Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: GpysKsMwq78sWbpvoKrwWPd/BV12Rsf9UswHwIjwngA=
Subject key identifier: B6:0B:CA:6F:99:40:D8:3A:0B:B6:D8:47:94:0D:18:85:24:19:66:68
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 01976F62D019E86EAE1F885FE0FF61D9B84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 17:00:36 +0000
Manifest this update: Sat 14 Jun 2025 17:00:36 +0000
Manifest next update: Sun 15 Jun 2025 17:00:36 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: yv5MEF9LtPfxtdPnJH78uX5kKG4SDMM3NrU7DgAdTus=)
2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:d0:19:e8:6e:ae:1f:88:5f:e0:ff:61:d9:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Jun 14 17:00:36 2025 GMT
Not After : Jun 15 17:00:36 2025 GMT
Subject: CN=b60bca6f9940d83a0bb6d847940d188524196668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:3c:a9:b6:73:e6:7e:dc:35:8a:d3:58:c9:
da:ec:04:88:48:f8:e7:2d:73:89:77:32:7f:d6:e3:
ea:dc:6a:d8:e6:54:ff:43:06:ce:39:6d:07:67:7f:
ba:ff:0e:4e:93:28:04:24:85:d6:4a:a5:62:b5:f1:
68:a4:72:6a:ee:3c:d4:eb:9c:16:87:26:90:2b:d2:
69:9b:02:3e:f0:bc:20:9a:ef:d9:43:97:27:f9:0c:
67:00:ac:bc:b3:46:62:f8:01:01:1b:aa:79:4a:17:
d8:07:b7:8c:b0:ec:44:9a:26:e7:ae:2a:15:dc:4a:
6e:45:38:48:d8:bb:a6:8d:94:00:e3:0f:6b:3e:9e:
17:66:b4:1f:4b:d5:b2:27:e7:72:8c:1c:84:ab:76:
52:38:87:2d:cc:dc:06:b2:7b:84:ab:a2:c2:d6:e3:
b7:40:d9:0e:90:5b:cc:6e:63:57:c0:74:7d:e8:78:
18:e7:0f:3a:3a:83:f4:98:99:c0:53:29:3e:b4:0a:
6b:0e:39:e4:7a:e6:b3:b0:75:cb:8f:9d:d4:a6:7d:
a4:dd:9f:c9:5b:e7:93:1f:9b:1c:78:5e:53:bd:dc:
f7:98:ab:d8:8b:70:75:3a:b9:97:50:27:4f:c6:84:
26:24:11:b9:fe:e2:8a:a8:71:39:d1:84:ba:36:89:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0B:CA:6F:99:40:D8:3A:0B:B6:D8:47:94:0D:18:85:24:19:66:68
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:13:b6:70:19:0a:07:f7:64:d3:c6:09:05:2d:30:19:b0:00:
7a:97:6d:92:0d:b2:1d:f1:d4:dc:f7:3f:86:eb:d6:9f:8f:8a:
b5:78:a6:3a:71:93:3a:a5:ab:f8:ed:16:1b:a6:3f:57:a5:1f:
37:63:a3:56:69:b5:27:4b:19:be:eb:ae:23:49:3a:cb:7e:88:
c0:28:6a:41:fe:fa:20:e7:e6:44:3f:72:4e:61:0e:4c:e1:02:
e5:40:30:73:ef:b6:cf:87:1e:65:ff:ea:45:db:1b:09:b1:7b:
05:ee:c4:8a:15:02:ea:18:1c:88:6b:05:ba:f4:24:21:a4:51:
b1:1e:6b:09:91:aa:0d:97:a1:b4:cf:8d:24:f3:4b:d7:d9:27:
3f:3c:5c:3d:f8:9c:a3:15:0a:6c:99:d9:a3:b7:c0:ac:7b:97:
fc:e7:62:e7:2c:00:2b:ec:c7:db:69:52:4c:55:3f:04:cf:07:
8c:2e:a3:5a:c3:5a:44:d1:41:0d:82:29:a4:a3:88:9d:e8:c9:
87:7c:eb:1b:33:45:fe:c8:27:1e:f5:cd:25:cf:a4:d2:ac:f1:
fd:98:7b:44:c1:38:bd:6d:0d:96:8a:10:29:7a:86:f1:79:95:
9c:c1:96:fc:7c:f8:83:3a:aa:09:4d:91:a5:51:72:42:3f:59:
c2:ab:9e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:22:29 2025 by rpki-client