Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: 03kyyaQ73olY2Fder4J1oFOJVAofZhw6QPgcH+PQS/A=
Subject key identifier: E1:33:09:7A:89:E0:EC:3C:BA:9A:03:DA:21:D4:1D:C4:3F:CA:2B:28
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 0198511EAB5E899955BA299A44E91CC0CE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 0CA9
Signing time: Mon 28 Jul 2025 13:00:21 +0000
Manifest this update: Mon 28 Jul 2025 13:00:21 +0000
Manifest next update: Tue 29 Jul 2025 13:00:21 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: 3A46fMiTvmDNtuRFKfHCnuqpSHQGebFzg9QR2xmYUT8=)
2: qzSVGtS_jWsXuo115ysr12jv81o.roa (hash: 6sU/7Xohp1bS1zbTFVnz4YbGVdQCm8u0BmBoUOstkdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1e:ab:5e:89:99:55:ba:29:9a:44:e9:1c:c0:ce:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Jul 28 13:00:21 2025 GMT
Not After : Jul 29 13:00:21 2025 GMT
Subject: CN=e133097a89e0ec3cba9a03da21d41dc43fca2b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:11:02:d4:a9:dc:5e:e6:ed:8b:7d:98:89:
36:e8:34:57:93:de:58:d6:75:d1:d8:90:ae:aa:b7:
f9:71:36:30:d0:11:19:d8:4d:fb:76:8e:b0:ce:f5:
1a:c5:bb:e2:78:0c:f6:95:a8:35:27:0b:28:c3:4b:
48:03:96:4a:2b:ca:06:4b:6a:ae:85:4b:e7:28:3e:
70:7e:47:8f:d0:2d:01:fa:10:33:d5:6e:91:28:a3:
00:96:81:d0:ca:16:14:ee:1d:a4:df:8e:7f:5c:32:
d0:e2:46:13:84:5a:10:31:0f:fd:d3:cc:e4:4d:01:
53:ed:0a:38:ee:ba:89:4e:e2:b9:09:b8:7c:96:60:
95:4e:df:e9:0b:fa:fd:83:ec:e2:2f:d1:77:c6:22:
ee:96:92:e7:fc:b2:d9:8c:a6:5a:34:67:cd:aa:01:
56:cb:4d:53:22:92:3d:30:44:40:0e:1c:b5:77:2c:
28:05:47:07:88:1d:bd:58:98:1a:6b:80:57:88:c9:
de:23:05:c3:13:de:f7:01:28:5e:09:43:ae:a0:fe:
7a:4d:4c:43:c3:00:3b:86:37:4d:c2:f6:17:32:72:
82:2f:99:04:78:f8:50:dc:6e:bf:dc:59:5b:f2:9e:
08:e6:9a:c7:15:4a:67:a1:22:3e:6f:e5:ba:a2:a3:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:33:09:7A:89:E0:EC:3C:BA:9A:03:DA:21:D4:1D:C4:3F:CA:2B:28
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:8a:8d:3b:e6:14:b0:4b:16:78:b1:43:b4:f3:d8:66:68:53:
ec:e9:ad:66:e1:ff:c1:5d:3d:63:c9:40:eb:4c:c7:dd:3a:a2:
46:48:d9:a7:c3:52:09:ac:e2:3d:9e:b8:3e:18:ca:3c:28:18:
60:9c:8c:0b:b9:54:b2:76:50:16:a1:3b:8c:f4:96:09:03:cf:
1a:d3:97:4c:e9:90:99:9d:6c:b4:7b:8c:40:cf:6b:6d:07:7c:
8f:c7:18:56:7c:05:0a:0c:d1:70:74:4d:9b:04:45:14:df:b0:
49:d9:c0:39:c4:16:d0:4b:20:61:f6:d1:97:50:63:6d:4c:4e:
f0:8d:96:34:1e:69:d8:0d:2d:4a:17:a4:4d:1a:cc:2c:0f:4f:
df:75:76:ce:fa:e6:cb:e7:86:80:8b:7b:8a:18:cf:af:72:3b:
49:f7:4e:c3:4e:36:f1:11:64:d6:de:7e:6a:8e:94:e8:2a:0e:
2a:b1:66:89:78:99:b0:e1:ad:0f:57:42:6c:69:dc:e2:3b:70:
14:b4:a2:7a:ce:b0:4f:1a:cd:db:fa:35:f6:b6:d3:f2:1c:59:
5a:6b:7f:40:b1:5f:71:d6:30:2b:c4:ba:23:a3:20:a0:f6:8f:
f4:38:ba:97:2e:da:90:c1:8f:3f:f1:1b:0a:fd:ce:ef:ea:83:
13:1f:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 14:59:07 2025 by rpki-client