Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: Rl6sEk4CzPCBsHLWuKz0G1liu4qazxUJ8IpBv8Qm54Q=
Subject key identifier: F8:AB:B7:DF:FF:6E:CA:32:29:D0:9C:0E:B7:48:29:0D:11:A0:8A:F4
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 0197542302803776F756968D6EC3F2D0DF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 0262
Signing time: Mon 09 Jun 2025 10:01:09 +0000
Manifest this update: Mon 09 Jun 2025 10:01:09 +0000
Manifest next update: Tue 10 Jun 2025 10:01:09 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: gVE/JJanrG3BjXU8fdv54G6Rg+qaC3jR2dTJ85ewLk0=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:02:80:37:76:f7:56:96:8d:6e:c3:f2:d0:df:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Jun 9 10:01:09 2025 GMT
Not After : Jun 10 10:01:09 2025 GMT
Subject: CN=f8abb7dfff6eca3229d09c0eb748290d11a08af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:f3:75:e0:86:b0:9d:c0:9d:be:52:6e:a0:
e1:56:d2:a9:bc:ab:ba:1d:1a:c8:7f:67:95:b3:be:
14:44:70:cd:40:74:7a:3d:d8:5a:88:53:57:60:27:
7d:dd:db:65:ff:ee:09:de:16:43:0a:0c:0f:0f:61:
f9:c0:25:49:f1:09:7e:23:d7:89:75:45:97:20:92:
d3:bb:99:8c:dc:37:a1:db:e6:05:8d:b9:4a:e5:61:
1b:84:57:e2:2a:aa:df:91:7a:5e:73:7c:2b:3a:0e:
e7:16:00:10:12:67:8c:80:46:2c:b7:b8:04:64:99:
e7:31:31:6f:ce:cc:26:77:cb:52:f3:b7:d1:b5:f7:
85:c3:fb:2a:bd:3e:83:5d:65:34:5a:d7:9e:92:fa:
c9:3c:d0:6a:90:f2:be:6b:b1:6b:ec:a8:40:7c:fd:
a3:84:8c:14:20:ee:00:21:f9:f0:df:3b:a1:b4:43:
fd:5b:cd:fb:70:ca:99:55:ea:58:0c:c5:fd:a3:1b:
4c:64:f4:ad:c3:b7:40:cd:71:78:d8:b1:fe:a9:91:
b5:53:07:d1:56:40:f2:48:55:a2:ea:f8:72:a4:b3:
f2:d1:ed:08:9c:68:eb:32:8d:f5:10:aa:37:30:25:
49:66:4f:34:35:97:7f:e5:e8:bb:d0:23:33:3f:da:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AB:B7:DF:FF:6E:CA:32:29:D0:9C:0E:B7:48:29:0D:11:A0:8A:F4
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:71:e2:3a:41:16:bb:08:ff:ba:08:d4:5b:0b:1d:5f:d4:fe:
ca:66:fa:c3:95:5b:7a:bf:b5:00:dd:d1:06:95:03:4c:8e:00:
43:ea:54:d3:80:45:e5:62:58:68:00:d6:42:94:1d:23:44:66:
60:af:e0:d2:a7:18:8c:38:0e:0a:02:59:60:51:ff:2b:09:0b:
9a:77:de:4a:46:27:18:b7:5b:e7:12:c6:23:79:6e:90:74:59:
f9:4f:a5:b4:f5:62:25:66:a4:ee:51:3c:77:1e:de:10:38:64:
94:57:d2:e9:17:11:5e:e7:40:bc:c8:75:92:50:bf:e8:16:20:
b5:57:43:c8:85:e4:f4:16:93:c8:2b:e9:95:61:a8:32:e2:8d:
17:70:66:bd:0e:2e:cd:b7:bb:51:69:e2:79:4d:92:c0:55:1c:
e7:4c:24:4b:c5:b0:b7:bc:77:24:25:ce:30:b9:17:60:c8:2f:
a0:78:8a:f4:9b:92:09:2c:50:e7:4e:71:f2:c9:12:de:07:64:
46:e6:cf:50:f1:16:f7:65:4d:30:3b:89:8d:b2:cf:c2:41:76:
13:1c:79:70:07:e2:8c:09:69:93:ce:d5:c3:b2:f2:88:54:55:
19:e4:22:34:de:6f:da:f1:e0:ad:46:70:52:6e:b0:22:d3:69:
bb:54:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:31:59 2025 by rpki-client