Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
File: aiElvfZalVLVuOF6s2FaoQuAWXY.mft (raw, json)
Hash identifier: rZY2PeigHpk9Jxr2DfBE2yPD5yCYRulrMygGCJUDqUA=
Subject key identifier: 3A:AD:94:F0:C3:FE:13:DA:9A:E7:A0:95:1D:F9:8C:99:03:92:B5:2E
Authority key identifier: 6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
Certificate issuer: /CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Certificate serial: 01984A77AAC2C01A6B93C9D31F1497799B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
Manifest number: 0203
Signing time: Sun 27 Jul 2025 06:00:13 +0000
Manifest this update: Sun 27 Jul 2025 06:00:13 +0000
Manifest next update: Mon 28 Jul 2025 06:00:13 +0000
Files and hashes: 1: aiElvfZalVLVuOF6s2FaoQuAWXY.crl (hash: SzGTHskjwneASjQzhcNAkuefF5PryN87YLNiONYyBoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:aa:c2:c0:1a:6b:93:c9:d3:1f:14:97:79:9b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Validity
Not Before: Jul 27 06:00:13 2025 GMT
Not After : Jul 28 06:00:13 2025 GMT
Subject: CN=3aad94f0c3fe13da9ae7a0951df98c990392b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:8c:44:e1:85:86:d0:da:49:84:02:fb:20:
d2:1f:73:c9:32:ce:18:be:ab:3e:b0:ee:98:10:1d:
84:1f:9d:d3:77:6c:95:6a:e0:56:9e:e2:6d:24:ae:
00:1b:fb:e9:7d:34:49:5d:0c:78:b3:60:c3:35:7a:
a4:a6:c5:77:4e:cb:cb:38:a5:80:88:51:81:b2:22:
e2:2c:bb:fc:89:f1:ca:74:5b:4b:97:9a:ae:fd:8e:
0f:61:78:79:a7:cd:68:94:16:59:dd:33:cc:4c:ef:
f2:0e:90:9f:bd:ae:9f:1a:a2:31:8b:c0:d9:37:68:
5d:b6:9f:0b:fc:8d:5d:93:23:7f:4d:04:ba:7d:5c:
10:79:56:e3:65:4f:68:d5:f6:82:4d:15:a2:11:1f:
36:42:41:3b:b1:69:fb:3b:13:ff:76:0f:e5:df:68:
fb:60:4c:0b:c5:2b:0f:e4:4d:06:2b:6e:54:82:1d:
ea:4f:b9:7d:e5:e9:fc:55:50:53:1a:48:ef:1a:38:
c7:c9:91:2b:01:18:eb:2a:11:69:11:94:70:a6:6f:
f9:5c:9b:73:e2:aa:55:44:3f:f2:ee:d6:26:40:62:
57:57:51:97:b2:ac:04:c1:4c:23:b8:bc:fa:9b:0a:
69:5e:3b:7d:88:5e:11:f8:47:52:8d:7d:e3:c9:a1:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AD:94:F0:C3:FE:13:DA:9A:E7:A0:95:1D:F9:8C:99:03:92:B5:2E
X509v3 Authority Key Identifier:
keyid:6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:11:7e:23:3e:39:4e:fa:72:0c:52:c4:93:c5:8a:4a:38:
95:30:8c:c9:90:06:d6:8e:ef:00:ab:ea:c3:e5:a0:0c:71:c0:
40:8b:1c:f2:fb:45:c3:6d:b0:ab:bd:64:74:2f:33:13:7c:8d:
36:66:a2:6b:e5:51:80:fd:30:e8:90:82:26:7e:78:69:6e:96:
94:6c:b9:88:b8:7e:97:0b:1a:a4:b7:b8:0a:49:cd:1b:73:94:
b3:83:4a:75:c8:31:29:2b:08:ee:f4:00:8f:1a:01:78:12:87:
ad:ba:66:83:19:0f:ce:75:36:16:88:f2:1b:25:23:5f:e6:08:
30:09:e4:04:2a:7b:fa:77:e9:9b:00:54:69:28:be:e4:9a:37:
f9:83:f4:5f:44:1d:a1:46:99:e9:e2:c5:0a:93:3a:a8:e7:eb:
9f:95:59:24:3b:12:b0:1c:fb:e6:b3:ad:17:19:25:eb:dd:4e:
dd:dd:18:ca:78:18:9a:31:bc:01:9c:33:46:27:0f:d5:ad:d7:
c9:78:aa:4e:28:3e:fd:b3:7f:d9:4f:86:ef:37:54:5a:b3:cc:
30:6e:bc:5e:be:07:b5:49:98:a2:67:10:f7:6d:ee:87:b9:6e:
c8:30:7b:4e:54:95:c4:ae:96:bc:35:67:82:f0:f7:c6:95:26:
20:05:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:21 2025 by rpki-client