Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: w7mVDZVGflq1PV7KMMcCzm4x1FmHSD+yny/AP03ltjg=
Subject key identifier: 78:18:AF:EA:B2:BC:00:FA:D2:EE:85:94:04:F0:E7:39:B0:ED:3F:24
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 01974AB1ADD5318A85F7F053AF080C0A4E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 62
Signing time: Sat 07 Jun 2025 14:00:47 +0000
Manifest this update: Sat 07 Jun 2025 14:00:47 +0000
Manifest next update: Sun 08 Jun 2025 14:00:47 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: 6MIrxGeT6KSWaG4dzO8HbgoTn1y9hdN7C7Fu81BwXio=)
2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:ad:d5:31:8a:85:f7:f0:53:af:08:0c:0a:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Jun 7 14:00:47 2025 GMT
Not After : Jun 8 14:00:47 2025 GMT
Subject: CN=7818afeab2bc00fad2ee859404f0e739b0ed3f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:f4:37:7f:8b:ff:8d:39:35:89:a4:e9:36:
b3:32:da:c6:64:02:4e:04:fb:f4:2f:84:7e:ad:0f:
b0:6e:b8:aa:da:cf:12:ff:1b:72:12:4e:80:e7:a8:
2c:54:bc:87:d1:d0:b9:29:b0:09:65:42:23:0c:c3:
f9:c3:49:45:0d:35:0b:ab:c9:9a:0c:8c:80:24:69:
25:6e:4a:a4:06:5f:53:2e:3e:ec:b4:b7:c7:5c:ad:
ec:cc:f1:06:7e:bb:15:7e:7a:ce:f4:dc:35:cd:3c:
a6:c9:84:95:1e:f6:8c:bb:01:0f:c1:f8:cb:85:1c:
85:54:c7:8b:85:22:4c:71:7a:20:d5:13:1c:3f:7f:
ac:bc:48:fd:00:85:a0:da:cc:9d:69:2e:80:77:66:
32:97:9e:04:8b:9c:11:1c:bf:a0:b6:f6:4d:9a:c2:
2d:2c:14:ad:d5:32:ab:1b:3a:48:73:38:e0:06:fd:
63:31:e8:dd:0a:4e:0c:b1:43:0e:e9:27:0c:52:96:
c7:b0:f6:65:a2:bc:9f:9a:55:a3:cf:4c:60:c1:15:
51:1e:b5:af:7d:10:3b:a8:a9:8a:dd:e4:af:fb:00:
bf:ed:4f:48:b0:a8:fd:1d:9c:b9:8f:60:97:64:67:
ae:64:6d:0e:14:34:15:b0:94:7f:ce:35:ea:69:12:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:18:AF:EA:B2:BC:00:FA:D2:EE:85:94:04:F0:E7:39:B0:ED:3F:24
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:91:b8:05:d2:25:92:70:89:63:b0:dd:6b:36:65:6e:db:54:
ec:f9:67:b6:ab:16:2a:b3:54:5c:ee:46:6f:cb:f7:ab:27:11:
55:58:94:42:2c:df:a6:99:df:18:fb:d7:01:9a:5e:62:ae:e4:
8f:10:e4:13:6b:da:bf:27:80:24:e2:d2:e2:47:6f:5a:96:4e:
19:c4:f6:c1:86:06:44:6d:e4:e6:1d:d3:09:7e:6a:b1:69:97:
fa:56:f0:d7:85:79:6e:d8:5e:4f:20:76:0b:39:df:4c:02:f4:
b5:39:d7:cf:78:57:df:a8:4b:2d:ce:2c:3a:d0:13:0d:09:8f:
ca:7d:ee:6c:30:26:db:69:b8:c0:40:8c:d2:d6:78:fe:79:35:
61:f9:65:08:22:e8:9e:8a:10:42:4e:03:f1:b2:24:bf:e8:69:
3d:f0:12:6d:8f:7b:e2:3c:5c:ec:82:df:d3:da:1c:71:de:2b:
8c:7e:17:77:82:b6:21:b0:f9:09:6b:9a:9a:c3:ed:01:44:5f:
6d:d7:e1:6c:68:8e:cd:e5:5e:bb:b1:3f:23:db:47:4a:f5:66:
76:fc:6e:fa:08:62:a6:b2:1d:9c:90:50:16:1e:d8:81:22:ef:
c3:c3:a6:33:b6:cb:14:b3:f8:ef:3f:1f:4c:4d:d3:4d:bb:1c:
c5:17:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:12 2025 by rpki-client