Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
File: aU0ylbrOkvvFQHllxly2WWm60Cg.mft (raw, json)
Hash identifier: auXc0HxiWY+3ouHZfjt4Y4lMy7QNIJXFLJUBMLn3tEI=
Subject key identifier: 81:56:C3:A8:52:99:A8:C8:0E:15:F3:AC:E9:EC:EA:62:93:97:D1:EB
Authority key identifier: 69:4D:32:95:BA:CE:92:FB:C5:40:79:65:C6:5C:B6:59:69:BA:D0:28
Certificate issuer: /CN=694d3295bace92fbc5407965c65cb65969bad028
Certificate serial: 019769977B856A049C77968AEEF23C263FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
Manifest number: 8B
Signing time: Fri 13 Jun 2025 14:00:24 +0000
Manifest this update: Fri 13 Jun 2025 14:00:24 +0000
Manifest next update: Sat 14 Jun 2025 14:00:24 +0000
Files and hashes: 1: aU0ylbrOkvvFQHllxly2WWm60Cg.crl (hash: pkvva6Bpuf2MgxLVDhUgtBXH4z9oKBmGMbkQga1k0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:7b:85:6a:04:9c:77:96:8a:ee:f2:3c:26:3f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694d3295bace92fbc5407965c65cb65969bad028
Validity
Not Before: Jun 13 14:00:24 2025 GMT
Not After : Jun 14 14:00:24 2025 GMT
Subject: CN=8156c3a85299a8c80e15f3ace9ecea629397d1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:e8:de:64:83:92:68:a6:e1:f2:dd:3d:39:
3d:ca:23:2c:44:5d:1d:8e:79:28:4b:45:58:73:e8:
51:1a:44:df:e0:5c:19:1a:43:1e:2b:75:5d:19:59:
51:ac:46:7d:78:12:d3:9c:5e:36:28:2b:27:f3:b9:
f3:12:02:a6:a8:cd:2e:1c:6b:9b:6b:47:63:22:81:
ec:10:d3:e9:cf:ab:bc:dc:c6:d9:ed:de:af:b9:ce:
a1:13:e0:95:ef:21:29:b1:ec:d5:57:10:1d:a4:96:
62:b1:7d:0a:4d:91:48:b1:9b:c4:59:3c:25:63:17:
7c:11:38:b2:47:23:4e:f1:d5:63:2d:e7:09:78:96:
1f:f2:95:3f:51:66:96:3d:c9:11:59:6a:a1:da:3c:
63:0e:bf:d2:fb:86:a3:b5:8a:95:01:20:5c:9e:be:
1e:63:6d:1b:f0:dd:43:f3:a5:b8:d5:b8:56:45:54:
83:96:94:0c:eb:5c:f5:fc:a3:d5:a1:4d:13:79:b2:
bb:55:ce:e8:9b:1f:b8:e4:00:65:cb:8f:ea:33:85:
60:1c:c0:4d:c2:ff:43:4a:ee:48:fd:ab:73:d1:5a:
72:fe:f9:0d:c0:d1:12:ac:35:7e:75:e9:dd:68:60:
82:f4:fc:d6:53:a3:a6:55:d0:a3:72:43:58:e3:2f:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:56:C3:A8:52:99:A8:C8:0E:15:F3:AC:E9:EC:EA:62:93:97:D1:EB
X509v3 Authority Key Identifier:
keyid:69:4D:32:95:BA:CE:92:FB:C5:40:79:65:C6:5C:B6:59:69:BA:D0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7c:5b:b7:be:19:3c:2a:62:98:39:61:14:13:a5:59:fb:5b:
04:c3:36:4e:e5:53:75:f8:aa:38:56:69:05:51:93:fa:e7:7c:
d0:e6:ed:75:ee:ce:a3:ae:21:d5:bd:f8:04:3c:22:c8:4f:dd:
b2:19:72:f6:8c:21:6d:7c:6c:9c:8a:42:27:c9:2a:8f:a5:c3:
13:cf:ff:cc:48:98:d5:f4:6e:95:58:ad:56:51:ee:25:76:a7:
55:2f:53:89:23:2a:21:90:a5:5c:f7:b5:7a:69:de:a7:a0:8b:
9c:63:0b:d6:fe:cf:e7:e5:89:9e:28:77:21:01:87:80:fc:86:
e0:b6:7f:fa:f6:bf:a2:0a:a1:00:77:4a:59:4b:3f:d3:ad:3f:
af:07:c9:25:76:86:7a:07:2f:97:06:af:73:5e:52:b8:0e:dc:
67:4d:c4:cc:9c:c4:46:05:cb:c7:00:8d:64:18:e2:65:ba:f3:
8f:51:20:9b:15:6c:63:9c:cc:3c:73:07:2b:21:bb:5a:f1:39:
72:d5:f6:52:c7:4c:ec:ec:34:e4:82:1c:23:1a:c5:b7:ec:be:
5b:d4:62:bf:94:1d:b8:0b:d7:66:ae:13:b0:a5:d2:5a:ba:7d:
91:51:fc:64:94:f9:9e:6e:3c:11:d5:c0:ac:e7:e2:ea:14:b6:
2e:3a:96:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:24 2025 by rpki-client