Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
File: aiElvfZalVLVuOF6s2FaoQuAWXY.mft (raw, json)
Hash identifier: tpS8TFE27oKQ+qJNuGsP6GHrc5vFKVlEaIksji2eLYU=
Subject key identifier: 90:8C:F9:F5:65:FE:EF:C1:DF:9A:E8:BC:C4:93:CF:10:B9:9C:C8:2E
Authority key identifier: 6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
Certificate issuer: /CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Certificate serial: 01987306A04BA9BE08C5D65C1CF55F3DA030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
Manifest number: 0218
Signing time: Mon 04 Aug 2025 03:01:10 +0000
Manifest this update: Mon 04 Aug 2025 03:01:10 +0000
Manifest next update: Tue 05 Aug 2025 03:01:10 +0000
Files and hashes: 1: aiElvfZalVLVuOF6s2FaoQuAWXY.crl (hash: 3sujD5zrd0vpiwPfyJZTZAUifJneR2L45o7AGSa2G+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a0:4b:a9:be:08:c5:d6:5c:1c:f5:5f:3d:a0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Validity
Not Before: Aug 4 03:01:10 2025 GMT
Not After : Aug 5 03:01:10 2025 GMT
Subject: CN=908cf9f565feefc1df9ae8bcc493cf10b99cc82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:e6:30:1a:40:f3:3c:da:2e:ed:99:3d:17:
7b:cd:29:ea:cc:59:1b:10:39:05:d3:53:2a:17:f3:
99:6b:fc:8b:35:ae:6f:42:e5:54:45:ec:cb:df:63:
1c:78:ae:a4:0e:b2:71:20:c2:07:90:9c:21:a5:cd:
e5:6c:c4:6a:f4:5e:63:36:a5:5a:aa:7a:3b:2c:2b:
84:d5:b0:a2:be:da:67:07:47:0c:ac:a3:fa:92:ef:
76:ba:2e:02:ea:5d:84:47:96:74:4e:6d:e8:db:cf:
5d:e3:cb:ce:48:7a:94:e0:f2:9a:49:62:e7:2e:6d:
a2:18:61:b4:dc:73:49:8c:45:32:ef:ff:9c:df:cc:
84:57:2e:db:41:2b:96:71:bf:97:9a:e6:54:14:02:
ca:f5:ca:ba:a2:a0:35:d2:cc:31:31:d8:8f:3f:05:
cd:c8:58:9a:f6:b5:66:03:00:ae:5a:dc:39:76:f0:
e8:4f:4f:00:ee:ec:e6:ff:83:78:f4:69:5f:39:93:
85:70:60:44:8c:70:33:48:6a:a8:10:58:d1:4f:99:
67:4e:a6:74:14:b6:bf:ec:fa:3b:cd:76:c8:89:75:
b7:c3:92:00:3f:9d:ec:90:89:75:92:d8:65:cd:8f:
24:36:fc:73:9d:2a:d0:45:1b:a2:0b:2b:63:02:b5:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:F9:F5:65:FE:EF:C1:DF:9A:E8:BC:C4:93:CF:10:B9:9C:C8:2E
X509v3 Authority Key Identifier:
keyid:6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8b:71:01:38:05:bc:57:bc:3e:5e:d0:d0:5f:a9:60:33:6e:
b5:5a:2e:03:4e:3e:1a:d4:23:b8:34:3f:a1:d9:3f:26:6c:22:
48:16:9a:92:9c:4a:27:dd:b0:26:af:1f:b1:6c:80:48:4f:3d:
c1:7b:c4:0c:22:3d:9e:42:40:f1:1a:5a:6a:9d:39:c2:7e:0b:
79:80:b3:34:84:31:83:67:2c:67:52:2c:f7:ee:c7:46:b9:f3:
cf:47:e8:ef:00:a4:4c:80:57:9e:f4:e1:17:3d:9f:23:3b:14:
c1:c7:74:99:f4:13:f9:89:50:e0:96:e9:ce:b7:ea:9d:ba:43:
d5:8c:e4:8e:be:8b:b5:38:d3:7f:de:b1:e7:e9:54:19:8c:b6:
18:b0:f4:01:64:75:5f:04:49:27:53:8a:63:ec:63:d5:03:61:
98:c3:74:fb:ff:ee:70:47:68:ad:d7:d4:7e:4e:cc:51:71:7f:
cd:8e:97:0b:f2:a1:ed:30:31:b7:b4:b4:51:cc:b6:2a:57:d0:
35:8e:d9:3e:2a:9c:0b:39:df:67:29:1d:53:84:af:21:75:70:
3c:4b:1f:36:99:68:d3:d8:91:2b:d0:ff:8d:6d:d1:6a:6c:28:
d9:96:af:76:64:cd:ff:7a:99:b3:73:0a:cd:20:3f:08:37:c3:
52:07:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:56 2025 by rpki-client