Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
File: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft (raw, json)
Hash identifier: Vij9c4THSsWR7gzhg1gm3X5L6YVZDZL6K0w044ALFT8=
Subject key identifier: 0E:7E:C7:8D:31:4E:3A:83:D5:3E:77:4F:2F:03:A4:2C:B5:66:18:5B
Authority key identifier: 01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
Certificate issuer: /CN=010d68a876cf5793fd00876254253d382779027b
Certificate serial: 01974BC3E62ADC6BD1C7C28CE7391C8F7965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
Manifest number: 02E4
Signing time: Sat 07 Jun 2025 19:00:18 +0000
Manifest this update: Sat 07 Jun 2025 19:00:18 +0000
Manifest next update: Sun 08 Jun 2025 19:00:18 +0000
Files and hashes: 1: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl (hash: bFr15E54AqruHrOv45jDWNLdB+KS7zEM2FDZx5jCWoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:e6:2a:dc:6b:d1:c7:c2:8c:e7:39:1c:8f:79:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010d68a876cf5793fd00876254253d382779027b
Validity
Not Before: Jun 7 19:00:18 2025 GMT
Not After : Jun 8 19:00:18 2025 GMT
Subject: CN=0e7ec78d314e3a83d53e774f2f03a42cb566185b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:5c:33:f2:0c:27:98:10:47:d2:05:b5:70:
da:8b:38:c0:7e:72:5e:a1:67:f0:26:73:02:e6:4c:
3b:19:6a:6d:c8:de:5e:59:70:63:5f:f7:4a:6b:2a:
f9:8f:e4:cb:69:71:4b:ef:dd:04:ab:f5:e3:8e:8a:
fa:70:bf:73:2a:e2:a5:66:60:6e:6c:9c:34:da:88:
8d:10:9c:a9:18:79:b6:4d:35:ba:59:cc:1d:4d:0a:
67:db:28:77:c6:53:4b:60:7c:39:25:3a:fe:8e:35:
9f:85:d6:bc:5a:b4:49:3a:1a:43:85:4d:93:fd:c9:
31:71:5c:be:99:e3:e0:17:ec:93:3d:1d:56:71:90:
7b:ae:60:32:48:f7:b5:d5:ab:4c:6d:66:d0:0e:a8:
dc:d9:ec:5a:6e:cb:26:75:93:64:59:b1:bd:42:35:
03:cc:d7:42:3c:f3:a9:9e:f8:fd:76:e1:63:b5:a1:
60:f3:ce:07:d8:9d:b7:b1:03:7a:1c:ca:7a:7d:d3:
61:da:21:a8:4a:dd:37:96:d5:f7:52:b2:df:ca:97:
a2:b6:0d:73:84:d5:52:8a:f8:55:22:1f:11:f9:6a:
4a:6a:d8:61:dd:07:ab:47:2d:03:5a:cf:cc:87:79:
a1:8b:25:30:2d:7b:3a:f8:53:b2:b9:80:55:77:b5:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:C7:8D:31:4E:3A:83:D5:3E:77:4F:2F:03:A4:2C:B5:66:18:5B
X509v3 Authority Key Identifier:
keyid:01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1e:73:5a:6d:46:15:a8:08:ca:e3:62:c2:42:ba:1b:bd:40:
98:87:04:28:3f:55:dc:c2:f6:f3:84:f0:8d:b5:2e:56:78:64:
93:0d:56:3f:09:11:b6:ed:48:55:f3:57:55:89:ac:b7:21:b9:
bb:ab:ae:3d:b8:01:2e:6c:2c:8f:80:9c:37:70:37:bc:51:ba:
bf:f9:1b:42:d9:f6:69:dc:12:01:b1:3a:c9:e1:12:27:32:ae:
41:12:9c:ad:33:91:34:ae:e5:f2:5a:e9:38:5a:30:65:7f:cc:
e7:d8:90:34:64:42:64:cf:d9:6d:b9:d1:cc:e8:05:f6:b9:0e:
11:c7:42:91:ee:b0:12:83:e7:c0:2d:72:6d:fc:fa:66:8e:e2:
e7:7e:6e:32:e2:9a:17:62:1b:b7:66:5e:0b:38:43:0e:cd:59:
b2:b3:4b:2e:33:7a:64:60:ca:8d:6a:08:ea:79:72:11:36:31:
0e:f0:bf:2c:4e:d7:c3:eb:08:17:a1:26:c7:a4:57:30:9e:d3:
85:0f:45:75:18:3c:5c:91:22:c2:0a:fd:29:77:5e:4a:0c:8c:
a1:c1:49:6d:b7:1b:d7:41:ae:7d:f0:08:50:fd:56:9a:ea:bd:
e1:84:2d:98:2e:81:7c:1a:36:80:09:38:c3:b3:7d:b9:35:29:
3a:1d:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:53:57 2025 by rpki-client