Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: d6xdQ8tV+KWxAONJ32AKuV1vaUQ8UtqVW5WmJGSVDXg=
Subject key identifier: 95:20:C6:EA:CA:7F:2B:64:58:5D:4E:7E:9D:B7:74:C1:28:AB:6E:68
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 019747428BE60DFF1337D47C04E3B55C23A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 05B3
Signing time: Fri 06 Jun 2025 22:00:32 +0000
Manifest this update: Fri 06 Jun 2025 22:00:32 +0000
Manifest next update: Sat 07 Jun 2025 22:00:32 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: 7BZGpwlMXjGPpjEnT6QVY31FcPAZ5vaIgFaH01xkjH0=)
2: BJSflswBbF0KTW1WxnqGispYE6A.roa (hash: 0G9L1AGhPY7c7LWy6WEMdnKFLYng4LvVWndIKcOm2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:8b:e6:0d:ff:13:37:d4:7c:04:e3:b5:5c:23:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Jun 6 22:00:32 2025 GMT
Not After : Jun 7 22:00:32 2025 GMT
Subject: CN=9520c6eaca7f2b64585d4e7e9db774c128ab6e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:bc:f0:d1:a7:10:25:72:88:35:a3:c3:f1:
86:4a:20:c9:5d:7d:b7:3c:0c:40:c3:2e:dc:c3:3d:
40:d8:72:d9:db:ac:7a:eb:33:65:c8:de:55:a1:be:
d6:49:9f:fe:7f:32:7c:4b:91:32:95:2f:45:f0:66:
41:b3:bd:89:c9:3c:4a:ef:15:37:03:23:5a:12:95:
ee:1d:58:cd:ac:59:81:8c:a7:ad:a4:2c:c2:f3:2e:
f9:40:00:22:9c:a4:4d:5e:42:31:7b:52:d6:a9:b8:
a8:0f:ec:91:62:0c:da:e9:8a:53:bc:28:ab:4d:8f:
7a:ca:5d:bf:5d:99:86:b5:6e:25:78:89:6d:9f:ea:
c1:c2:4d:ce:2e:58:72:58:dc:1f:b7:69:4d:dc:36:
68:15:0f:7c:08:71:ab:a6:10:f0:95:ee:55:d2:69:
d6:e3:a4:3d:e7:81:e3:69:54:90:db:ad:65:9b:08:
43:57:91:cd:68:79:49:59:fa:96:ce:ae:37:d5:8c:
e9:72:98:59:8d:68:11:c1:93:34:db:83:06:9e:be:
3c:e1:b5:bc:4a:7f:68:fa:09:0d:00:78:cf:27:13:
e0:15:be:2e:5c:ed:09:a5:57:47:d4:35:79:35:02:
0b:18:31:b4:c7:e5:d9:eb:e5:b4:4a:c9:44:11:a4:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:C6:EA:CA:7F:2B:64:58:5D:4E:7E:9D:B7:74:C1:28:AB:6E:68
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8e:06:c2:ff:61:14:4f:85:4b:20:54:8d:8f:c1:c5:bb:c1:
9c:83:c4:1e:29:8a:cd:a5:7b:7d:0b:90:61:7d:36:b6:0f:56:
a4:dd:25:88:de:f1:12:05:5b:b7:c1:5d:de:7a:3d:81:89:93:
c2:4a:4e:ec:f1:4a:2b:f8:8b:10:7f:3e:e9:ab:b4:e7:4b:ac:
f7:f1:ba:9e:4e:26:dd:ae:cf:a2:39:0f:e5:dc:a8:af:3b:ab:
54:bb:81:aa:8c:e8:24:e8:bc:ce:f4:04:69:a0:9f:65:9b:fe:
2b:ea:2f:fd:ed:67:60:81:a6:5d:c5:a1:9c:08:cc:0f:c7:b7:
03:f7:b7:21:2c:8c:48:a4:14:c0:db:0e:11:16:2f:39:d6:68:
aa:43:1b:a7:9a:4e:08:fd:5c:1a:ec:57:d6:d1:fa:a2:8f:0b:
cd:a9:be:da:bc:e6:41:fd:1f:19:86:e5:cc:41:12:c7:87:ed:
0b:eb:3b:4e:55:61:85:3b:d4:9a:e3:ad:26:3e:08:2b:af:de:
d5:3f:1d:2a:17:58:65:cd:a9:a5:8c:6d:08:36:e6:51:25:ae:
23:f9:92:7b:43:12:9c:4c:56:92:4b:0a:ec:b8:3c:45:a1:0b:
4e:b4:e4:43:e2:e4:37:f4:f7:2c:0c:58:58:28:1d:74:c6:30:
96:c8:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:27:47 2025 by rpki-client