Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: Iv7Ar/FiFQwWwuRqzC5D3cHo1b0H8NLXlIOfDGamkPY=
Subject key identifier: D3:5A:8A:92:6B:10:BF:FF:3C:07:DF:E3:56:9D:DA:E8:76:44:03:4B
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 01976884EE77F1D76D53F612F52B78A0C7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 04D8
Signing time: Fri 13 Jun 2025 09:00:31 +0000
Manifest this update: Fri 13 Jun 2025 09:00:31 +0000
Manifest next update: Sat 14 Jun 2025 09:00:31 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: YHRSpCPyBlKj0BPKvtB9mx3B2Hm7jmn0XU1R4yFH2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:ee:77:f1:d7:6d:53:f6:12:f5:2b:78:a0:c7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Jun 13 09:00:31 2025 GMT
Not After : Jun 14 09:00:31 2025 GMT
Subject: CN=d35a8a926b10bfff3c07dfe3569ddae87644034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:06:32:29:6f:70:cb:5f:54:a2:5b:4e:bf:05:
f9:b2:89:99:3d:f4:38:22:d0:56:e5:b3:79:e8:71:
6e:ed:fc:66:7b:92:94:b5:b7:f7:4e:03:78:97:e0:
42:bf:54:98:ee:61:4b:1b:4b:d8:40:e7:c0:3a:f8:
a1:3a:74:b3:f1:df:a1:37:46:88:fa:05:cc:3b:5f:
39:22:af:41:53:35:10:72:8e:b0:ec:d1:5c:57:10:
f2:dd:ef:77:f3:30:c8:30:6d:31:46:99:09:1b:e0:
00:61:1a:c0:f3:25:56:45:18:9b:8a:a4:c3:fb:27:
ea:1f:64:c5:13:e4:e5:a1:54:01:b8:f6:b3:2d:db:
7a:a7:5d:27:2f:90:4a:60:cb:7d:cc:1b:05:81:e1:
fa:2e:24:8a:f0:37:b6:eb:15:cd:53:a0:ac:51:0a:
a5:ab:4b:dc:db:80:36:85:86:21:2f:43:07:a4:c6:
fa:64:cc:c9:b2:96:00:3f:54:e0:76:d2:24:66:08:
4f:b5:47:20:c7:a7:c8:3d:60:dc:75:c3:55:ce:45:
b6:a0:4d:b9:ae:1e:1a:d8:05:d3:31:61:1c:3c:48:
6c:b5:db:3f:39:6c:66:28:45:a7:aa:6e:e7:3b:bb:
18:90:1e:02:75:ac:31:1e:3a:66:1e:0e:a6:42:3f:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5A:8A:92:6B:10:BF:FF:3C:07:DF:E3:56:9D:DA:E8:76:44:03:4B
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:c9:26:a1:a2:08:b6:6f:21:6d:c4:6d:84:a3:50:12:fb:
36:cb:eb:23:72:33:02:1d:74:b2:e7:02:91:86:31:4b:89:3d:
4c:86:c8:ee:24:9a:71:22:a1:10:3d:b1:ee:d5:ff:6b:10:9b:
c1:d4:88:ac:0d:30:57:86:57:00:5d:26:f5:e6:28:4f:c0:e8:
b0:25:12:0e:14:92:09:c4:e3:14:ed:7d:41:43:40:ca:2f:e3:
dd:65:38:0b:17:cb:35:d2:07:54:1c:20:45:de:85:c0:23:fb:
f8:db:95:63:73:2a:aa:06:77:40:94:33:23:30:dc:a6:98:c5:
a6:13:55:a7:88:21:00:70:0c:7f:11:bb:51:b7:79:98:20:4d:
4e:08:65:6b:f2:34:ff:8f:81:85:64:d6:0c:a3:3a:6f:f1:ec:
93:54:9b:34:64:63:8c:ff:86:70:c5:6c:5c:fc:e7:79:e0:9a:
13:fb:1a:99:34:0b:16:f9:aa:e0:2b:1c:3f:15:2f:d1:80:1a:
fc:8d:f8:c0:9b:7b:f6:b6:5e:22:87:c3:33:21:ff:12:9c:48:
88:40:bb:e3:58:20:94:8a:51:06:51:66:d8:45:22:2e:27:50:
a7:e9:bd:e8:c2:69:76:1b:59:00:ed:aa:1a:9b:1c:6b:51:9d:
03:f6:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:40 2025 by rpki-client