Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: 2l9cLaNUTk3vHrThIsJYLIm/EF1jTd584puwEaZ3k0w=
Subject key identifier: 10:47:97:67:E5:80:5B:02:13:63:8E:DD:1F:10:A3:FF:04:40:47:65
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 0197488CA93689C3AEB264F498228E3BB650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 0850
Signing time: Sat 07 Jun 2025 04:01:07 +0000
Manifest this update: Sat 07 Jun 2025 04:01:07 +0000
Manifest next update: Sun 08 Jun 2025 04:01:07 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: rqW0TLU+MqbGZIK4FdqhfcZFu5X/TRHVRswwdW5EmFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:a9:36:89:c3:ae:b2:64:f4:98:22:8e:3b:b6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Jun 7 04:01:07 2025 GMT
Not After : Jun 8 04:01:07 2025 GMT
Subject: CN=10479767e5805b0213638edd1f10a3ff04404765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:88:90:00:c1:7a:8f:a1:65:d4:af:32:a3:
e0:cd:74:97:f7:98:4e:f3:f9:d9:4a:06:ab:a8:59:
a8:74:93:a6:f0:97:de:00:74:09:90:17:1b:c6:d0:
20:03:bb:3d:d7:7c:f2:25:c5:ac:5a:8d:7a:59:98:
62:63:c0:c8:23:16:ef:30:86:b9:01:3e:a4:29:d0:
de:e7:f2:a3:96:a1:10:fb:60:1f:0c:55:32:27:3a:
2e:ae:de:2f:d9:66:2a:5c:71:12:a6:2c:10:2b:e8:
b0:0a:5b:97:3d:f4:58:2f:85:b8:c5:89:a5:6f:23:
29:15:27:fa:f2:07:f3:f1:74:99:dc:c8:83:0d:3a:
75:99:a3:a2:5e:ce:bb:4a:04:c2:1c:b2:7d:07:d9:
fa:f4:24:49:c5:93:ad:11:56:13:e8:c8:a8:61:c0:
87:96:29:94:2f:c2:06:05:ef:3c:38:ef:68:40:2c:
42:bd:7c:58:f2:cd:2c:22:8e:d3:37:09:d9:8c:58:
83:2a:79:5e:e9:32:5b:89:c0:ec:bf:33:d5:c8:78:
a0:a0:03:e1:5f:ef:56:e1:f3:e4:52:67:b8:44:a6:
03:43:31:a6:fa:cb:2d:a6:ac:34:87:ae:e8:79:1f:
cd:10:1f:95:e4:68:af:e6:4c:fd:72:46:91:d1:41:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:47:97:67:E5:80:5B:02:13:63:8E:DD:1F:10:A3:FF:04:40:47:65
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e0:b8:e4:08:1d:dd:18:63:44:52:24:3e:63:8c:51:65:5a:
81:99:df:0f:98:66:67:5c:98:5a:5a:b5:97:a5:9c:be:de:91:
e8:4d:28:f3:9e:a7:cd:26:1e:ae:da:d6:46:b7:0f:25:2a:34:
e9:40:98:16:3d:03:87:ab:3a:68:29:ac:bf:43:d1:fd:8d:e9:
53:00:14:3b:e4:f5:53:e5:f8:3f:05:ef:02:8b:16:46:95:50:
cd:7d:68:fd:0d:a7:c0:c8:dc:b6:5f:15:26:96:1e:8d:b9:32:
5a:0f:e1:dd:24:8d:95:6b:11:32:1d:0e:af:fb:e1:17:65:40:
b3:a7:07:fb:2b:36:41:b0:70:9a:78:b6:0b:b8:26:52:5c:f8:
28:ee:2b:2e:62:33:da:50:50:e8:71:40:b3:3a:4e:2b:73:4c:
78:42:b8:df:d7:f0:2c:4e:fa:18:2e:15:40:49:ae:ea:10:63:
93:0c:af:ca:5a:9b:35:3c:79:3e:b4:81:c2:ac:cf:d7:f9:70:
46:6a:2e:bc:a5:8b:58:f9:19:d1:c2:f5:12:90:5d:c0:81:e8:
76:b1:a7:a3:7b:b9:9d:ab:a9:06:33:61:6a:6b:77:b9:4c:f2:
eb:be:b6:ca:50:08:28:5b:57:27:1c:65:67:71:bd:73:69:cd:
eb:02:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:28 2025 by rpki-client