Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
File: aBFGMD9XUewN_C71R6qyR69OaB8.mft (raw, json)
Hash identifier: gU3siudt5NxEopVgWYNHKgk7F6uCERQRnNoIMcX2cvs=
Subject key identifier: 66:95:0F:43:3A:6F:3B:9B:13:89:11:71:2B:C6:EB:18:9E:6E:4E:FE
Authority key identifier: 68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
Certificate issuer: /CN=681146303f5751ec0dfc2ef547aab247af4e681f
Certificate serial: 0197488CB07ED3521CB4E74557C05E6D49DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
Manifest number: 0C5C
Signing time: Sat 07 Jun 2025 04:01:09 +0000
Manifest this update: Sat 07 Jun 2025 04:01:09 +0000
Manifest next update: Sun 08 Jun 2025 04:01:09 +0000
Files and hashes: 1: aBFGMD9XUewN_C71R6qyR69OaB8.crl (hash: krKQxSP/iQeTdToCv1HdFLMNpXxNep2QJ4voQP0ET6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:b0:7e:d3:52:1c:b4:e7:45:57:c0:5e:6d:49:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681146303f5751ec0dfc2ef547aab247af4e681f
Validity
Not Before: Jun 7 04:01:09 2025 GMT
Not After : Jun 8 04:01:09 2025 GMT
Subject: CN=66950f433a6f3b9b138911712bc6eb189e6e4efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:67:8f:b9:3c:6d:d1:92:6d:a8:04:8f:66:
f0:69:75:de:0f:49:29:86:ef:64:9f:73:87:e9:33:
be:94:33:1f:91:3d:60:7a:43:37:f3:3b:93:92:4e:
62:63:f1:bb:04:15:3e:4c:13:be:bb:55:d0:2f:b5:
bd:d1:72:e6:73:1c:c0:6f:04:64:a1:79:3b:b8:59:
73:c9:f5:98:67:d2:38:0d:2f:75:c7:d9:9e:68:3e:
0a:5a:a5:1e:eb:67:4e:d3:89:21:6a:4c:5a:cc:ee:
ba:ec:20:ba:e9:85:c6:e9:14:9e:24:2c:c8:7f:58:
32:ad:6c:3e:d6:b5:e9:ca:92:53:07:4e:20:e7:4b:
fb:80:8b:4f:b3:d9:8e:cd:22:33:c7:de:ce:d8:15:
16:c2:29:dd:6f:48:45:45:5d:13:59:fe:05:08:30:
eb:56:1a:22:1b:c3:80:2e:c8:d3:d6:75:e0:77:72:
7d:d0:9b:03:a0:98:07:35:6c:c8:f7:d8:e1:2b:d5:
4e:2a:4e:75:76:00:fe:0b:bb:dd:33:15:02:8d:54:
c0:93:02:08:46:f5:44:35:b9:4b:b4:57:f5:8e:fd:
33:2f:fd:d2:6e:64:b5:c2:12:b7:8b:33:d2:36:e6:
89:62:b4:20:71:db:28:8a:fd:cc:d5:bf:95:97:75:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:0F:43:3A:6F:3B:9B:13:89:11:71:2B:C6:EB:18:9E:6E:4E:FE
X509v3 Authority Key Identifier:
keyid:68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:12:fa:f7:1c:0c:f8:71:44:93:4c:d8:94:9b:84:d7:6a:ba:
bb:9f:82:42:6e:8b:8e:2c:1a:b4:b0:b9:60:e9:f3:52:26:5f:
63:10:29:58:2b:4f:04:81:25:a4:25:c5:ae:1c:91:c3:9e:c0:
bd:14:16:19:00:9e:4d:7d:86:74:85:e9:dd:dd:a4:98:e3:09:
ae:fd:6a:6c:3f:c5:7c:8d:e3:23:17:cf:d9:ec:1e:67:27:29:
1c:24:54:a4:91:5e:ec:27:0f:a3:24:f7:64:e1:d8:8c:8e:2e:
76:fd:1a:18:a3:06:94:00:db:2b:fe:bf:c8:a1:5a:d9:b4:51:
2c:e0:4e:31:d1:45:3e:1d:58:e2:12:34:81:77:48:c6:62:15:
19:af:71:47:a3:80:e4:16:7d:fa:e8:01:9c:bd:e4:28:74:7e:
c7:33:89:dc:a1:72:f6:45:78:0f:fd:0b:61:da:f1:3b:fb:a3:
9d:8d:09:16:de:c6:12:f0:9e:38:e4:c4:56:93:53:4a:22:d5:
84:f7:88:a9:82:22:d8:16:28:6d:b7:f4:5f:20:a1:e7:b1:e9:
69:4a:6f:44:0f:1c:18:51:98:b7:a2:ef:b4:ef:50:23:8e:31:
42:45:af:53:26:b3:0e:49:1c:20:df:55:2f:e6:b9:f5:32:8f:
1e:86:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:45 2025 by rpki-client