Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: PrbS7RwMoBewob3uPZCVxEhZPoo4zVTiU3fft8kKpbU=
Subject key identifier: 8F:7E:F1:FA:EA:8D:7B:9A:76:0F:4F:3B:FD:F2:C2:B4:B3:FB:A2:93
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 01977865F0EC63DA7904141437752F79D692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 0431
Signing time: Mon 16 Jun 2025 11:00:36 +0000
Manifest this update: Mon 16 Jun 2025 11:00:36 +0000
Manifest next update: Tue 17 Jun 2025 11:00:36 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: Nk4obAft3mCtbymUWKKJx0A6LZHZRK/zlGnmOt6zA2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:f0:ec:63:da:79:04:14:14:37:75:2f:79:d6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Jun 16 11:00:36 2025 GMT
Not After : Jun 17 11:00:36 2025 GMT
Subject: CN=8f7ef1faea8d7b9a760f4f3bfdf2c2b4b3fba293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:12:05:49:b1:12:5a:64:70:ee:af:08:99:
44:fb:88:39:f4:4c:7c:a0:6a:35:7f:5e:10:14:3a:
23:b9:06:9f:6a:45:a2:e2:a1:21:48:b6:52:f8:af:
ef:35:d8:c8:f5:30:38:97:84:8c:0e:d1:19:6d:71:
14:ce:99:36:57:df:1f:c8:9e:c4:e3:3c:45:12:bd:
74:3e:44:b7:cb:51:c0:06:09:dc:95:dd:13:d4:6f:
8b:59:aa:24:7d:5a:b0:40:21:f5:a1:40:08:a0:f3:
74:f9:f2:36:78:34:47:1e:55:b5:33:62:f9:68:7b:
5c:6b:8a:3f:c0:2e:09:fb:09:eb:10:2f:5a:3b:37:
63:73:7a:c8:b2:c2:11:fa:85:45:a5:32:0d:20:bb:
47:33:bb:a0:ad:5f:92:32:d9:9d:f9:4f:f1:2d:38:
0f:40:7e:9e:79:80:fc:17:10:64:d3:1b:ec:c9:38:
e1:9d:53:d3:5b:a9:9b:b7:37:e0:79:fa:23:6a:2f:
17:3f:43:62:f4:d1:b8:3e:5e:b9:76:ed:c8:16:8d:
32:0d:de:26:83:c2:9b:14:3a:34:a6:81:bc:2c:83:
0a:90:c1:85:2e:f5:25:ef:e8:9d:49:42:f2:c0:51:
5f:0e:46:23:39:19:5c:d4:a1:10:d6:85:72:59:a9:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:F1:FA:EA:8D:7B:9A:76:0F:4F:3B:FD:F2:C2:B4:B3:FB:A2:93
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:10:ba:d7:e4:f0:b8:25:43:16:74:56:56:8b:34:9a:c8:c9:
c1:80:73:e1:03:76:05:f8:83:27:57:74:3b:53:79:e6:3a:6f:
56:58:3b:08:68:2e:ca:51:f7:1f:dc:99:e2:39:5d:a6:61:2a:
5e:62:19:8d:a9:4f:b4:95:29:7f:95:28:00:06:8f:97:ec:3f:
32:44:90:f0:50:49:1e:03:0c:00:5d:57:e0:32:4e:56:83:7a:
3e:fd:78:c1:f4:ad:06:df:00:75:03:27:38:e6:5b:b5:dd:58:
73:b8:e0:94:3b:b6:5b:22:79:f7:a5:08:87:fe:59:32:b5:a2:
2d:0c:ab:05:27:33:5b:d8:8d:d7:5e:38:76:3e:93:5c:7c:2c:
85:55:2a:c7:42:e2:e3:ad:b4:08:79:58:72:7d:03:35:8b:76:
03:6d:11:de:79:77:87:05:dd:f7:b5:61:1f:49:ce:b5:7b:ed:
c8:14:27:a5:bd:dd:5a:3c:2b:e0:5e:72:24:e8:de:89:bc:bf:
f2:a0:70:91:3b:f7:f0:74:88:48:2f:2b:46:9d:59:04:9c:db:
a4:f0:8c:1e:93:a4:16:87:39:ef:0c:73:8e:bd:8a:7c:e2:74:
d7:ba:05:48:1b:a8:0e:15:f6:ed:c0:c4:8a:55:97:26:b6:68:
31:ef:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:10:48 2025 by rpki-client