Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: JM3Ag72GH0ahbY2dUQTg8ZdZd8vGPF9ZD1rvsX5Mf88=
Subject key identifier: 68:E8:2F:7F:41:9E:BE:E0:5B:DE:09:7F:DB:CE:DA:FC:96:F8:77:06
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019749311C449EC42C22A4FA1EC8C147F952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 07:00:44 +0000
Manifest this update: Sat 07 Jun 2025 07:00:44 +0000
Manifest next update: Sun 08 Jun 2025 07:00:44 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: i3rDEv+iFjVwJNtfeFVXb6k1PpxZGiwnWwSSDUk45Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:1c:44:9e:c4:2c:22:a4:fa:1e:c8:c1:47:f9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Jun 7 07:00:44 2025 GMT
Not After : Jun 8 07:00:44 2025 GMT
Subject: CN=68e82f7f419ebee05bde097fdbcedafc96f87706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:a8:f2:98:4d:c9:fe:b8:f2:ea:9d:91:1f:
2b:c8:a5:e4:e9:39:25:8a:4e:23:ac:8d:f0:66:1a:
ea:28:58:18:a0:6e:d1:7b:bf:ce:cf:b0:23:12:25:
35:af:8e:a3:ef:67:fb:1e:2b:c5:91:97:d7:63:28:
a6:b6:3f:f5:7f:6b:b0:f4:51:0b:55:e6:4e:03:d2:
21:04:94:22:ac:a8:b3:a3:62:ad:e9:43:f2:73:54:
78:20:c7:a4:c4:61:3d:05:c1:38:c0:72:73:82:24:
d7:3c:0b:42:f0:44:81:2c:01:64:5e:d3:97:c4:fe:
8d:b5:09:49:70:02:28:8b:0f:36:85:7c:3b:3a:d3:
23:f4:4a:93:72:c0:d6:b4:de:46:cd:e2:7e:c6:b5:
c3:ca:7c:10:11:e7:a5:df:e9:1d:46:07:b4:fb:f2:
e4:e9:33:10:c0:8a:2b:ed:3d:c2:de:f7:75:33:88:
d2:39:d5:c0:de:21:73:09:8f:d9:83:d2:87:bb:90:
4f:85:32:cd:47:3c:82:84:09:53:cb:93:0d:af:c5:
14:1e:85:ea:6b:f1:28:b8:c4:6e:66:00:37:a7:04:
37:40:25:1f:f4:b0:c0:e1:ec:26:63:23:27:70:08:
5b:11:42:29:f6:02:8a:9b:05:18:e6:9e:0b:16:60:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:2F:7F:41:9E:BE:E0:5B:DE:09:7F:DB:CE:DA:FC:96:F8:77:06
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:27:d1:98:65:4e:8c:d3:a3:57:61:5d:e8:8d:a9:a5:7a:0f:
ff:9e:9a:5a:c1:6a:a3:94:ec:37:84:c1:83:51:18:4a:04:9b:
d4:6e:2c:08:1f:73:87:5f:c6:2c:75:3f:52:43:7a:77:75:50:
3c:7a:c0:2d:15:6b:7d:f6:72:61:5e:a0:52:5c:d3:bb:07:d6:
b7:85:b3:48:e5:40:0e:34:f8:0e:f6:2d:e0:c5:d8:f6:3d:5c:
34:68:24:81:bc:ad:e3:4a:d1:ec:30:41:94:36:95:6a:9d:10:
00:e3:64:d5:07:60:68:1b:dc:4f:8a:10:15:ed:db:ce:09:2b:
61:08:69:4c:c6:5a:9a:8f:93:fa:ae:ef:29:63:0f:ec:ac:ab:
32:81:fe:e4:3a:79:88:3c:95:f4:5a:bd:94:60:20:91:58:32:
fe:ee:d9:d2:c2:93:7e:50:99:6e:50:ea:db:69:7f:81:2c:c0:
57:77:52:99:cb:b6:55:0d:1a:d2:cd:94:15:8a:64:54:60:24:
70:17:d3:d0:39:16:bb:a1:88:46:a4:d8:a5:cb:a8:24:be:7f:
97:62:9f:0a:f4:c1:5e:85:19:26:47:80:6b:e1:2e:9e:37:1c:
11:01:6c:21:4f:df:a9:61:1c:3f:8b:61:3c:bd:cc:d7:77:2a:
bf:a2:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:34 2025 by rpki-client