Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
File: aQqw79d1diHIbXtpx29gssP6w1Y.mft (raw, json)
Hash identifier: WAg+mNdogEHmgckAKGwNAJpINNaB6WnyGVBRFvpPT70=
Subject key identifier: 21:8E:83:7E:44:F1:12:80:E4:41:62:0E:E7:48:27:FE:4C:69:53:F1
Authority key identifier: 69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
Certificate issuer: /CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Certificate serial: 01974967A4A51CA942794F2A871BB44D95FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
Manifest number: 02CB
Signing time: Sat 07 Jun 2025 08:00:18 +0000
Manifest this update: Sat 07 Jun 2025 08:00:18 +0000
Manifest next update: Sun 08 Jun 2025 08:00:18 +0000
Files and hashes: 1: aQqw79d1diHIbXtpx29gssP6w1Y.crl (hash: 6mzty/sLdCMGdAhLeYIFhkfItT/1wmW8a4mUlaaPGoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:a4:a5:1c:a9:42:79:4f:2a:87:1b:b4:4d:95:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Validity
Not Before: Jun 7 08:00:18 2025 GMT
Not After : Jun 8 08:00:18 2025 GMT
Subject: CN=218e837e44f11280e441620ee74827fe4c6953f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:00:d4:52:c1:f4:16:eb:73:80:6d:99:11:
51:02:20:f7:13:b8:f6:17:6c:73:1a:90:28:83:f3:
ae:1a:29:57:ae:3b:76:8a:bf:aa:b8:24:fd:9c:b6:
dd:a8:0b:7f:5b:65:da:4e:a3:b9:a5:ac:20:3f:3b:
75:57:71:b4:52:66:0f:1b:ad:ce:1c:29:36:27:e3:
1e:70:ba:1e:73:92:92:11:77:aa:bc:df:9c:e6:8d:
24:d3:d9:81:e2:6c:25:c5:89:f6:04:63:23:02:24:
a4:e6:7b:58:dc:35:46:df:7f:3f:93:98:3c:e1:bc:
b2:9c:ac:7d:83:8d:29:40:a0:ee:68:89:8b:55:69:
bd:24:0e:e2:bb:98:ad:95:75:0f:df:a5:78:63:ae:
0c:d9:bb:d1:c9:4e:34:e6:eb:a7:27:c0:54:d7:7b:
40:5c:10:e9:5a:d5:19:9f:49:5b:07:6c:0f:16:82:
1e:0e:9a:8a:ec:77:c7:95:1e:64:03:19:7e:c3:a3:
2e:9f:b4:58:5a:70:60:4f:d1:58:08:85:f7:d2:40:
b1:9f:50:f4:07:8b:92:1c:55:f8:b1:f4:ba:a0:fe:
61:07:2c:62:ff:2f:fd:bb:e9:38:d6:cb:1e:8b:6a:
ee:27:d1:ec:1d:81:9b:c4:b1:8b:41:35:0f:b5:07:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:83:7E:44:F1:12:80:E4:41:62:0E:E7:48:27:FE:4C:69:53:F1
X509v3 Authority Key Identifier:
keyid:69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:98:59:02:f3:04:50:ee:93:03:dd:4b:c3:66:15:14:82:db:
11:b8:f8:7b:6b:2b:b8:05:a0:f7:cb:81:2b:b3:60:68:70:17:
6f:e8:17:a1:14:08:67:1d:c8:9a:35:98:24:cf:31:ab:6e:11:
ae:ab:d6:0e:57:2b:32:21:22:28:6d:22:89:df:54:b9:e8:06:
5e:47:da:15:35:ad:bf:75:c0:ba:8a:09:55:05:d2:00:fa:e0:
a8:e0:23:58:1e:00:da:b1:d6:e3:e5:29:32:db:0f:a8:00:19:
be:43:23:ab:e4:5e:2d:06:d3:18:70:c9:5b:6f:df:88:ca:00:
dc:9b:44:59:74:d3:11:eb:42:6f:f2:82:6a:35:f8:3a:b3:8c:
cd:a0:eb:74:42:8f:7d:6f:8b:84:de:3e:88:87:99:bd:9b:cc:
17:65:26:ad:32:f2:06:28:72:67:4b:54:d5:66:f6:c7:08:80:
7f:2f:5d:d6:cf:8b:08:5a:7d:45:75:20:bf:c6:ce:6f:36:db:
70:93:6d:ba:46:a1:3f:ea:da:26:7b:9e:70:33:fc:ee:6a:b3:
4e:9e:ff:c5:8a:9d:20:4f:32:3e:f2:96:c4:48:af:4f:a6:ed:
d3:74:30:aa:77:33:85:07:ba:dc:a5:4b:6b:bd:fb:93:be:0d:
ad:1b:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:27 2025 by rpki-client