Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: jxwlYl18yt/V6hECXTdQWU+KzyhSwH1HxXYB/QFH8tM=
Subject key identifier: B3:E3:C1:A8:61:90:4E:51:2E:30:F8:78:F5:2D:05:3D:64:A2:52:60
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 01976D3DB23042AC5E1784A852C4A8EC023E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 026F
Signing time: Sat 14 Jun 2025 07:00:49 +0000
Manifest this update: Sat 14 Jun 2025 07:00:49 +0000
Manifest next update: Sun 15 Jun 2025 07:00:49 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: nbr4o4IXywhId9/eOOJ/ad8YzRsHC3qSyneuruTUrVM=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:b2:30:42:ac:5e:17:84:a8:52:c4:a8:ec:02:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Jun 14 07:00:49 2025 GMT
Not After : Jun 15 07:00:49 2025 GMT
Subject: CN=b3e3c1a861904e512e30f878f52d053d64a25260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:c5:fd:01:f3:75:2f:9d:d4:f3:2f:1f:3f:
63:23:e9:9e:c9:4b:a1:88:67:b0:88:a0:7a:7f:85:
a3:d1:8c:59:65:de:74:f8:8e:8a:1a:ee:f2:df:d8:
e7:23:98:a5:58:b3:c1:22:f2:46:4f:67:3c:99:cd:
e4:10:0f:07:e3:90:2a:de:e7:50:20:3c:f0:bd:c7:
ee:67:3f:e4:a8:e8:d0:ff:79:76:aa:b8:29:37:ac:
7b:8d:05:fc:01:b3:a1:c0:af:e2:3f:b0:92:7b:e4:
b6:a8:0e:39:fe:04:99:69:ae:05:93:0a:84:3b:a4:
3f:00:07:98:b5:be:9e:a9:ec:7d:1d:f9:b4:04:6a:
3e:f2:1e:da:c5:32:17:fd:b3:0d:45:34:61:39:64:
03:27:b9:c4:db:fc:5e:9d:81:c9:44:b8:04:0d:17:
99:50:06:b6:5e:3c:fb:23:5a:80:97:06:7b:72:14:
66:25:00:a8:51:40:84:8a:e5:a2:09:22:c1:84:ec:
91:91:29:cb:34:4c:38:96:f4:1e:76:ea:e2:66:77:
16:55:40:70:0c:48:cf:0a:5a:31:cd:bf:4f:ed:22:
61:93:2d:35:7b:03:44:b8:56:1c:eb:0e:f4:ff:49:
e7:f1:b2:c8:c7:c8:a4:56:3a:33:79:d9:eb:2b:07:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:C1:A8:61:90:4E:51:2E:30:F8:78:F5:2D:05:3D:64:A2:52:60
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:87:7e:f1:f4:b5:d6:ef:db:bc:3b:5f:f4:26:64:56:cf:1f:
75:c6:89:c4:46:c8:0d:96:9a:e8:0c:cb:d6:20:e9:f1:3b:fc:
c4:09:1d:ff:30:b7:54:1a:d6:00:29:38:ae:a9:a8:d2:9a:18:
79:f2:48:bb:9d:a0:de:04:d2:0c:3e:dc:eb:40:b8:22:3f:38:
23:b8:f4:cf:5d:92:25:dc:8d:88:c5:f1:3d:3d:7c:ae:b4:c9:
25:01:19:c7:92:b2:77:5d:f2:6b:e8:e1:a8:1a:8d:e1:71:bf:
72:ab:3b:75:29:39:3f:ee:80:d8:4e:92:a3:a0:3a:11:66:e3:
21:df:4e:b0:f4:5d:0b:71:53:e7:b4:24:dc:7c:a4:1a:bc:7c:
71:90:ac:61:6b:2b:d2:b2:b2:fb:8a:88:88:e9:0f:56:89:fc:
cf:85:c4:d8:c9:4a:2a:54:34:2b:52:f9:4a:c9:d4:52:06:c3:
39:82:b0:d5:c6:78:0e:22:0e:9b:5e:26:c9:a4:23:cf:f9:4e:
25:9d:be:f9:c2:63:72:95:50:7e:6c:f6:91:91:40:63:f2:e8:
1a:7b:25:73:a8:4f:06:0a:d2:dd:de:6c:bb:d3:d4:65:77:f4:
b3:c2:17:71:78:8b:2e:25:fa:62:c0:95:c4:f1:04:a7:0d:df:
d1:c7:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:56 2025 by rpki-client