Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: 3GeVyTzd0cVF1Z8RUqAk3px9zceuwxJYmHRZG492bxU=
Subject key identifier: A6:17:8D:5E:9B:26:19:54:1A:AF:2A:6E:3B:45:7E:F6:8A:D7:CD:66
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 0197499F5CD0DE647420452DE1B06EB9EE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 04C8
Signing time: Sat 07 Jun 2025 09:01:10 +0000
Manifest this update: Sat 07 Jun 2025 09:01:10 +0000
Manifest next update: Sun 08 Jun 2025 09:01:10 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: rPh9EJvhuu7Me1/as6xkw3SRJzc/59CewqrirVUtgDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5c:d0:de:64:74:20:45:2d:e1:b0:6e:b9:ee:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Jun 7 09:01:10 2025 GMT
Not After : Jun 8 09:01:10 2025 GMT
Subject: CN=a6178d5e9b2619541aaf2a6e3b457ef68ad7cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:71:48:a1:6e:4f:3f:a2:07:89:ae:38:f4:
47:de:4c:54:a8:4d:80:fc:99:39:e9:d9:03:79:45:
f8:07:76:28:e5:74:ab:73:16:05:da:9c:2d:00:be:
af:20:7a:49:7b:b1:43:a0:e9:4f:e7:5a:71:8d:60:
4b:1f:b3:d9:4a:44:f8:26:aa:4c:d7:eb:f4:8f:e1:
a4:6f:e9:5a:ec:ef:7d:ac:a0:ad:e5:87:e7:90:ad:
2c:72:47:71:36:15:3a:26:23:53:b6:99:a6:4b:7d:
93:8e:c4:b1:55:9b:e8:67:b3:d9:3f:db:0b:45:8b:
b3:01:ac:b5:e6:b3:4f:fa:59:5f:59:37:56:02:b7:
a5:2e:4f:ea:60:06:2c:76:f5:fe:46:66:30:7c:b1:
d8:c0:08:6e:5f:fb:ed:aa:9a:a0:7f:3d:79:51:71:
0c:38:0a:3f:24:4d:8b:0c:6f:b4:f9:3a:ed:4b:04:
37:da:3d:0a:64:b5:2b:17:50:f8:97:92:47:b2:20:
89:e3:29:1d:42:12:76:ce:78:49:e6:53:aa:30:58:
ef:d9:1a:f7:d1:a7:36:2c:d8:a4:28:bf:cd:8f:dd:
58:ab:78:8d:c8:10:d7:e6:15:f6:06:28:6a:2d:e1:
b5:09:8f:f7:b9:67:5d:00:04:f2:31:4d:d4:88:f9:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:17:8D:5E:9B:26:19:54:1A:AF:2A:6E:3B:45:7E:F6:8A:D7:CD:66
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b1:ee:ba:96:75:41:5f:51:2b:a1:59:f2:f5:64:7d:15:97:
94:11:e8:91:d1:e7:48:eb:b2:5f:33:3b:0e:1d:a2:1f:02:09:
2b:a6:7c:e9:7f:11:c6:b5:57:bf:ee:a7:4e:13:a9:ef:6e:75:
b0:09:d1:22:5e:33:d9:ec:23:2d:ce:ef:90:58:65:cd:25:3a:
a0:db:ac:75:f4:32:1d:f3:a6:90:ec:86:b1:40:3f:5c:80:45:
bf:de:93:6e:c3:d5:cd:9b:af:d0:78:e1:34:7c:fa:fc:4b:07:
2b:55:03:af:b5:c3:48:6b:62:5f:33:1e:ec:a5:1f:ab:38:dc:
1d:01:17:f3:a4:a0:a4:27:e1:21:2b:d1:6d:39:fd:c4:78:f9:
32:d4:e6:0e:d7:9f:3c:c7:a0:ac:c3:69:56:d0:2d:c1:b8:c6:
ed:65:60:a0:e8:8d:d5:15:e0:3e:10:99:3f:29:0e:7e:35:69:
f1:09:39:bf:06:29:ba:93:68:bc:bd:e1:92:ec:47:2c:56:ad:
b8:7f:e6:4f:c8:85:4f:f7:81:8e:5a:d6:5d:d2:af:22:fa:0b:
8e:07:06:17:e6:87:07:0e:87:2b:73:0e:64:81:9d:4a:41:ab:
f1:14:c5:aa:86:67:e2:c5:f2:a0:23:3e:a5:97:6c:83:41:ea:
57:b2:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:27 2025 by rpki-client