Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: vIiF/cP17M2aw7+mL22m+iuOmOVJFOxq8a+0IhOmLfU=
Subject key identifier: F1:1C:6E:77:79:46:F1:19:33:A1:9F:3F:ED:F9:65:2A:0C:0A:07:B6
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 019750464578853B26D103FEBE8631BB09BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 0921
Signing time: Sun 08 Jun 2025 16:01:11 +0000
Manifest this update: Sun 08 Jun 2025 16:01:11 +0000
Manifest next update: Mon 09 Jun 2025 16:01:11 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: cBw9qAZzmwKDGqGvwbaI7Oo0RzMJ0TtMM0IRk5h7UMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:45:78:85:3b:26:d1:03:fe:be:86:31:bb:09:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Jun 8 16:01:11 2025 GMT
Not After : Jun 9 16:01:11 2025 GMT
Subject: CN=f11c6e777946f11933a19f3fedf9652a0c0a07b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:83:f3:f2:85:b8:77:aa:60:dc:f4:f7:52:
34:6a:42:e9:78:76:df:2d:06:fa:b7:69:6e:38:bf:
dc:6a:ee:97:11:2a:bb:c0:2a:bf:59:6b:92:db:75:
3e:35:44:0f:92:68:23:e8:81:46:bf:cc:f5:7d:86:
27:37:41:e9:71:76:6e:ff:e1:93:21:d4:9f:7e:43:
52:6d:7e:72:41:80:47:43:f6:1e:1e:46:56:3c:57:
43:19:39:71:13:d8:f4:7b:88:9e:39:e1:4d:96:3e:
67:f5:8a:d1:78:16:e3:ec:41:15:85:0d:a0:84:e3:
fb:c7:00:d2:21:4e:42:7d:69:e2:76:3d:55:c4:e3:
66:38:5d:64:f0:ec:54:04:b8:5e:a0:b0:a7:a5:87:
6f:7f:6a:92:ed:86:2d:73:95:56:71:a6:5a:22:56:
08:e8:69:9f:85:c1:99:4e:50:d7:11:8d:ee:41:79:
4e:44:f1:73:8e:7e:0f:76:1f:de:13:e7:c4:39:58:
14:3d:5d:9e:f4:4b:de:ab:16:57:c6:58:fd:70:3e:
91:d4:67:ae:ee:0f:4a:1d:16:e0:ff:23:19:fc:4e:
64:8a:ba:a9:33:c1:45:9f:d3:b9:7c:c1:0f:8d:bd:
10:5d:a2:11:36:c8:dc:4c:d1:f1:f4:2a:df:51:41:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:6E:77:79:46:F1:19:33:A1:9F:3F:ED:F9:65:2A:0C:0A:07:B6
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8d:f2:e1:bd:81:94:50:08:6d:09:05:e4:cb:15:88:32:e9:
a6:8f:28:bd:0d:b2:33:60:ec:ee:0c:17:d5:6d:ba:fd:9a:d0:
53:98:f0:cb:02:0a:be:88:38:f5:10:ac:28:99:48:1c:1a:95:
69:bd:35:08:cf:18:53:1a:31:37:da:59:2c:23:80:18:76:44:
1a:09:bf:4f:dd:f2:d6:e7:3e:f5:d7:6a:52:23:b8:9a:fd:02:
c3:80:c9:dd:7b:90:4e:00:91:e5:9d:11:c7:8e:88:7c:0b:15:
4d:c8:4b:62:61:bd:ec:a3:82:38:db:ee:ba:f4:e5:c1:98:06:
6c:97:c0:61:b2:45:84:fd:94:c0:f7:68:8d:c8:90:ca:6b:e5:
8b:e7:c9:6c:e3:dd:ae:79:29:55:99:a9:2d:69:f4:90:6c:ef:
ed:27:12:75:fc:01:7c:63:d9:65:3e:7e:50:50:df:f9:3a:d4:
da:59:c4:2b:78:4b:d0:84:5d:b7:d3:22:25:c5:49:7a:be:58:
6a:52:ed:1a:ac:dd:8f:dd:61:bc:48:25:06:03:8d:2f:af:0c:
b1:1e:7d:24:ea:03:e1:c5:74:86:3f:f1:24:fc:4e:3f:4d:af:
44:d5:87:27:9d:6e:c5:55:3a:9b:8c:16:f8:86:57:c9:0d:c0:
b8:c5:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:07 2025 by rpki-client