Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: IIjxlBKG/Msie811nC2hGLKq4wf+rWpBNfYNldrqSH0=
Subject key identifier: DA:4F:8F:A6:93:FA:BB:09:DC:21:ED:01:47:84:75:61:C0:F7:7F:51
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 01963EE67F9A6D30D1FA0B034E1B2D19E132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 052A
Signing time: Wed 16 Apr 2025 14:00:15 +0000
Manifest this update: Wed 16 Apr 2025 14:00:15 +0000
Manifest next update: Thu 17 Apr 2025 14:00:15 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: 5tBL+KYqvMBNoec5YcypR9l8e3R7QgSF3LD6InpHjFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:7f:9a:6d:30:d1:fa:0b:03:4e:1b:2d:19:e1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Apr 16 14:00:15 2025 GMT
Not After : Apr 17 14:00:15 2025 GMT
Subject: CN=da4f8fa693fabb09dc21ed0147847561c0f77f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:b5:3e:64:2b:45:e7:96:43:19:da:d7:79:
d9:c6:03:88:8f:2a:21:2d:7c:57:9d:c3:6d:f3:b8:
e9:ae:1d:d9:5c:26:94:09:52:e0:ac:f5:79:98:1d:
65:7a:dd:97:f6:00:49:9d:f1:4e:5c:f2:a5:e7:c5:
2a:cf:39:ef:49:88:85:ce:16:6a:f4:6c:7e:18:45:
04:7b:f4:91:a4:66:9c:01:e8:d8:70:ba:ff:00:9d:
87:e9:96:d8:cd:86:c0:0f:fa:3d:14:86:1e:96:08:
20:73:05:89:18:9d:9a:a3:64:b8:cb:c7:62:88:3b:
c2:94:67:ee:f3:bf:ac:20:a4:34:e8:28:86:c2:3f:
de:a8:47:64:f8:5c:e4:d5:3c:e7:16:3a:06:4b:41:
1e:62:63:c4:bf:21:9e:ce:f0:96:8d:94:68:54:6e:
14:d1:b9:28:f8:6c:6e:36:f9:ae:a4:a7:06:20:b8:
73:76:85:73:80:a8:45:09:89:c6:52:c1:9f:d3:d3:
89:63:bf:ca:73:85:fc:06:6c:2d:0b:af:b5:ef:b4:
17:6a:d4:ec:ff:87:64:dc:bf:e7:ca:9a:30:74:e9:
ee:de:a9:1c:bd:89:28:3a:d7:48:00:5e:09:90:96:
0c:bb:f0:0f:91:a1:d3:35:07:da:5d:57:b7:e0:47:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:8F:A6:93:FA:BB:09:DC:21:ED:01:47:84:75:61:C0:F7:7F:51
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:39:cd:6c:ad:b4:9c:f8:df:f9:c9:44:15:a3:49:c4:2d:ae:
53:f1:a4:a1:09:2c:c1:e2:e1:7e:89:d2:7e:ea:a7:f4:29:d4:
8a:c1:f1:5c:7c:13:6d:d9:d0:49:16:43:da:d3:f5:b9:0f:9c:
43:ee:fe:fc:fb:cd:0e:af:5d:48:18:76:d5:1f:32:1e:63:95:
14:6c:a3:af:ce:d1:5a:12:46:e1:de:6c:fb:64:3d:9a:1b:58:
38:a4:23:23:c4:7c:9e:49:1b:ed:bb:f5:ae:22:ba:60:18:c6:
ff:ea:19:d4:f2:ef:50:18:06:0e:39:db:6b:7a:61:c1:7e:a1:
37:8c:7c:14:0e:c2:22:55:49:6b:45:db:64:a2:a6:cf:16:70:
76:4b:4a:9e:87:09:db:95:34:be:e2:34:61:8b:70:fa:d0:e9:
9c:34:52:fb:ab:23:6f:da:ab:c5:05:56:9c:f2:6d:92:60:2f:
a0:50:23:2d:cf:84:2a:40:8a:df:b4:79:71:81:78:88:15:45:
20:72:cd:3c:a7:02:c9:3d:c3:c0:78:0e:40:34:54:65:0e:29:
8e:99:ad:c6:75:a9:24:58:b6:cf:9f:8f:70:02:af:59:ea:81:
b8:ba:b3:97:45:98:e6:ba:91:fa:7b:d6:b3:23:57:eb:25:c6:
d7:2b:3a:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+5n+abTDR+gsDThstGeEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2
MDNlZjYwHhcNMjUwNDE2MTQwMDE1WhcNMjUwNDE3MTQwMDE1WjAzMTEwLwYDVQQD
EyhkYTRmOGZhNjkzZmFiYjA5ZGMyMWVkMDE0Nzg0NzU2MWMwZjc3ZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRi1PmQrReeWQxna13nZxgOIjyoh
LXxXncNt87jprh3ZXCaUCVLgrPV5mB1let2X9gBJnfFOXPKl58UqzznvSYiFzhZq
9Gx+GEUEe/SRpGacAejYcLr/AJ2H6ZbYzYbAD/o9FIYelgggcwWJGJ2ao2S4y8di
iDvClGfu87+sIKQ06CiGwj/eqEdk+Fzk1TznFjoGS0EeYmPEvyGezvCWjZRoVG4U
0bko+GxuNvmupKcGILhzdoVzgKhFCYnGUsGf09OJY7/Kc4X8BmwtC6+177QXatTs
/4dk3L/nypowdOnu3qkcvYkoOtdIAF4JkJYMu/APkaHTNQfaXVe34Ef63QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpPj6aT+rsJ3CHtAUeEdWHA939RMB8GA1UdIwQY
MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt
MjU5YmU5ZmJjMWYxLzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx
LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjnNbK20
nPjf+clEFaNJxC2uU/GkoQksweLhfonSfuqn9CnUisHxXHwTbdnQSRZD2tP1uQ+c
Q+7+/PvNDq9dSBh21R8yHmOVFGyjr87RWhJG4d5s+2Q9mhtYOKQjI8R8nkkb7bv1
riK6YBjG/+oZ1PLvUBgGDjnba3phwX6hN4x8FA7CIlVJa0XbZKKmzxZwdktKnocJ
25U0vuI0YYtw+tDpnDRS+6sjb9qrxQVWnPJtkmAvoFAjLc+EKkCK37R5cYF4iBVF
IHLNPKcCyT3DwHgOQDRUZQ4pjpmtxnWpJFi2z5+PcAKvWeqBuLqzl0WY5rqR+nvW
syNX6yXG1ys6hA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:51:03 2025 by rpki-client