Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json)
Hash identifier: D4MBSXU6YBxoI6UgCjGjdKK9fcjcufsD2G4ph4FJ+gA=
Subject key identifier: 26:BA:B3:75:F7:31:CF:CD:23:B7:71:5F:53:45:B2:2A:3B:AE:5F:0B
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 0197488C780371ABC10F125A0482A10C304F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
Manifest number: 091D
Signing time: Sat 07 Jun 2025 04:00:54 +0000
Manifest this update: Sat 07 Jun 2025 04:00:54 +0000
Manifest next update: Sun 08 Jun 2025 04:00:54 +0000
Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: wH8X6734PbPuyYZlARNWBmNhvOVO/k6zTNOImQAuJq0=)
2: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (hash: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:78:03:71:ab:c1:0f:12:5a:04:82:a1:0c:30:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: Jun 7 04:00:54 2025 GMT
Not After : Jun 8 04:00:54 2025 GMT
Subject: CN=26bab375f731cfcd23b7715f5345b22a3bae5f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:5d:c4:95:be:34:c5:d3:f3:ac:ca:c6:ab:
3d:67:cd:21:49:95:0e:4f:35:a6:c8:e3:5e:ca:ac:
79:1a:b5:28:cf:2d:0f:ed:c1:18:43:65:a8:c8:a7:
16:7d:27:2a:e9:4a:96:ae:88:45:b9:1a:a6:ac:b5:
14:83:5f:61:17:9e:d3:71:5e:cc:63:33:65:2a:76:
8f:8e:49:67:57:67:b5:8b:62:ff:0d:52:7c:ea:68:
ec:b1:49:8d:4f:a3:3b:6a:67:ba:5a:e9:ec:da:f4:
c5:a8:4e:c8:f4:a2:f3:de:b2:08:95:12:1f:f4:c2:
9d:02:52:41:62:2d:95:79:0f:54:bd:6f:3f:8a:b1:
67:88:7a:44:82:27:7c:c6:5e:b4:7a:74:a8:e3:5f:
1c:d8:2c:8e:2a:76:cb:b9:a2:00:45:64:e9:15:1f:
c9:cd:01:4b:bc:9f:2a:51:0c:9a:8c:59:cc:1c:4c:
2d:ba:c4:df:f7:84:96:fb:53:f7:a6:d4:ac:a0:66:
ad:e4:45:be:4a:64:af:36:1c:79:84:e1:4b:2a:b2:
93:6a:db:36:05:38:55:26:ad:d2:2b:45:36:27:7e:
5d:a0:86:eb:46:ed:02:76:5c:eb:1c:c8:82:6f:bb:
f1:29:8d:5b:48:b5:f0:39:cf:88:5c:c0:b0:75:41:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BA:B3:75:F7:31:CF:CD:23:B7:71:5F:53:45:B2:2A:3B:AE:5F:0B
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c4:2d:58:72:4b:25:95:7b:b8:1c:e3:20:3a:56:6e:c4:6d:
96:6d:db:fc:bd:09:a1:39:37:00:10:b2:91:eb:18:12:54:4b:
14:25:23:ab:e1:06:17:50:5c:10:5b:27:1f:59:50:a4:4e:57:
fe:f5:42:76:bb:e2:3a:18:5e:53:4e:e3:d5:3c:5f:ee:07:a1:
cc:f7:1f:3a:d2:e2:ab:af:55:c3:6d:de:56:04:5b:1a:93:e9:
fd:0f:17:7f:fd:16:31:fe:ca:4d:51:97:0c:25:69:bd:a6:b0:
68:21:ef:90:67:dd:86:e6:19:18:31:14:93:13:f4:4e:35:4d:
aa:c8:c6:bb:04:66:8b:af:46:1d:1b:c2:48:bf:4f:73:c8:c8:
c3:24:dc:bf:c6:99:b7:be:9c:56:7e:41:eb:73:21:b3:25:c4:
97:0d:ba:17:dd:21:a3:7a:cb:29:d4:1a:05:0d:8e:09:e2:60:
69:38:ee:88:8f:cd:ca:c7:12:f2:72:e1:78:2a:6f:c5:2a:b8:
c0:6b:60:d3:88:ec:a0:96:f8:cb:c2:60:b8:75:82:f4:14:d2:
bc:d9:0c:d4:c7:28:2a:a7:2d:a9:28:15:1d:e4:88:a0:2d:fa:
b8:a7:99:52:81:b5:17:5d:f7:b3:7f:07:82:7e:94:41:75:63:
d2:91:d1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:33:52 2025 by rpki-client