Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
File: aAImjB8WbJ31GjQgRbsTLw-WyC0.mft (raw, json)
Hash identifier: skxGoF6Dy+X4YPmVtUgysOkXTUnjowCm+UtHtxD11Ss=
Subject key identifier: 05:98:8C:F5:8A:6C:D1:67:D6:FB:59:B9:58:46:21:C1:91:41:45:B4
Authority key identifier: 68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D
Certificate issuer: /CN=6802268c1f166c9df51a342045bb132f0f96c82d
Certificate serial: 01976F2BE60A3C580003413C286F338BCFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
Manifest number: 0B12
Signing time: Sat 14 Jun 2025 16:00:37 +0000
Manifest this update: Sat 14 Jun 2025 16:00:37 +0000
Manifest next update: Sun 15 Jun 2025 16:00:37 +0000
Files and hashes: 1: aAImjB8WbJ31GjQgRbsTLw-WyC0.crl (hash: 6NsXUfSYQI/oP4J/4JMirrHR9eIRtZVSjIJTfF6VwTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:e6:0a:3c:58:00:03:41:3c:28:6f:33:8b:cf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6802268c1f166c9df51a342045bb132f0f96c82d
Validity
Not Before: Jun 14 16:00:37 2025 GMT
Not After : Jun 15 16:00:37 2025 GMT
Subject: CN=05988cf58a6cd167d6fb59b9584621c1914145b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:3a:69:21:5d:9a:bd:8c:56:89:19:fd:ec:
4f:f9:39:fa:87:79:42:82:79:0e:8b:63:5f:6b:3f:
f3:8c:76:b6:3c:77:a3:8b:9b:a3:64:59:ca:90:54:
f9:80:6f:4d:fe:94:f0:3f:f1:29:f2:c1:d3:0a:4c:
16:05:78:b9:34:e0:e2:b7:4d:0b:26:36:5d:ad:e1:
33:72:44:11:3f:f4:ce:7e:ed:0b:04:6e:15:08:1a:
6b:61:a7:87:37:b3:a1:39:ca:26:d2:e3:d0:2e:c8:
91:f8:35:fb:6d:b8:be:64:b2:4d:4c:53:d9:d8:58:
57:6c:9d:e1:4d:21:ef:2e:bf:4d:ae:1c:a6:74:ee:
f5:8b:0b:3e:9f:e0:6b:e0:a8:26:3f:4a:b9:8f:02:
45:8f:34:1c:0e:54:fa:bf:33:29:93:9e:47:5a:cc:
f2:25:35:93:29:1d:b0:a0:06:71:8e:f0:1c:ef:14:
31:7b:16:1e:27:9c:cc:58:13:1f:59:b9:f3:22:14:
03:10:5d:dd:93:62:e9:43:30:1e:6b:44:36:0b:92:
03:0e:94:a5:cf:d5:f4:6b:d0:d5:f5:56:dc:fe:17:
5d:7e:4c:f1:3d:a8:4e:61:8a:d6:fe:17:63:48:ed:
7b:14:72:c6:92:77:c7:9f:99:a0:8a:bd:90:83:a4:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:8C:F5:8A:6C:D1:67:D6:FB:59:B9:58:46:21:C1:91:41:45:B4
X509v3 Authority Key Identifier:
keyid:68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5b:f1:35:14:7a:9b:8d:5d:90:76:63:ba:aa:bc:0c:fb:38:
ce:b9:c2:57:b7:df:34:b9:a9:db:ca:6d:0f:fe:28:1d:a9:98:
95:fc:da:9c:a9:53:1e:dd:d4:5b:b2:56:c4:b3:ad:5e:ef:4e:
7f:7f:50:4f:73:b5:4b:04:51:49:0f:7d:25:a1:46:89:12:fe:
67:f1:18:c4:3a:c7:7b:79:04:67:a9:e7:62:a1:25:ee:71:96:
12:68:65:25:6a:40:42:98:2c:e7:6b:58:5a:2b:df:26:ab:ba:
6b:9a:85:46:61:74:05:54:15:09:6f:00:8e:5b:57:4d:bd:f0:
8a:fc:a5:1c:68:de:78:f7:de:6a:fd:f8:20:53:ce:92:d2:75:
d2:b5:d1:8a:99:52:38:bf:9e:3e:df:f6:68:4f:d2:80:33:8e:
b0:89:be:4e:81:b6:8a:e5:26:c7:54:0f:77:90:71:c1:19:e5:
cf:53:f8:3e:76:a0:27:29:e3:18:e4:53:01:02:13:2b:d6:26:
73:fd:73:88:2b:8c:7f:70:b4:52:99:da:d8:2b:34:c1:27:f9:
24:06:1e:63:53:0d:52:ac:55:79:d7:b5:4f:59:60:52:38:b4:
c1:23:fa:e7:67:c4:71:e0:c5:25:f9:1d:72:90:ee:d8:a7:2b:
c9:f3:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:09:36 2025 by rpki-client