Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
File: AlAYGVXVQR9QbrpCutueWqXdhEM.mft (raw, json)
Hash identifier: yiafTjQ7vtzzu+o5eQsBi+2L2mcma9ppJGdsezpJTsY=
Subject key identifier: FC:22:47:9E:F9:1C:AD:4E:C4:66:1F:81:30:AA:95:F5:69:E9:00:25
Authority key identifier: 02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
Certificate issuer: /CN=0250181955d5411f506eba42badb9e5aa5dd8443
Certificate serial: 0197493180EEFE8BB1B3AAF49533ADC629EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
Manifest number: 1228
Signing time: Sat 07 Jun 2025 07:01:10 +0000
Manifest this update: Sat 07 Jun 2025 07:01:10 +0000
Manifest next update: Sun 08 Jun 2025 07:01:10 +0000
Files and hashes: 1: AlAYGVXVQR9QbrpCutueWqXdhEM.crl (hash: fNY+nJaciVSwFbyu4pTX0GeUtPEs+mQEJii1/nDZG9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:80:ee:fe:8b:b1:b3:aa:f4:95:33:ad:c6:29:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0250181955d5411f506eba42badb9e5aa5dd8443
Validity
Not Before: Jun 7 07:01:10 2025 GMT
Not After : Jun 8 07:01:10 2025 GMT
Subject: CN=fc22479ef91cad4ec4661f8130aa95f569e90025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:1e:23:15:5d:4c:b5:12:b7:d2:b0:9b:e7:
bd:21:63:47:21:78:87:af:7b:af:90:ec:15:bd:4f:
4d:4d:4f:6d:11:c1:9f:ac:ad:d5:a5:d2:22:5c:ec:
4e:60:ed:21:9e:47:27:c9:f2:b5:30:06:5a:c8:99:
2f:40:db:ee:cc:f7:1c:8e:c4:5f:48:1b:47:0a:77:
de:87:e1:27:7c:04:6d:67:a0:d1:31:fd:ab:a2:78:
b4:d8:80:ba:14:a1:5c:b9:d1:06:f7:76:3b:56:f9:
fd:b7:88:c3:c3:6e:31:a8:a1:0c:29:2e:13:b2:2f:
ba:03:dc:3c:ff:0c:16:ff:40:99:e6:d4:0c:5e:85:
9e:9b:51:fb:4c:c0:42:f8:0c:67:2b:56:59:de:19:
63:c8:a7:a2:07:21:af:c1:3d:d5:6f:8d:99:cd:cf:
8b:30:b7:6d:f5:b2:91:bd:06:20:69:f0:dc:06:8a:
4f:5f:3e:53:f8:da:6c:b1:f6:5c:f4:7d:e9:a1:6e:
26:88:01:67:f3:73:b1:2e:b0:99:ba:b4:75:f0:8a:
f4:b5:2f:ca:e7:e1:e0:09:6f:97:a5:3a:2d:41:94:
ab:4f:4b:01:bb:85:36:f0:09:ab:36:24:eb:c1:ff:
20:56:0d:2e:7b:b9:0f:49:45:4c:f8:1d:0b:45:e8:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:47:9E:F9:1C:AD:4E:C4:66:1F:81:30:AA:95:F5:69:E9:00:25
X509v3 Authority Key Identifier:
keyid:02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a4:b2:5d:c5:3d:37:df:11:19:fe:06:9e:89:71:6b:9b:d9:
dd:7e:54:a0:98:6d:d8:fe:a1:9d:4b:32:4d:f6:c8:0f:39:09:
27:9c:d7:26:3c:72:85:f3:8a:70:8b:ba:ae:65:ad:2e:6e:45:
86:ee:21:b7:e9:4a:52:fd:7f:55:c9:23:63:76:c2:2c:5e:c9:
5a:d1:e7:bd:75:63:9b:a5:bb:a1:3b:5a:5f:12:56:f7:21:23:
8d:53:c7:87:4c:57:f3:e0:f4:fd:72:d2:2c:23:82:8c:6b:1c:
08:ac:b1:a0:73:a2:0f:9d:aa:ee:4d:c0:7b:c2:84:b9:f9:8a:
5f:60:54:38:24:b9:78:04:69:81:16:f7:eb:f0:95:fd:6d:a4:
4b:a9:7f:c6:ec:9d:6f:6d:ed:c3:18:a2:2e:8a:a7:9b:21:b1:
cc:be:57:6b:a9:98:68:4f:0e:f5:89:3e:66:a7:0f:98:50:ab:
51:bb:1e:87:61:19:e3:ee:b1:ed:20:ea:f0:38:48:c8:97:69:
c6:eb:dc:28:9d:91:dc:42:63:ab:32:c6:83:41:72:3d:4f:b6:
8b:33:ee:6d:b2:bb:12:22:db:a1:e4:7e:6f:26:2d:3c:33:1b:
cf:de:6a:77:36:78:bf:53:86:e4:52:4b:31:69:e9:dd:f0:06:
5c:f6:5b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:30:44 2025 by rpki-client