Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: 7U19LLokKe3uSfpdgXkiJ7ZoFBe9VgdW3RjzQJ720Jw=
Subject key identifier: 62:61:87:93:E8:DD:61:4E:E2:D8:AB:E4:ED:90:95:C1:00:DB:2A:80
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 0197692A027F963F8EAC51AFB8CE92708C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: 020E
Signing time: Fri 13 Jun 2025 12:00:50 +0000
Manifest this update: Fri 13 Jun 2025 12:00:50 +0000
Manifest next update: Sat 14 Jun 2025 12:00:50 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: wDCM+jjWs+/j7JvGZHsgr2M0bggnfFLkb2Tr+v1D0aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:02:7f:96:3f:8e:ac:51:af:b8:ce:92:70:8c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Jun 13 12:00:50 2025 GMT
Not After : Jun 14 12:00:50 2025 GMT
Subject: CN=62618793e8dd614ee2d8abe4ed9095c100db2a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:b1:44:96:0d:23:56:ce:c0:7a:8e:dd:88:
f2:6f:0e:ca:3b:c7:1c:62:e0:66:90:db:91:8f:0f:
cd:4c:6b:e4:4d:7b:3b:66:ac:9d:4f:30:0c:fa:81:
8b:51:6f:06:0c:cc:1d:b0:73:b4:53:1e:ba:9a:0c:
0c:93:55:96:c5:8f:83:3a:cc:a2:0c:27:93:37:ed:
30:d9:be:4b:03:00:65:51:1c:b7:bd:8c:76:e0:77:
32:1d:d3:ef:5f:e9:0b:31:a2:a9:f3:2f:94:46:e7:
98:20:1e:dc:1a:ce:19:f1:74:86:cb:5c:f4:11:81:
85:2b:99:28:d3:89:65:1a:26:1c:71:8b:f6:34:56:
f0:28:f4:83:13:ff:29:d9:fa:9f:b5:f1:ca:0e:61:
23:f8:cd:1a:02:7a:12:c8:a7:79:90:5e:ee:d3:9a:
75:dc:83:93:e4:3c:8f:f1:4a:c5:c7:cf:03:0a:ee:
79:8e:57:ff:bc:03:6f:12:23:a5:8b:38:47:cc:aa:
6f:f7:78:27:f2:92:54:2d:1f:f3:96:fe:fa:15:f5:
df:a4:0b:cf:07:8e:6f:c5:7c:10:7b:21:88:92:13:
4f:0a:aa:85:76:79:f9:06:58:b4:f3:6c:13:e8:fe:
4c:27:f1:ba:d1:4e:16:e7:ec:83:97:8d:bf:de:3a:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:61:87:93:E8:DD:61:4E:E2:D8:AB:E4:ED:90:95:C1:00:DB:2A:80
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:14:a1:e4:de:fb:6b:6e:19:60:99:35:03:09:e7:ad:69:57:
96:50:55:13:94:3a:7b:19:97:f3:c9:28:eb:a7:c5:9e:f7:d7:
f5:55:d3:d4:db:61:b8:73:a7:bf:55:19:a2:2d:33:b2:07:e4:
2d:3b:e8:eb:ed:25:c1:2f:f7:c8:62:12:01:08:7c:fe:e9:a4:
41:78:1a:af:ec:e8:13:91:7e:5b:7c:9a:31:57:b3:e0:df:7f:
cf:bd:94:9b:a5:69:bf:f7:cd:1f:03:5f:5e:b8:13:06:5f:82:
e6:0e:34:3c:97:d1:ad:9f:63:6f:57:9d:cd:32:d3:ee:1d:ad:
b2:f4:29:4c:86:65:76:9b:fe:04:5a:86:20:77:2c:07:9b:6d:
4a:a6:11:cf:12:e9:62:a0:7c:8e:1c:49:60:6f:27:33:ed:a5:
2c:a2:6c:84:64:4d:03:70:62:9a:92:f0:0d:07:16:79:fe:d3:
0a:cd:cd:64:fe:33:ad:18:4a:00:b4:8b:fd:fa:bf:82:fa:be:
26:bb:38:32:17:92:82:96:9b:74:d8:d9:55:20:88:12:5d:4b:
a1:ef:9b:67:e2:7f:8c:cc:02:81:af:32:02:74:02:1d:0d:ae:
8b:19:db:31:32:ab:c9:05:7b:4a:8b:bb:3e:1e:9d:fb:75:43:
90:87:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:20 2025 by rpki-client