Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
File: aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft (raw, json)
Hash identifier: ByVpsbNk7Y2HKhbZQV4ZhcYs/vL7yi6wjsRbSdFMu4k=
Subject key identifier: 55:16:94:DE:E5:A6:1D:36:1F:EC:C0:BE:90:88:FC:E8:52:D7:9C:3B
Authority key identifier: 68:A7:47:2D:53:28:40:95:90:5A:DE:20:3C:AF:91:1C:D1:AC:17:71
Certificate issuer: /CN=68a7472d53284095905ade203caf911cd1ac1771
Certificate serial: 0197850F09062EAFF5822F599EBC381A234E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
Manifest number: 0241
Signing time: Wed 18 Jun 2025 22:00:44 +0000
Manifest this update: Wed 18 Jun 2025 22:00:44 +0000
Manifest next update: Thu 19 Jun 2025 22:00:44 +0000
Files and hashes: 1: aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl (hash: DFfsgaMaYk6biVkoG2SN3Znj+3RrK0LWiY7dL2ir3T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:0f:09:06:2e:af:f5:82:2f:59:9e:bc:38:1a:23:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7472d53284095905ade203caf911cd1ac1771
Validity
Not Before: Jun 18 22:00:44 2025 GMT
Not After : Jun 19 22:00:44 2025 GMT
Subject: CN=551694dee5a61d361fecc0be9088fce852d79c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:07:93:8a:2b:0c:22:1d:11:8c:02:b4:a6:
8f:69:d3:f1:11:fd:b2:11:62:5d:3c:a5:7c:7e:c9:
eb:7b:28:ea:19:ec:7f:98:c0:ed:76:54:d6:53:17:
c3:29:9c:ca:cd:54:45:a5:66:98:13:79:a7:57:55:
89:bf:0d:60:0e:93:5b:30:1a:58:39:5d:dd:e0:52:
eb:54:9c:06:88:1a:26:36:ba:a6:98:c0:6a:bf:9d:
a9:e0:d0:1e:40:37:7f:ae:e2:39:c2:62:a8:51:e7:
36:3d:3c:c8:2d:ca:b6:44:29:88:40:d4:73:84:bb:
7d:a4:2a:cd:e7:3f:2a:5b:4a:37:c3:4c:2b:c8:75:
80:73:1a:a2:ef:e5:b2:51:c9:c4:7b:31:7b:ff:e2:
08:b2:a6:09:5d:f0:2d:98:be:70:d2:0c:a2:09:f8:
21:5c:77:a6:a1:5a:0d:37:0f:a6:91:d0:4c:39:f3:
32:e2:3d:ca:0f:5c:7f:ff:3f:db:b3:81:40:76:e2:
5f:72:c1:eb:eb:32:6d:92:ca:19:a8:72:56:b2:0d:
0f:de:c4:ba:5d:ac:ce:db:1a:d4:31:b8:4f:9d:00:
b4:86:16:3d:ad:05:21:6c:e5:60:5b:f9:90:6b:c9:
9c:7d:19:58:24:7f:cb:1d:c6:e1:c9:b9:ce:b8:7e:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:16:94:DE:E5:A6:1D:36:1F:EC:C0:BE:90:88:FC:E8:52:D7:9C:3B
X509v3 Authority Key Identifier:
keyid:68:A7:47:2D:53:28:40:95:90:5A:DE:20:3C:AF:91:1C:D1:AC:17:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f4:79:61:b3:56:31:2b:10:17:15:1e:10:c3:aa:28:97:c9:
58:78:f8:dc:74:61:cc:b3:d1:ae:01:c3:0a:c5:32:e2:ce:6a:
80:4b:ac:82:35:96:bb:43:3e:af:c6:7c:59:1c:b3:ec:d8:d8:
37:6a:6f:66:69:87:d4:f0:bf:2d:f0:0b:cf:c8:ef:4b:d7:09:
25:4f:ed:be:0b:6b:be:7b:04:7d:78:fb:55:4f:e5:69:a0:32:
e0:02:88:24:35:23:48:a2:06:1a:e8:2f:a9:31:5d:1c:7a:fc:
2f:78:9b:c4:8b:c1:66:13:e3:96:20:f0:8b:e5:0b:ac:c9:7c:
cd:a6:c2:48:0c:79:bc:c8:25:fe:84:31:88:8e:ff:1b:ec:a9:
ed:cd:1c:85:a3:c2:66:4f:53:42:8b:7e:39:10:4b:7f:65:23:
7f:90:35:12:d9:7a:70:df:5a:a3:b2:ae:fd:a8:17:88:99:1d:
3a:fa:d5:1b:e7:67:49:c3:49:36:dd:9d:9f:25:d5:3e:46:9d:
74:9d:2f:4b:31:c6:e6:2e:07:07:26:81:34:ab:d1:9d:e8:2f:
dc:24:37:af:42:11:ee:a3:18:d8:d7:59:85:6a:0c:d9:ab:c5:
09:e7:40:5c:50:c0:75:c8:c7:4e:df:84:ca:37:10:f0:a5:2c:
3f:ed:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:57:44 2025 by rpki-client