Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: t9Z9pTL61muPl25wAAXmch2QXU319oK/3h6Jkz3lm08=
Subject key identifier: 11:23:5A:1D:75:2E:9F:93:EE:C6:96:8D:0C:82:C5:8C:98:ED:60:BB
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 01976D3DAF19DBC80D888A7D58EA720FFD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 1522
Signing time: Sat 14 Jun 2025 07:00:48 +0000
Manifest this update: Sat 14 Jun 2025 07:00:48 +0000
Manifest next update: Sun 15 Jun 2025 07:00:48 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: b90rTIKM7wRNBSog+qoXFYUPXsZHZIq5e1IjS+UKAUE=)
2: c3cfCpPele1fDi8UyS3_TO9IOZU.roa (hash: x4G7KBYVMCONibc2Rol9WiF29BGQsdbC/SUMmPlKdpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:af:19:db:c8:0d:88:8a:7d:58:ea:72:0f:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Jun 14 07:00:48 2025 GMT
Not After : Jun 15 07:00:48 2025 GMT
Subject: CN=11235a1d752e9f93eec6968d0c82c58c98ed60bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:06:5b:02:d5:ba:16:3f:b1:63:ad:5b:79:
cb:fa:27:99:93:1a:5c:5e:10:a4:a0:e3:3e:9c:6c:
62:36:84:e1:06:54:e1:c9:bd:de:9d:c9:eb:14:2b:
91:49:f2:3e:e2:ff:aa:33:fe:62:38:d9:a3:45:73:
cc:30:9b:7b:0d:f9:be:de:cf:37:a1:42:4f:65:34:
ed:62:8d:de:ef:8a:66:73:ac:07:4a:66:03:ad:74:
e3:e9:8a:24:5c:e3:36:36:1c:fb:3c:aa:b8:01:f9:
17:a3:51:d4:90:93:4d:72:50:08:9d:0c:b9:42:af:
76:15:7f:c6:50:a9:3e:3c:03:14:d4:49:1d:9e:49:
14:ed:bb:90:da:1e:ad:e9:dc:72:88:dd:81:d8:53:
12:51:02:51:8d:38:81:90:be:50:8e:19:31:dd:25:
c1:24:6b:46:c6:1f:6e:0c:92:c0:aa:db:b8:82:e1:
3d:19:3c:4c:f5:de:8f:5c:d8:b9:09:d7:12:0d:76:
7f:8a:bd:4f:95:34:62:eb:59:5e:1e:57:32:c8:6e:
4b:04:3e:ea:cb:d7:09:7d:71:2b:cf:cc:4d:83:2c:
fe:ae:a0:19:79:d7:5d:44:b3:ce:d3:8e:dd:68:af:
48:b4:82:d8:12:60:30:d2:60:dd:30:e6:5e:21:8d:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:5A:1D:75:2E:9F:93:EE:C6:96:8D:0C:82:C5:8C:98:ED:60:BB
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:75:48:f7:67:8b:5f:7a:d9:23:4b:33:a9:cd:92:81:fc:f5:
b6:06:c0:6c:55:37:b7:b0:1e:5b:96:3c:c8:e0:98:68:62:ca:
1d:ee:ad:7e:9d:55:8b:14:27:3c:5c:86:28:16:13:5b:03:27:
83:58:22:f3:92:7d:ef:e6:3a:b8:a0:d7:c8:67:96:53:fd:f7:
db:bb:4b:22:3b:c6:90:de:43:4e:2d:6f:26:61:11:7f:57:ed:
10:18:3d:02:ff:69:8b:01:cb:cd:d0:fb:c9:57:3f:9c:0a:28:
60:0c:34:d2:cd:17:3d:85:44:cb:8a:86:27:e7:4b:4e:47:00:
37:98:39:a8:52:89:63:f4:9f:59:35:b6:a3:cc:74:50:0d:84:
db:01:43:20:0c:65:62:7b:b5:ce:1b:89:7c:ae:18:c9:54:c0:
66:0e:1a:e6:ec:2f:f2:3a:0e:0c:db:35:23:3b:e5:2d:8e:7f:
29:68:ac:fd:83:32:e1:71:ae:95:e6:88:4f:9b:c7:8e:63:2b:
2e:a6:99:0b:db:b1:86:b5:61:e2:b6:b0:35:c9:82:22:9b:fa:
56:c8:22:66:1f:a3:86:7d:15:9a:2a:33:7c:f0:cc:fd:da:d1:
71:96:19:f1:aa:8e:52:97:8e:b2:89:40:f9:db:b4:b8:bb:2b:
2e:7d:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:05:21 2025 by rpki-client