Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File: aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier: 0dQrpshrIprI6glYA1SNZ+YVJoVTOB0Yf6aVLU4QYUc=
Subject key identifier: 5A:AE:6A:C0:67:A9:57:12:8C:58:73:3F:52:4F:AD:3B:9C:48:B2:B0
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial: 01974779E387D35B9E4FDC08D7486D6DA034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number: 0A2D
Signing time: Fri 06 Jun 2025 23:00:59 +0000
Manifest this update: Fri 06 Jun 2025 23:00:59 +0000
Manifest next update: Sat 07 Jun 2025 23:00:59 +0000
Files and hashes: 1: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: stLEuMMTClGjISSX1KfbaklEyj3BUWid3EQLG4xbG80=)
2: fAKnpTzt0oxsrzvaA1bygJJ8CWQ.roa (hash: cdf+GHG9jpY7S3hS2aX03Crb7b2Au3gPgbB6NvaxmuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e3:87:d3:5b:9e:4f:dc:08:d7:48:6d:6d:a0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Validity
Not Before: Jun 6 23:00:59 2025 GMT
Not After : Jun 7 23:00:59 2025 GMT
Subject: CN=5aae6ac067a957128c58733f524fad3b9c48b2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:59:73:b9:69:51:9d:c9:7f:a8:4b:86:30:
62:3a:b5:a5:b7:22:b4:3d:01:62:ec:68:a6:58:bb:
7b:e5:eb:02:76:0e:3f:00:d2:5e:25:d7:8f:f5:17:
65:b9:76:3f:69:bc:ad:2a:fa:a6:90:28:2e:f6:28:
8e:8d:de:ac:2d:f9:74:06:a2:83:f2:a4:da:60:67:
41:ba:ec:6e:af:6f:8f:d2:fd:0c:d0:41:19:e8:30:
00:13:3e:28:8d:18:59:07:84:a3:93:a3:02:0d:16:
5e:f0:e3:74:cb:2a:9c:f5:ad:de:c2:53:ab:c1:07:
e4:d3:f9:44:ef:76:44:e5:ed:e8:c0:6b:c7:48:80:
28:85:ef:56:05:f9:43:c8:d7:0f:ba:87:c5:cd:1d:
48:40:ef:eb:cb:d0:b3:a1:78:c6:f2:44:0e:04:1d:
76:41:4d:0b:f8:66:a6:42:fd:be:cd:d2:af:fc:b5:
44:eb:fe:f1:fe:c7:13:b0:0e:03:dd:d8:c2:d1:a1:
82:f7:44:e8:3e:78:73:fd:5c:35:7a:66:9c:5e:16:
99:6b:fb:15:9c:4c:dc:f9:18:c7:69:a1:e4:4a:34:
35:93:77:3d:09:44:d8:3e:c5:02:9b:68:bd:56:33:
40:f2:5a:8e:48:43:5c:f3:0e:5e:de:a0:cb:7e:d8:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AE:6A:C0:67:A9:57:12:8C:58:73:3F:52:4F:AD:3B:9C:48:B2:B0
X509v3 Authority Key Identifier:
keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:74:05:8b:f7:8d:1a:db:b8:37:43:fb:0c:d3:0f:ba:a9:45:
29:8f:95:f3:3b:bc:a3:49:31:3a:8c:df:2b:92:2d:05:12:6d:
a8:a2:f5:94:c0:b5:74:c7:61:ec:0f:90:fc:5b:45:7f:ee:47:
8c:3c:64:43:93:6c:3d:a4:39:87:94:6b:f1:1a:a7:4f:bb:e2:
39:8a:a5:15:a7:0a:56:89:aa:26:b3:44:27:3e:a9:f2:53:8f:
b2:60:ef:7a:c1:0f:55:65:be:af:2e:0c:7e:23:69:ba:60:16:
50:72:c6:82:64:23:a2:c5:ab:e5:a0:be:65:a0:0b:53:83:c1:
d3:09:e5:2c:ec:d3:5a:4d:8e:27:03:b0:e4:0f:c3:b2:52:41:
1b:8e:85:61:d5:49:0f:75:93:d5:68:b2:f2:ed:f6:1e:e8:e3:
49:f0:a7:d5:c1:d9:b6:b8:3c:0c:f2:f8:ac:3d:a1:af:a3:67:
b6:a9:af:df:c6:df:55:13:3b:bb:bd:fc:f6:fa:b3:4b:e2:71:
19:e9:cf:b0:4c:bf:6b:80:bb:28:0b:ad:a0:f6:14:12:4a:cf:
27:e7:b8:9a:64:47:c0:cf:e4:ca:0d:0a:b4:61:dd:1f:c8:7c:
02:81:b6:f2:a2:00:70:d8:e0:7d:53:08:16:be:3a:87:d6:25:
ba:fa:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:15 2025 by rpki-client