Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier: thiU98l336WmPHma/eqmsp8AboJGEpJhvbsdaB+w0tY=
Subject key identifier: AF:C9:54:1B:F3:6E:CB:9E:81:1A:FB:1D:2F:26:66:6D:EF:2D:02:7E
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial: 01977D1EE4F86528C7A7B4FB9CEE6AC9E93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number: 0701
Signing time: Tue 17 Jun 2025 09:01:05 +0000
Manifest this update: Tue 17 Jun 2025 09:01:05 +0000
Manifest next update: Wed 18 Jun 2025 09:01:05 +0000
Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: XF+TWUjXycfnUmiMp8cnwV23+Lwbc3lRmcImTkor+A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:e4:f8:65:28:c7:a7:b4:fb:9c:ee:6a:c9:e9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Validity
Not Before: Jun 17 09:01:05 2025 GMT
Not After : Jun 18 09:01:05 2025 GMT
Subject: CN=afc9541bf36ecb9e811afb1d2f26666def2d027e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:0a:0a:45:5b:83:6b:83:18:1e:9f:19:c5:
59:e6:cd:be:23:97:76:92:65:08:07:71:bb:b1:9f:
d0:05:e1:1e:51:ae:53:14:82:d3:31:a5:5c:af:46:
5a:3e:83:61:3f:cc:06:26:66:f5:4f:0c:68:9c:c1:
b0:bd:48:21:e0:0f:b5:65:ad:81:d8:22:a8:66:3e:
da:3d:b9:be:fb:4f:45:f5:1d:ba:d0:34:00:53:09:
d7:f7:13:96:8e:ed:2c:60:aa:c8:11:c4:5b:37:d1:
85:db:07:ea:ae:aa:30:b0:cd:25:b8:24:71:1b:7b:
0e:de:b5:bc:c2:58:fe:68:34:6c:03:34:de:11:2f:
52:b2:88:a1:75:e4:af:84:22:61:d3:32:82:e8:d3:
92:b2:30:9c:41:4f:77:5c:00:c7:ab:1c:a3:6a:4e:
ed:0e:10:67:b7:84:c8:0a:cc:92:fb:6a:0f:13:73:
51:f1:29:13:72:47:12:53:cd:7a:0a:70:38:c1:61:
cb:ac:cf:6d:5b:12:5a:b8:ac:77:3c:64:d1:b6:e7:
26:8e:cf:4f:4c:df:f7:64:b3:4e:9b:6a:67:f2:8d:
a7:96:cf:79:47:98:00:d7:df:da:34:99:8b:9f:e4:
37:eb:d8:e3:52:a5:6a:26:21:db:f0:3e:11:53:f9:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C9:54:1B:F3:6E:CB:9E:81:1A:FB:1D:2F:26:66:6D:EF:2D:02:7E
X509v3 Authority Key Identifier:
keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fd:d7:fa:fc:d6:84:f0:23:0e:58:08:17:76:28:eb:ce:f9:
2e:42:53:7e:ad:b2:9b:15:85:82:18:5e:32:95:6d:aa:07:d9:
72:9c:0d:7c:da:52:39:7d:1c:04:f9:61:e3:14:bd:cd:e7:a3:
ff:1b:53:34:86:51:52:a8:92:16:fe:16:b7:f0:0e:68:3e:af:
15:b5:65:fe:6b:13:cd:ca:4b:3d:c7:eb:7f:34:aa:51:45:4e:
cb:8a:cb:5c:e8:02:72:86:0e:ec:68:24:26:ff:6e:bc:99:ec:
00:55:06:d2:0c:1f:29:62:ef:c3:70:cc:ef:02:5b:b3:64:cf:
7a:5e:49:80:c6:c8:53:a7:99:a1:90:bb:c9:49:aa:d0:44:aa:
04:3e:bc:43:f7:4a:0a:4e:79:5a:28:bb:9f:b4:7d:df:0c:29:
c3:5f:b9:9e:30:ed:97:b8:92:c5:62:8c:00:bb:2e:6e:12:c7:
e2:25:b3:68:b5:a0:13:fc:ea:a9:b1:8a:04:59:0c:97:b8:2c:
a0:2e:8e:72:d0:5e:b7:2a:8d:3b:b2:c3:33:33:4d:c1:98:16:
12:f0:be:29:03:dc:ab:52:f7:22:b1:bd:07:16:24:ca:d0:c7:
03:cd:3a:d8:d2:e1:e7:31:e4:64:83:c4:ff:69:3a:46:43:f2:
1f:ba:ac:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:19:38 2025 by rpki-client