Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier: pSdYdXClVJsm94kVWvsOK2gcoQAUJuZ1mJO7t3ObR2Q=
Subject key identifier: 33:EE:56:18:1B:F2:F8:45:32:A2:3F:8B:D2:A7:0C:26:E3:32:16:47
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial: 019752A2B02C4F5A55F6A8625254A7AB970F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number: 06EB
Signing time: Mon 09 Jun 2025 03:01:22 +0000
Manifest this update: Mon 09 Jun 2025 03:01:22 +0000
Manifest next update: Tue 10 Jun 2025 03:01:22 +0000
Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: VYyOP5XI4p60QVVid/DV37skluJ+9bEUoPahVnNcGRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:b0:2c:4f:5a:55:f6:a8:62:52:54:a7:ab:97:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Validity
Not Before: Jun 9 03:01:22 2025 GMT
Not After : Jun 10 03:01:22 2025 GMT
Subject: CN=33ee56181bf2f84532a23f8bd2a70c26e3321647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:23:05:28:d6:7d:64:e3:09:64:5c:4a:84:71:
da:57:5d:8c:f9:71:0b:81:ba:2f:01:c9:7b:37:26:
fd:61:64:28:fb:40:2a:55:b6:12:5b:36:7e:e1:8d:
3f:c7:6d:ea:94:24:b5:35:14:f7:44:a3:c5:7a:8e:
c4:85:6a:49:63:97:14:75:50:48:a8:85:d4:c4:48:
71:d4:1f:42:e3:33:e6:cc:08:a5:11:8f:65:e6:1c:
40:99:b8:8f:4f:f5:f1:c8:5f:42:d3:a8:77:73:15:
a5:96:5e:7e:45:f9:61:87:cc:19:fb:0d:f3:25:79:
77:e1:c5:bb:8d:59:dd:27:01:fc:f2:aa:f2:06:68:
91:37:33:ab:e5:0d:82:7d:6b:9f:b2:f3:76:44:c4:
f0:00:de:d5:e5:b9:0c:01:13:34:f3:2d:d4:f9:3d:
f1:23:37:25:04:34:01:72:e1:17:52:c1:06:41:cf:
d1:3d:32:29:5a:df:21:f0:e0:14:ae:10:67:b8:2a:
08:9b:90:62:3f:d4:1c:f7:38:e2:ce:ff:1b:68:fc:
53:b5:46:32:4c:ab:0f:8c:a6:9d:1d:6d:a0:4f:37:
7f:c8:e1:b0:ad:f9:32:01:4d:3c:10:c3:f8:da:b9:
54:ff:6b:a8:6d:38:b3:74:8d:9c:5e:78:d2:c6:96:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:56:18:1B:F2:F8:45:32:A2:3F:8B:D2:A7:0C:26:E3:32:16:47
X509v3 Authority Key Identifier:
keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9f:43:ff:9f:73:a1:23:46:f8:74:a5:47:8c:34:7b:94:d1:
21:d2:02:1f:e6:dc:2e:67:9a:36:68:8b:00:98:32:e3:31:c7:
d5:db:ad:f3:00:ce:ba:4b:02:c8:c7:78:1b:a4:91:57:b1:85:
74:eb:92:74:24:46:e2:a3:88:e0:1a:f1:46:a5:b5:9a:be:11:
5d:f0:58:c1:18:08:f7:97:41:01:e5:fa:5d:2d:3a:5e:55:50:
19:89:3b:06:46:fb:1e:f6:a4:ee:80:47:c0:fe:d7:00:09:59:
31:ba:1c:e7:28:75:0f:9e:bb:4d:d1:c3:f9:88:ca:9b:fa:04:
f3:dc:53:d5:9d:44:ea:d6:32:ac:e5:76:dc:ec:7e:ab:fb:ff:
99:ce:c6:b7:15:c8:dd:a9:d7:27:12:5d:9e:68:1d:8e:09:03:
30:8a:66:f2:1c:04:92:fa:f1:ab:2a:e8:93:9f:f7:b4:32:ad:
e1:d9:d2:45:7a:0f:43:b4:0c:17:35:42:6c:e4:f0:d5:6b:f1:
38:23:81:d5:1b:c6:a3:8b:4b:80:ab:15:84:68:3b:51:37:74:
66:d5:f0:44:4a:1b:81:c4:be:b0:db:64:23:30:e6:71:da:ec:
5f:2b:1f:5b:f1:77:bc:b7:be:ec:79:b1:01:99:b7:7d:ad:48:
aa:6b:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:32 2025 by rpki-client