Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: v8hyWA702vS2C0r6PqG8iutwPKs4qbZNjRjKKYlWUu4=
Subject key identifier: 0A:ED:50:06:78:CE:92:5A:72:CE:42:0D:2C:A9:D0:18:16:B8:41:3C
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 019834CC017238E15FCC848ACCDD4E50D0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 062E
Signing time: Wed 23 Jul 2025 01:00:41 +0000
Manifest this update: Wed 23 Jul 2025 01:00:41 +0000
Manifest next update: Thu 24 Jul 2025 01:00:41 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: W4OEttjuxGocTbGzI3KkXdX3Eqv2pkiLXqXZE/EKa3A=)
2: BJSflswBbF0KTW1WxnqGispYE6A.roa (hash: 0G9L1AGhPY7c7LWy6WEMdnKFLYng4LvVWndIKcOm2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:cc:01:72:38:e1:5f:cc:84:8a:cc:dd:4e:50:d0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Jul 23 01:00:41 2025 GMT
Not After : Jul 24 01:00:41 2025 GMT
Subject: CN=0aed500678ce925a72ce420d2ca9d01816b8413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:c5:f2:58:51:45:1c:01:0b:31:b7:6c:87:
10:0b:33:9b:72:70:d0:c6:14:d4:8c:7f:94:c5:77:
0b:8e:cd:44:bf:ab:9b:02:21:39:d3:75:69:7a:1e:
fd:36:58:37:db:ea:f0:c7:bb:06:67:fc:b2:a4:03:
3b:55:cf:92:9c:3d:ad:f9:83:ca:49:3b:0e:e3:1c:
ef:c6:78:c8:b7:4f:51:74:a5:cf:91:a2:a8:6e:49:
d1:b6:9a:85:ac:1a:1b:c9:7b:df:87:fb:53:9f:d1:
2e:42:3a:6a:a4:1a:7a:ed:e1:ac:ba:97:e5:a6:8c:
e1:23:43:55:59:8a:c1:ae:f3:30:bb:d1:3f:3a:8f:
c9:06:b0:30:cf:3e:17:74:24:39:5d:1c:e1:88:f0:
71:1a:7c:10:8f:1d:31:1e:7d:04:02:1c:cd:e0:4f:
65:5b:72:6c:36:bc:c8:2c:27:9d:a2:8b:74:36:b0:
a7:cc:1f:84:3e:78:ac:73:0c:35:a2:22:f9:af:54:
77:a3:a0:9e:13:e5:0d:46:60:2a:54:29:a7:97:72:
bb:22:3d:50:6f:8e:4e:90:f9:4e:d0:07:c7:cc:ed:
54:72:c9:87:72:5e:62:6c:63:50:02:f1:e8:65:fc:
93:a3:a9:7d:5a:85:af:07:45:0c:95:7b:d6:7a:81:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:50:06:78:CE:92:5A:72:CE:42:0D:2C:A9:D0:18:16:B8:41:3C
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f4:d2:d8:64:ac:dd:48:f4:3b:f8:83:57:6c:9a:88:6e:20:
e2:71:4d:49:3c:04:6b:2c:e7:03:21:03:a2:b6:37:53:76:6c:
3d:26:62:d4:7e:8d:21:44:02:d2:1c:59:4c:97:22:08:68:6c:
6a:b4:30:89:81:41:7f:09:87:b9:73:48:55:b8:6a:b4:21:36:
6c:b6:89:db:bd:5b:b8:04:17:3b:39:df:7f:d8:49:4e:6e:38:
f2:d8:6c:7f:90:7b:09:c6:0b:89:d8:b1:6f:74:2f:41:7b:ce:
d4:2a:4e:6f:3e:77:e3:52:3d:fc:77:f0:18:7b:80:ea:0a:2e:
a7:43:d1:64:8c:9f:75:ac:8b:bd:34:d8:1f:c7:6a:dd:ba:51:
0b:ee:4d:8b:9b:e8:a7:75:2a:83:11:57:4d:54:58:0b:67:5b:
23:4c:fd:a6:01:74:58:d3:09:da:95:c0:d6:33:d1:97:9a:d5:
22:da:47:62:ac:37:fd:c3:a9:4a:f9:fd:b1:0f:d5:8a:10:5c:
c5:72:d1:40:f0:09:bb:1e:b8:7b:cc:8d:9f:5c:e2:49:46:1e:
5c:38:86:6e:09:3a:fa:20:0a:98:65:1d:7a:0e:98:73:e7:93:
0b:5f:d8:26:1a:79:af:9e:fc:72:1d:05:23:16:bc:cb:b2:78:
4d:a6:a0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:13:24 2025 by rpki-client