Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: Cwcgny0bKb+JiUm6qBp5CS7NOCzlVuZSizJ204j3JlY=
Subject key identifier: 12:F5:52:1D:30:A2:DF:07:EC:F8:91:F1:2C:18:45:1B:60:A3:CC:62
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 01976F2BC33F6D83928CC6E467A28EEDEFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: B7
Signing time: Sat 14 Jun 2025 16:00:28 +0000
Manifest this update: Sat 14 Jun 2025 16:00:28 +0000
Manifest next update: Sun 15 Jun 2025 16:00:28 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: dHRplFNBKpFAUGwBxy1Fj0ctzRNKCx91Ul+eHtCDqPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:c3:3f:6d:83:92:8c:c6:e4:67:a2:8e:ed:ef:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Jun 14 16:00:28 2025 GMT
Not After : Jun 15 16:00:28 2025 GMT
Subject: CN=12f5521d30a2df07ecf891f12c18451b60a3cc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:46:9d:56:5b:2e:8f:0c:4a:22:93:dd:eb:
a8:bb:bd:dc:25:2f:77:0f:19:79:f2:8c:90:5e:09:
eb:f0:64:77:c7:b2:7b:b4:82:a0:22:0a:6f:3a:7a:
1b:08:c9:fe:fc:c3:a4:d9:91:ed:0b:f6:f2:75:3e:
08:f6:56:b8:a0:8a:ea:3c:7a:33:57:71:31:c6:73:
b9:af:2e:52:da:38:e0:85:ce:b1:aa:6f:b5:92:87:
94:7c:77:56:bd:05:8f:fc:33:ee:1f:cb:e2:93:39:
7b:4f:c4:e7:a7:2f:83:34:ba:9f:e2:6e:d9:6f:c8:
9e:d7:43:30:7f:e1:87:db:ef:94:8a:51:ca:b6:e1:
96:16:70:95:c7:a9:81:66:d8:c0:48:a3:0e:9d:68:
a3:8b:b8:19:5a:38:a7:1b:ce:9e:2b:5e:4c:0a:49:
ed:3f:32:40:5f:9f:81:b0:b1:c5:85:e9:90:23:c6:
1a:61:74:f6:1b:92:7a:ce:7b:9f:f7:4a:fc:92:87:
6d:8d:c0:8c:c3:16:a5:b0:52:5b:58:81:b6:d1:e8:
29:0d:d5:7d:5b:62:4b:47:06:da:3b:dc:1c:bb:2d:
c2:10:aa:77:e3:fd:d6:c2:04:2f:f6:d9:ce:9a:0d:
23:66:d8:09:fe:e7:12:87:06:26:fc:f5:bc:91:70:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F5:52:1D:30:A2:DF:07:EC:F8:91:F1:2C:18:45:1B:60:A3:CC:62
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:90:23:d4:7f:41:de:8e:df:81:e8:3a:22:3e:71:cf:13:72:
68:6d:29:5c:ee:12:97:ad:89:b1:9c:3e:ef:cc:6b:c9:f8:15:
13:54:c4:b2:2e:70:1f:d9:eb:57:f9:49:2a:35:26:e0:0c:5f:
bd:8c:f7:4a:06:9e:1c:7f:d0:03:9f:27:33:4d:39:3f:90:ea:
f2:eb:93:37:af:3d:27:dc:04:ec:a1:07:0b:6d:65:f9:d4:28:
38:dc:9d:60:54:e1:f1:fb:e9:c9:74:a5:39:dd:8c:02:30:3a:
38:ae:a3:59:2c:8d:74:d4:76:02:f7:7e:e3:cd:c6:c9:7e:29:
ba:5b:09:6d:da:f6:93:ee:9e:fb:75:95:c9:f0:8e:22:c9:ba:
2d:72:ef:a2:84:79:ea:39:d7:79:7b:06:78:64:ee:3e:e7:f2:
8e:e8:fd:1f:8b:eb:df:c5:4d:b6:82:05:a2:e5:6e:cc:1a:ea:
52:db:ab:37:72:59:6a:2b:e0:a7:1b:6b:e9:25:e8:bc:1a:75:
1f:61:e2:4a:fb:29:bc:2d:31:60:cb:50:3e:c6:ac:8c:3e:b0:
36:0d:77:c7:2b:ba:96:a8:f4:f1:ce:64:75:41:09:c0:85:12:
44:33:08:1e:9a:e8:fd:15:21:fe:a3:d6:35:9f:4e:b4:01:96:
56:ea:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:54:46 2025 by rpki-client