Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json)
Hash identifier: tD1XMAC/HMkN4Xj/4dQDRXgpFNg01WnS6h/x2kIhWDQ=
Subject key identifier: 57:1F:50:08:57:F7:FE:EE:72:B9:EA:38:58:CE:63:9C:6B:27:84:D1
Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084
Certificate serial: 0197470B8FD58AC83083C66C2CF30C0B0C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
Manifest number: 03FD
Signing time: Fri 06 Jun 2025 21:00:29 +0000
Manifest this update: Fri 06 Jun 2025 21:00:29 +0000
Manifest next update: Sat 07 Jun 2025 21:00:29 +0000
Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: d6impxog5VT3MbgwUyigKbXhYHlVG3+YMpZHNKmydhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:8f:d5:8a:c8:30:83:c6:6c:2c:f3:0c:0b:0c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084
Validity
Not Before: Jun 6 21:00:29 2025 GMT
Not After : Jun 7 21:00:29 2025 GMT
Subject: CN=571f500857f7feee72b9ea3858ce639c6b2784d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:94:84:8c:e6:1f:ef:28:a2:cf:6e:d3:5e:
06:17:dd:5d:ff:ad:8f:e3:cc:21:c5:f2:5b:8a:19:
d1:99:06:aa:a6:b7:ed:68:9a:11:46:79:c4:13:74:
e2:69:5e:ae:c3:45:aa:5a:94:0e:40:39:a5:bd:c1:
68:79:ad:48:4d:89:e8:80:8c:f6:75:79:84:ec:ae:
7a:b0:a7:93:8f:48:47:4b:34:f3:f4:8e:00:ee:84:
c9:7c:77:05:29:63:b2:2b:31:d7:dd:c6:ac:bf:d4:
60:36:f2:c8:be:e9:4a:28:a0:9c:68:ff:41:5c:c4:
99:41:9e:4d:4e:e4:5e:85:b6:b9:f3:29:40:aa:72:
ed:53:bb:fa:59:48:b0:3b:6e:88:dc:ed:ee:0e:0a:
1d:be:27:33:a7:b2:fc:f2:e6:f1:f5:ab:e7:06:d3:
9a:1e:0f:22:53:74:a8:1f:26:45:1e:d1:4b:32:3a:
09:35:d1:28:8d:6c:9e:9a:3b:4e:67:2b:9f:af:1a:
0b:23:17:0b:32:97:d5:e8:ba:eb:3a:f7:d7:cc:f4:
cb:59:19:2a:49:1e:dd:88:a6:46:f3:5e:df:b8:0f:
96:f6:f3:d0:78:39:c7:73:c7:58:e1:4d:78:1e:d6:
c2:fb:d9:f2:b9:53:22:b2:f9:ff:81:99:20:dd:12:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1F:50:08:57:F7:FE:EE:72:B9:EA:38:58:CE:63:9C:6B:27:84:D1
X509v3 Authority Key Identifier:
keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:02:37:b5:4a:b1:e6:1e:f6:72:e5:ee:15:f0:10:bb:ec:f0:
18:81:c2:b6:5c:a1:07:72:90:64:2d:a0:e0:8e:28:d1:a9:6c:
bf:1e:a0:f6:dc:6b:bc:97:ba:a7:23:95:d1:61:ce:c6:92:d2:
f4:e4:4f:49:0e:04:4b:b0:f3:dc:ec:3d:a2:5a:8f:68:79:e1:
8a:9d:2f:62:5c:4f:d9:f7:ac:74:25:fd:50:c9:7d:8c:53:5d:
8b:88:e8:87:2a:56:86:98:2c:ef:53:9a:da:11:fb:ed:87:40:
4a:b9:29:bf:1c:66:55:30:da:3f:d4:4e:9e:63:91:74:f7:37:
96:cb:7c:01:68:03:5f:a6:62:37:0d:c7:27:2e:db:6a:50:73:
3b:67:18:34:dc:ae:7f:ed:09:9d:99:79:e4:c5:98:87:b5:be:
7a:bb:c8:d7:9e:dd:74:4a:59:0d:e4:06:52:bd:28:1c:6b:04:
63:7c:f4:78:60:db:d0:b5:5e:64:67:0d:78:e1:54:e2:9d:33:
f6:67:22:92:38:35:5a:6b:15:9e:a1:7a:e5:06:c6:13:d0:b5:
2d:5e:9e:d5:eb:11:74:d8:77:23:9d:79:28:6f:dc:7b:4e:59:
1c:7e:10:ac:e9:1e:68:9e:c9:a8:e0:69:f5:c2:f2:d2:b4:76:
3f:41:a8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:31 2025 by rpki-client