Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: lCUEuQieuHpu0Hdm1HyDHbNzljnH71DSfk2dwHj3Hu8=
Subject key identifier: 69:AA:0A:59:30:61:A7:2D:C2:CE:18:17:AE:BC:2A:63:0C:05:41:45
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 01974A7B6842563ACECBB78B63DEA062CB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:01:30 +0000
Manifest this update: Sat 07 Jun 2025 13:01:30 +0000
Manifest next update: Sun 08 Jun 2025 13:01:30 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: kqmpznDOFBhM4x7eTsHtTjVew0VEFDMvZXuvgD5G9Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:68:42:56:3a:ce:cb:b7:8b:63:de:a0:62:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: Jun 7 13:01:30 2025 GMT
Not After : Jun 8 13:01:30 2025 GMT
Subject: CN=69aa0a593061a72dc2ce1817aebc2a630c054145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:08:40:5b:81:a4:03:6a:3d:d4:95:a6:9c:
81:89:1f:d3:51:42:50:06:b3:d2:d5:e1:4a:eb:a0:
95:7f:3c:78:1e:4d:59:54:41:aa:f7:f5:fe:b7:6a:
60:15:06:b5:c9:36:56:99:c2:c3:29:45:2a:3c:3e:
b4:4b:94:f9:d8:97:3c:a7:67:6b:b5:5a:1f:2f:18:
52:2d:3a:3a:60:64:99:67:8c:10:08:08:1f:3b:56:
bd:e4:45:5f:a6:b0:7f:53:a0:5e:03:76:39:8a:f9:
ae:08:86:b4:f7:bf:d5:8d:aa:6b:93:b2:6c:0a:c4:
ec:de:2c:6d:b3:02:e2:88:cc:1a:4a:03:a6:0e:b2:
8f:7a:27:da:da:96:c3:c2:17:69:00:c2:c8:7d:d6:
2a:c9:e4:05:1d:5f:2f:94:45:91:03:6d:32:6f:1b:
64:9e:c4:69:21:1f:01:28:eb:3f:77:55:2d:a2:64:
b3:b1:23:03:af:9f:75:2a:0e:98:d8:d0:ee:3b:3e:
7b:d3:0a:bc:f1:5d:f2:da:96:eb:ae:0c:c3:92:9a:
f9:b9:4d:fd:29:2a:e0:ec:35:af:63:03:a7:35:4e:
2c:23:99:ff:c0:fd:6c:c4:f6:87:28:e7:99:fb:ae:
7d:04:ba:d2:15:b6:d0:28:1e:3d:9f:42:0f:98:48:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AA:0A:59:30:61:A7:2D:C2:CE:18:17:AE:BC:2A:63:0C:05:41:45
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:26:c7:c6:79:18:9e:02:21:d2:32:6b:aa:38:bb:56:4d:ec:
55:a7:51:c5:3d:e3:92:31:9d:0e:13:d0:d1:7a:6a:b2:1a:9d:
bf:be:f8:95:2c:01:33:9b:c6:44:40:32:f4:18:1c:59:ca:36:
c8:0c:e1:ad:82:69:d4:da:4f:9e:8e:5f:5d:b4:99:03:6b:29:
de:51:83:7f:9e:35:f5:e0:bc:2a:14:27:08:4e:21:0c:59:80:
0e:2d:1f:4f:c1:60:33:8d:17:3e:b6:07:ca:46:21:43:c0:b0:
19:c5:e8:da:34:11:62:da:d9:76:3a:dd:b0:04:13:41:b2:74:
ec:26:8e:10:22:b0:f0:83:bb:8b:a3:e4:06:74:48:46:b5:50:
48:b6:7d:49:65:25:1b:3d:c2:52:da:0c:e4:af:68:2b:72:97:
50:89:e6:d2:1e:79:4d:43:f9:90:56:9d:dd:6b:80:8e:16:10:
73:94:6c:fc:d2:87:fc:d4:7f:3d:61:90:22:82:3a:bb:e1:48:
68:04:75:5f:f6:16:65:71:da:c2:36:af:19:f4:0c:91:bd:2c:
73:e7:b0:26:37:f3:4c:c9:df:97:97:6b:27:fa:7b:9e:5c:76:
28:c4:18:59:3f:22:98:dc:15:08:24:d7:db:fa:0c:2d:5b:42:
1e:cc:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:32:31 2025 by rpki-client