Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
File: AlAYGVXVQR9QbrpCutueWqXdhEM.mft (raw, json)
Hash identifier: dErYa3p6WtYBRO6eROe4nCNRWE5o4XjeBLsxOIXAG44=
Subject key identifier: 2C:2B:2A:72:CC:8F:7B:F5:53:35:94:7F:14:08:21:F9:5C:A4:AA:1D
Authority key identifier: 02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
Certificate issuer: /CN=0250181955d5411f506eba42badb9e5aa5dd8443
Certificate serial: 01976BF43060260B85C2C2764D22420AFA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
Manifest number: 123A
Signing time: Sat 14 Jun 2025 01:00:54 +0000
Manifest this update: Sat 14 Jun 2025 01:00:54 +0000
Manifest next update: Sun 15 Jun 2025 01:00:54 +0000
Files and hashes: 1: AlAYGVXVQR9QbrpCutueWqXdhEM.crl (hash: zx8wmlJruPOgt1xt+j/aLvcURKYFz5kDnasRfwKdiQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:30:60:26:0b:85:c2:c2:76:4d:22:42:0a:fa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0250181955d5411f506eba42badb9e5aa5dd8443
Validity
Not Before: Jun 14 01:00:54 2025 GMT
Not After : Jun 15 01:00:54 2025 GMT
Subject: CN=2c2b2a72cc8f7bf55335947f140821f95ca4aa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:8a:8e:1c:5a:69:e1:ff:96:ff:6c:4c:8a:
e0:01:61:a6:aa:74:e3:0b:5a:1b:6b:e2:7f:81:a5:
f3:e7:c7:b6:95:3e:3f:f3:b1:ba:80:a5:b0:cf:69:
09:42:4c:87:36:6b:1f:85:b2:1c:5e:ba:9f:9c:e1:
93:42:bb:d2:88:8e:49:cb:48:a7:e6:07:d0:c7:4d:
f0:62:ff:55:24:e3:4c:45:f2:31:71:56:7c:46:fc:
89:2e:0d:08:0a:3c:f0:60:ca:57:ce:d1:09:2e:cc:
ea:c6:15:5f:2e:e9:78:c4:a1:49:f3:2f:4e:f6:60:
17:54:66:d5:37:2c:b3:e3:b0:e7:06:d5:94:49:c0:
6a:14:61:45:0f:c2:f3:56:ed:d0:6c:bd:9b:f8:37:
56:77:b7:12:f2:89:49:ec:47:9e:31:ef:6e:3d:ef:
33:e3:da:48:51:ef:74:a9:73:fd:62:2a:db:e3:4c:
ff:c2:6c:ad:a2:8b:13:e8:0c:de:b6:11:f2:41:05:
13:94:e9:7f:1b:58:5b:c7:41:c7:4c:a9:fc:51:b7:
9b:07:42:fa:80:2f:c5:8f:21:e7:6b:dd:a8:01:8d:
7f:2b:0c:58:06:1b:ac:16:56:ca:26:ea:d8:0a:96:
4e:b1:7b:67:6f:d0:1b:85:c0:d7:20:1a:db:4c:2c:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:2A:72:CC:8F:7B:F5:53:35:94:7F:14:08:21:F9:5C:A4:AA:1D
X509v3 Authority Key Identifier:
keyid:02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:78:fa:ac:33:f9:22:12:f1:98:cb:49:b4:50:c9:f8:70:9a:
83:08:19:ee:fe:f8:42:9f:b1:55:39:11:3e:d2:58:5b:3c:d0:
94:94:1c:50:5a:a3:7a:b3:b0:ba:31:4a:0a:2b:72:57:74:80:
89:53:32:c6:e5:13:89:4a:f1:44:6a:59:e0:b2:4c:c9:44:8e:
f5:7f:77:15:55:6b:7a:fa:28:f2:fa:c6:12:60:98:ee:2d:2c:
e7:28:71:7c:06:a4:45:86:e6:10:8c:fc:03:6e:c2:ee:09:55:
67:eb:89:b2:3f:e1:95:1b:62:2b:5d:4a:50:9f:4c:d8:65:90:
f1:15:e5:d8:13:09:32:31:24:b1:e0:12:23:4c:28:30:b0:5f:
95:cd:af:8f:df:b7:36:59:9e:6e:8b:42:77:b1:9b:09:ab:53:
e5:8f:7b:6e:69:e0:6c:f6:0b:0c:9b:6d:31:c6:65:b1:ed:d4:
13:2c:bd:30:ab:27:da:83:8f:0e:6a:0a:08:2d:b7:29:4b:3b:
08:2b:4a:39:cd:bb:07:b4:cf:d8:4c:80:10:50:e7:02:0d:e4:
24:95:47:bf:4d:bc:f5:c1:b8:ac:e1:15:37:9f:73:f3:94:30:
ff:26:97:81:48:50:f2:f0:55:e4:f4:32:39:1d:e1:3e:a3:19:
ee:06:82:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:48 2025 by rpki-client