Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: unnsEeK+eb46luamW+CSC2gzodZjGYHi0dhZ+w5i1Oc=
Subject key identifier: 4A:1D:1E:E0:84:E6:23:0E:6A:1E:11:80:18:02:31:C0:47:45:CE:48
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 01976F2BFF6F3CB975752DC4CB2843111392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 16:00:43 +0000
Manifest this update: Sat 14 Jun 2025 16:00:43 +0000
Manifest next update: Sun 15 Jun 2025 16:00:43 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: 8KH3PbdiEOesyv2iG9kh3V1+PjQ5GLt474Pu8BkjYLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:ff:6f:3c:b9:75:75:2d:c4:cb:28:43:11:13:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Jun 14 16:00:43 2025 GMT
Not After : Jun 15 16:00:43 2025 GMT
Subject: CN=4a1d1ee084e6230e6a1e1180180231c04745ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:bc:f6:3c:fb:f2:9d:bf:5b:6a:a9:4a:a5:
50:62:c0:d8:4d:3d:4e:23:c0:fc:aa:3f:bc:e9:22:
9d:c0:37:7c:21:b7:72:e1:5a:b6:49:5e:5f:8e:15:
14:e7:4f:9f:06:16:4e:95:4e:5d:52:fe:88:4f:1b:
7a:26:d4:ba:ff:e2:fa:62:10:c5:c2:40:61:41:ba:
9f:00:7d:84:ff:40:d9:ff:ce:f7:45:2c:33:b1:f9:
91:37:6b:13:c3:a4:85:8d:2a:82:51:2f:a2:33:36:
24:60:32:d5:be:11:82:7d:96:74:71:28:03:60:57:
76:f2:0c:d4:33:d8:87:b5:df:e2:f8:ed:4a:9b:0a:
f5:fd:5e:ac:6b:ab:b5:be:01:33:41:e3:4e:a8:ae:
0c:9c:ae:3b:d1:5b:73:d2:c5:ba:82:24:cb:7b:15:
9e:d2:72:d2:e3:00:c7:f9:70:92:34:b8:f1:d8:7c:
99:46:cd:8b:0f:8b:1c:8a:4d:7e:b4:1a:2f:43:29:
b7:7d:c7:b3:0e:15:68:a7:f8:99:80:7f:fe:00:22:
04:2c:5e:14:3f:b6:04:8d:7d:6c:09:0b:02:51:cb:
48:0b:85:c8:c0:d7:00:dd:77:db:c3:2c:4f:5c:4c:
86:ab:3f:09:74:c8:d1:56:7f:b2:45:3c:30:7c:38:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1D:1E:E0:84:E6:23:0E:6A:1E:11:80:18:02:31:C0:47:45:CE:48
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b4:f4:3e:3b:da:07:ba:c8:5c:88:af:d8:7a:ea:2f:ef:f8:
c4:d0:61:f2:62:f9:80:74:0b:2f:d0:52:9a:33:2c:5d:4c:37:
59:7e:9d:ea:f6:f7:9d:9e:b1:c8:3e:4a:6d:f1:db:c7:b4:ba:
ff:aa:e9:7a:35:fa:29:12:a3:11:93:76:ea:46:8e:2f:50:5f:
8e:c2:6f:5c:26:d8:af:d3:81:89:68:70:52:ec:18:3e:70:ef:
f6:c4:47:cd:76:b8:68:4d:60:5c:83:22:a0:28:38:b6:8d:f8:
a4:aa:e7:38:3a:2f:54:0c:df:76:8c:4a:49:e5:5e:b3:aa:d9:
11:e6:6e:c4:d5:12:92:86:94:97:4d:85:4a:a7:a7:70:9f:dd:
70:75:39:4b:e1:02:67:1b:07:83:10:ad:5d:3d:f7:1e:6d:bb:
aa:fe:0b:57:a0:6a:bd:c4:08:23:df:cb:69:2b:ef:39:11:fb:
d1:69:d9:bc:5a:42:ed:ca:dd:28:a7:a6:df:97:d0:a4:ab:72:
3d:2a:5d:8d:27:92:2b:ee:e3:a8:56:27:73:2e:23:84:a2:49:
78:58:a2:d8:82:10:1a:8a:f4:29:ab:f1:88:a0:2f:e2:51:7e:
7e:6f:bd:77:ce:60:37:27:fe:7d:e4:df:79:03:31:26:e3:b2:
5a:5e:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:12 2025 by rpki-client