
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File: aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier: wxCwA+BahZPIP1tg9H28kuye3GqwHvewwipNGYlJDlA=
Subject key identifier: 78:46:10:FD:A1:35:A9:B6:94:27:D2:DF:8D:21:D6:DC:C7:60:07:BE
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer: /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial: 0198D73B254EB8056B9700C188842FDFB0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number: 0D64
Signing time: Sat 23 Aug 2025 14:00:34 +0000
Manifest this update: Sat 23 Aug 2025 14:00:34 +0000
Manifest next update: Sun 24 Aug 2025 14:00:34 +0000
Files and hashes: 1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: OoyxZB2ClQLdsg2TnASaDCjLgGR8ukQ7IQ9PQxbEGxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:25:4e:b8:05:6b:97:00:c1:88:84:2f:df:b0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Validity
Not Before: Aug 23 14:00:34 2025 GMT
Not After : Aug 24 14:00:34 2025 GMT
Subject: CN=784610fda135a9b69427d2df8d21d6dcc76007be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:40:fb:cc:c4:98:3b:01:e8:d5:74:b7:b6:
a2:b9:5e:0b:87:88:00:ed:c6:33:43:71:96:7c:1e:
cc:c1:d4:e2:6a:85:0e:36:0a:2e:8e:67:e0:4f:0a:
da:d8:e7:58:8f:f2:70:bd:68:f7:d7:8c:ac:aa:54:
7d:c2:a2:05:d0:21:b2:c0:3e:8f:04:38:87:d3:36:
09:03:4f:b5:9c:a0:e7:f7:f2:3b:9d:22:ee:dd:8c:
d2:d5:63:40:75:7a:56:0d:92:89:de:51:10:a9:2a:
90:a5:05:52:b8:f7:ef:56:47:7b:8b:43:a9:f3:42:
d8:37:a6:a0:4a:bc:31:b7:49:a5:b8:9d:2a:77:5a:
1d:f2:46:0c:59:19:ba:1c:1c:5f:06:2b:1a:7d:2e:
99:d3:19:8d:da:51:23:7c:82:42:90:5c:e1:49:63:
55:01:71:f4:fc:79:b9:c3:a6:75:0c:86:d1:60:50:
d8:b4:1a:69:00:44:dc:75:84:76:8e:d4:77:a8:96:
01:5d:6b:30:a4:c4:7d:9f:eb:f9:1f:9f:6e:ab:18:
75:09:9f:ad:2c:ef:7d:d0:72:8c:16:02:24:b3:56:
b2:87:91:13:80:1e:b2:35:2c:5c:50:2c:63:79:d9:
04:47:9b:16:db:37:eb:4b:da:6a:d1:50:b5:5f:50:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:10:FD:A1:35:A9:B6:94:27:D2:DF:8D:21:D6:DC:C7:60:07:BE
X509v3 Authority Key Identifier:
keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:65:ee:d6:c6:55:d5:ec:8e:8e:2e:5a:35:dd:83:d4:f6:e1:
0a:c6:7f:c5:36:13:1d:27:7c:8c:c8:d3:1d:98:b0:53:6f:8b:
6f:db:58:56:83:62:c3:d5:93:b3:eb:63:54:ef:c3:22:e7:37:
9c:b4:4d:a8:de:22:d1:40:76:a2:be:97:0d:7b:94:28:fd:3f:
19:14:b0:57:74:9c:80:0c:6f:77:08:f0:dc:c2:8d:11:1f:f2:
46:9a:3b:12:e9:66:a1:9b:15:5b:c2:db:cf:35:19:cc:51:c8:
a4:73:d9:12:83:55:0a:75:eb:ac:23:e0:4a:63:b4:74:fe:56:
ca:89:9e:98:7a:35:ac:72:71:26:f6:19:a7:82:40:d1:4b:74:
cd:c4:0f:54:75:06:3c:f9:87:78:f3:87:10:c4:7a:8d:2e:7f:
30:61:d1:ad:d7:2d:0c:bf:45:67:31:7c:65:f4:ee:0d:fc:0c:
a7:3c:74:fb:95:a7:7b:98:cd:cf:7a:1e:f8:a8:b0:f6:a7:d4:
9d:a8:56:a8:1d:0c:73:56:36:86:86:fe:27:db:49:7b:63:d9:
fd:19:2c:c5:74:ba:5e:61:0e:94:80:99:b8:99:fe:d4:4c:ff:
22:08:96:f1:bc:7c:e1:7f:a6:6a:55:64:62:85:b5:a8:ac:c1:
49:e6:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:06 2025 by rpki-client