:83:e4:aa:51:6f:d5:93:49:22:20:
5d:d8:53:fe:45:24:a7:cf:ae:c2:a2:6b:83:64:fe:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:69:11:C3:C5:EE:CF:91:F9:B4:53:10:FB:8C:CC:E2:3A:11:BD:D0
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4c:75:03:d0:de:9e:6f:bd:b4:ef:45:c8:a3:b2:29:d4:da:
c9:ae:1c:29:f7:b1:b8:c2:cc:01:0c:ba:df:45:fd:04:d0:b7:
36:fd:c7:ab:9c:c0:93:21:99:2f:b8:15:73:99:55:c6:99:d7:
de:d5:c7:4e:26:7e:b3:2f:45:2a:60:b8:3a:f9:0e:c6:cc:2f:
43:ae:52:a6:62:72:60:d5:f6:54:d8:5c:ed:8e:6b:e0:c5:da:
64:18:6d:62:01:93:f4:ef:1a:d5:ee:54:22:48:76:52:5b:c3:
fa:5a:4b:fb:0a:df:b6:45:a1:98:39:5a:8b:e8:ee:08:92:a5:
d5:c5:5a:76:79:71:02:1f:1c:f4:98:3d:11:e0:a6:a2:70:e4:
35:5e:c8:03:c5:d8:5d:18:af:dc:ea:30:67:ed:13:b6:2b:59:
49:fb:04:d1:8f:9b:1d:6f:71:fa:5e:a3:a1:80:9f:77:c5:bc:
4d:f2:a6:b5:6a:86:d3:dc:3a:a8:b1:95:c7:1e:0a:dc:12:e1:
a3:65:64:1b:b4:c7:c3:f8:e4:fd:e9:58:b8:40:43:47:f6:90:
43:d2:e2:42:53:a2:2c:87:94:ad:24:6a:18:ab:ae:45:12:07:
57:b4:91:ae:d1:8b:f1:27:50:6e:d8:40:a9:f9:01:ec:80:23:
30:fb:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:54:06 2025 by rpki-client