Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier: BlDiPKc0m3L7+5+uUaGsTGtkShS5nbBkNDJs6L7iECA=
Subject key identifier: CE:D3:DF:7A:77:3F:1F:35:38:DA:5F:8A:EA:BE:99:1C:3A:6F:06:21
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial: 0197488C04D79BE3EB400AE24F733A16DBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number: 0AF1
Signing time: Sat 07 Jun 2025 04:00:25 +0000
Manifest this update: Sat 07 Jun 2025 04:00:25 +0000
Manifest next update: Sun 08 Jun 2025 04:00:25 +0000
Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: Amnoreyj7AovJuzU2I5eMlGYhDU32Ow035Ut6rb0hjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:04:d7:9b:e3:eb:40:0a:e2:4f:73:3a:16:db:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Validity
Not Before: Jun 7 04:00:25 2025 GMT
Not After : Jun 8 04:00:25 2025 GMT
Subject: CN=ced3df7a773f1f3538da5f8aeabe991c3a6f0621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:ef:5f:87:8f:90:db:92:d4:0f:95:53:32:
59:ee:71:49:a8:f5:fe:d6:2b:1e:f3:2c:c5:95:db:
41:e3:bd:35:8c:2e:51:5f:91:12:41:6a:d4:cd:49:
28:8f:98:2c:f0:4f:76:27:04:53:1b:03:83:f9:57:
7c:80:a4:3e:2c:e3:49:48:9f:f3:d8:8a:0f:f6:bd:
95:62:a9:88:08:44:ba:1f:b8:d8:af:4c:37:ae:b0:
4b:3f:27:62:08:f3:30:05:9f:60:26:31:7b:d9:28:
e5:0d:2e:09:af:a9:c9:06:53:90:d3:9a:a8:c2:38:
99:16:99:ca:18:8b:ea:6f:a0:64:49:95:21:1f:d5:
4e:e5:4f:22:77:c2:74:2f:30:f3:bf:b3:4d:5d:c1:
3d:05:8d:94:ea:f0:98:01:36:62:0f:f2:c9:d4:d2:
03:8a:be:86:fa:97:e5:8a:f0:08:7a:81:3d:40:9c:
82:b3:ea:72:18:9a:ce:02:67:32:69:2e:a2:47:8e:
4f:d8:1e:07:a5:08:ef:6d:51:8c:74:af:62:2e:14:
ee:2c:1e:35:44:61:a4:fd:49:da:e9:a8:c2:8c:8d:
24:83:32:d6:b9:7f:fb:3d:6b:4c:82:08:f3:55:96:
ea:8d:8f:eb:dc:1a:ad:17:bc:d3:24:ec:55:26:d3:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D3:DF:7A:77:3F:1F:35:38:DA:5F:8A:EA:BE:99:1C:3A:6F:06:21
X509v3 Authority Key Identifier:
keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:85:8e:e9:2e:27:bd:cc:2b:21:64:c2:b1:7b:16:fc:da:
ff:f7:9c:83:e3:20:a1:f1:29:2e:da:f2:93:93:a6:f9:c8:23:
4b:a3:a2:cb:a3:99:be:e8:a6:29:7e:8f:b2:04:78:36:87:9e:
ec:65:72:49:92:c1:58:b6:7b:73:32:3d:8e:50:b9:8d:88:53:
9c:2f:cc:ea:d1:24:9f:87:af:19:8d:9c:0c:f9:70:e1:6d:9b:
dd:8d:eb:66:18:43:22:c2:cf:34:30:6a:16:50:6d:c3:bd:3b:
df:03:ba:2a:87:d5:8d:ab:fc:9e:35:bf:af:72:c1:04:9d:29:
bc:5b:2c:84:e7:22:32:a1:06:ac:85:ed:00:0a:e1:53:01:9f:
bd:36:a4:09:5d:2b:f2:af:37:9c:59:ef:dd:a5:4d:ce:f9:d5:
46:5c:9c:ee:5f:3e:b1:dd:e2:da:ea:83:68:15:23:fc:91:d5:
42:8d:f4:60:60:84:65:24:15:7b:65:a5:2e:61:c0:69:ab:31:
a1:17:2a:13:ee:17:f9:bf:10:7e:6d:07:e5:98:ad:0a:dd:2f:
4d:5b:e6:c3:f9:c0:ac:76:d9:a5:e5:52:a7:73:a2:46:e4:6e:
f9:73:7a:37:7e:98:d1:de:c1:45:06:00:7f:26:43:db:61:52:
f5:fe:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:33 2025 by rpki-client