Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
File: aluKc4anCgzU9gC-dYHe-JRHOkE.mft (raw, json)
Hash identifier: pY6zgms8xhYVBEMIQLnMVWn+I0sMHOAPvDUbCNrUm1c=
Subject key identifier: B5:6A:C9:55:B2:CF:2B:CB:E6:E9:78:DB:4B:26:00:E5:19:E7:09:7B
Authority key identifier: 6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
Certificate issuer: /CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Certificate serial: 01976BF44CD8256040B3C1F17D921176CFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
Manifest number: 06AD
Signing time: Sat 14 Jun 2025 01:01:01 +0000
Manifest this update: Sat 14 Jun 2025 01:01:01 +0000
Manifest next update: Sun 15 Jun 2025 01:01:01 +0000
Files and hashes: 1: aluKc4anCgzU9gC-dYHe-JRHOkE.crl (hash: ldEdXQENNmpDeP5dJBAWqZQAE1QIcPkP2nL6S0EeZoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:4c:d8:25:60:40:b3:c1:f1:7d:92:11:76:cf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Validity
Not Before: Jun 14 01:01:01 2025 GMT
Not After : Jun 15 01:01:01 2025 GMT
Subject: CN=b56ac955b2cf2bcbe6e978db4b2600e519e7097b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:64:8e:8a:fc:99:b5:e3:82:91:6c:b8:db:
2a:e4:fc:35:85:45:85:84:25:09:18:e7:10:08:48:
06:b7:e0:60:07:98:92:b3:df:85:46:7e:36:e5:90:
00:ed:bc:c5:c5:3e:f7:b0:f9:49:ef:4a:19:33:9a:
d2:37:e2:90:75:21:20:4c:69:dd:97:99:9a:a0:ff:
3c:6b:d3:73:6e:f4:7b:e0:8c:d5:5c:c5:60:c1:7b:
ad:50:4c:b8:86:fd:4a:d7:d5:75:76:79:e4:1e:49:
74:3d:a6:af:d7:f5:ea:fe:9c:9c:aa:7f:2e:2c:9f:
f9:77:23:cb:ba:12:21:19:63:0d:1b:b3:37:3e:a2:
60:57:59:3b:67:0d:54:84:46:7e:ed:24:4f:df:d4:
a0:33:90:96:3f:fe:b7:bc:28:3d:92:b4:d3:bb:2a:
1e:58:73:b3:cc:ec:9b:6e:07:44:47:57:da:59:98:
c4:7a:02:01:43:e8:92:39:fd:4a:0a:19:65:77:4d:
9e:cd:dc:d8:dc:63:a3:95:ce:fe:aa:6a:68:5d:31:
ed:32:97:a9:8f:bb:de:53:67:0b:b8:66:c2:99:29:
a2:1c:46:72:ef:4c:ac:8b:45:b2:b4:d7:62:1a:b4:
fd:fa:af:96:49:3d:a0:65:4e:b4:7e:ec:b4:5e:7c:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6A:C9:55:B2:CF:2B:CB:E6:E9:78:DB:4B:26:00:E5:19:E7:09:7B
X509v3 Authority Key Identifier:
keyid:6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:71:39:eb:2c:3e:c8:7e:43:e6:ed:58:22:81:0d:5e:16:06:
d8:fd:64:53:d2:45:da:e7:fc:81:f3:05:3a:4a:9b:f1:ef:e9:
61:22:60:e4:7e:35:17:33:d4:d7:c6:d7:be:b7:1e:d4:d7:d4:
3c:21:f1:8e:68:6a:ff:f9:4f:82:c1:4b:fa:7b:d6:6f:d9:55:
e2:be:9f:20:93:58:ab:3d:b3:b0:ab:34:9c:51:3b:d9:6e:c7:
8e:4d:b5:39:3d:4b:fc:65:f9:d7:48:86:2c:04:70:8b:58:6a:
9c:01:3b:2a:20:01:6a:95:22:5c:4e:9f:08:d7:f9:9d:d5:90:
ef:b1:49:29:b2:68:63:31:93:f0:bd:c4:22:e3:f6:e4:68:85:
22:c0:00:4c:00:a6:e1:ea:43:07:7a:82:97:07:95:51:27:07:
77:88:10:2d:fb:37:b2:d2:e3:a1:ef:08:d5:71:0c:02:f4:19:
0c:36:af:c2:89:0e:77:8c:81:19:f2:1a:75:64:13:5e:91:32:
5b:89:ee:86:cf:90:3e:1e:68:43:c3:00:c1:bd:29:46:7e:2f:
e1:5b:b7:0e:e3:0e:11:d7:8c:59:60:de:dc:e7:e3:5e:69:d8:
a9:bf:75:7e:54:01:83:53:75:3d:9f:31:8e:da:00:43:f2:4d:
75:48:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:22 2025 by rpki-client