Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: J5oe/2A2L3i5T9PsD3jmQO3PDSbyid+00JwQK/j/Xyk=
Subject key identifier: 1A:8E:7A:F1:C1:05:BD:8A:CF:78:4B:C9:A4:F1:1A:D2:25:46:B9:72
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 019745F8E06B4E1B78AB1E3584C387FEAF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 02A1
Signing time: Fri 06 Jun 2025 16:00:27 +0000
Manifest this update: Fri 06 Jun 2025 16:00:27 +0000
Manifest next update: Sat 07 Jun 2025 16:00:27 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: Qqu29BQX8ap1RtleApuPOLv9iDffObxlox0CBxS+TL0=)
2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:e0:6b:4e:1b:78:ab:1e:35:84:c3:87:fe:af:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Jun 6 16:00:27 2025 GMT
Not After : Jun 7 16:00:27 2025 GMT
Subject: CN=1a8e7af1c105bd8acf784bc9a4f11ad22546b972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:82:0c:03:c0:25:06:23:38:08:6b:ca:42:
87:f9:a8:29:c3:18:71:0f:a7:bf:3a:32:8f:66:28:
ba:2c:a0:bd:39:e3:47:90:f4:d5:83:4c:66:f0:b2:
bd:a9:4d:f8:ea:73:d2:0f:bc:b5:3a:c8:79:5b:3c:
86:17:8f:fa:31:cf:d3:03:a3:41:e2:10:c8:1c:fb:
8a:8c:ee:9d:de:bd:39:5c:9a:1b:2e:f8:4e:d8:17:
f1:8a:c8:62:dd:5a:36:4e:b8:63:e9:76:3a:ba:0f:
d0:ef:ba:f8:55:0b:82:5d:83:7e:80:60:80:e8:66:
ba:0e:a0:5c:d4:4c:bb:da:a2:61:5b:12:f2:c3:08:
ab:dc:42:f7:ee:55:1a:78:67:77:01:96:e9:e6:e0:
bf:3d:85:aa:21:0e:46:cb:8d:28:61:36:31:ed:61:
6d:10:4b:e6:05:6e:cb:2e:44:58:83:8a:1e:c5:c2:
a7:35:e3:93:07:ab:59:83:6b:37:0c:f4:51:27:71:
89:b9:1c:d6:03:73:3b:9c:62:dd:6a:da:42:95:59:
bd:a4:7b:b7:34:35:15:d0:e7:c6:80:c2:fb:e8:a9:
27:7d:7a:d3:3c:30:c7:7e:b6:09:1d:7b:e5:47:a2:
b4:bf:83:dd:ea:e9:73:4a:c0:2f:9f:17:6a:47:d3:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8E:7A:F1:C1:05:BD:8A:CF:78:4B:C9:A4:F1:1A:D2:25:46:B9:72
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:84:99:62:d2:71:dd:ea:e6:d9:d7:4d:f5:95:01:0c:5d:d6:
8a:00:24:e9:25:1b:46:21:b0:09:41:99:bb:4a:74:d9:c6:c0:
e9:73:7b:b0:bc:d1:67:31:8d:08:0f:ec:5c:3d:15:55:37:fb:
18:ca:96:cd:a8:df:e6:24:5c:1b:e2:9e:9d:56:f4:50:3a:66:
9b:ae:ef:3d:43:5c:cc:19:84:e5:2b:02:3e:b2:63:27:5f:f7:
15:b6:e3:ae:f1:fa:02:9b:ac:e4:31:24:04:0a:98:2b:01:78:
dc:11:48:5e:8f:14:9d:76:82:cc:63:f9:72:3b:48:8d:97:fb:
b8:49:42:e8:b3:63:1b:d4:f3:2b:3c:04:66:e8:88:29:62:fd:
9b:f1:2f:17:36:26:a6:21:4d:a3:90:ac:03:23:1e:a6:ca:ad:
2e:dc:da:63:c2:bd:bb:4e:dd:b4:e3:0a:9d:a3:a2:15:69:09:
5e:2d:fa:b4:56:c2:0b:0b:78:91:f6:2a:f0:51:e0:6f:41:e5:
2c:ce:db:4c:10:a7:89:82:c0:5a:62:4d:8c:39:de:77:a3:e9:
80:a0:59:b9:c5:2b:69:37:97:1c:31:07:4e:34:66:23:2e:dd:
b3:68:74:3a:fd:09:71:79:5e:d4:57:c6:ab:cc:53:0b:a7:60:
ce:ce:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:31 2025 by rpki-client