
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File: aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier: bOYcVOg8EfXaSnjJHXShfqXcs8KmgF5wX2g0K1TvKyw=
Subject key identifier: F5:6D:DA:5A:7D:47:BF:50:01:78:8D:83:12:4E:A9:87:8F:C8:16:92
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer: /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial: 0199FC8F2E9FDB09375CC7577F34C323E80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number: 0DFC
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: xcAVasq8JvWcIyBmYscZKDMfQzRWooB04c8JR2wk3fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2e:9f:db:09:37:5c:c7:57:7f:34:c3:23:e8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=f56dda5a7d47bf5001788d83124ea9878fc81692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:e1:db:97:bc:d0:08:e1:82:78:78:f8:69:
a1:36:c6:07:d1:f2:20:35:3d:56:2d:1f:ab:32:d7:
d4:b0:01:11:63:c2:1f:42:f5:68:e3:92:16:bc:33:
d3:08:92:2b:8c:2f:d1:64:5a:c3:d1:bc:51:4f:bd:
0f:61:7a:5d:1c:7e:1e:6f:70:b3:df:46:54:5b:8b:
e7:c4:e8:7b:20:27:da:66:2d:e0:08:55:68:75:06:
ef:da:d8:3b:51:2b:ce:9a:b4:0e:fb:e5:ab:8a:8b:
26:d1:2a:f9:cb:ce:d5:a6:67:42:91:64:07:39:04:
2f:da:82:db:31:62:44:37:0c:82:14:e0:5f:51:91:
ee:6b:1a:e5:79:0f:e6:b4:56:97:ff:d9:b7:a3:50:
f6:58:61:02:8e:df:25:0c:d4:23:2c:58:f9:71:e3:
25:83:d7:c0:d1:0e:ae:fc:83:77:bd:83:96:43:48:
ab:a7:e3:dc:d9:02:81:1d:ce:a4:ee:79:42:aa:d6:
9c:52:bc:b3:c1:98:e0:16:be:13:55:2a:96:1b:8d:
24:7e:a6:6a:9a:88:a7:23:b9:7c:29:ae:ab:50:8d:
10:12:9d:a6:02:da:de:db:a9:40:bf:38:96:38:8e:
f6:c4:fa:68:c2:05:a8:15:f7:0a:97:62:2c:ad:f7:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:DA:5A:7D:47:BF:50:01:78:8D:83:12:4E:A9:87:8F:C8:16:92
X509v3 Authority Key Identifier:
keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f9:ed:49:f9:41:a0:4a:de:8d:4f:76:e6:f0:52:c2:02:a2:
52:17:82:8a:01:34:b8:a6:e3:e5:62:b9:fd:b9:62:c8:f8:f8:
0d:a6:fa:63:e3:00:1c:9c:35:d9:c6:43:9f:9f:a3:d7:75:0b:
25:87:b5:bd:d3:11:7f:de:1f:fd:b2:70:02:17:3f:d7:25:31:
01:78:44:bc:81:fa:d4:e8:b1:a3:b6:bf:82:13:30:d9:9f:87:
43:8d:12:4b:eb:ed:e8:a3:73:a0:4b:01:e3:1a:e1:67:53:ea:
4d:59:52:94:e7:5a:75:85:60:97:a6:e6:71:40:a2:0e:5d:de:
28:f3:6e:0a:37:55:9c:15:2f:f6:5b:c3:7f:e1:58:7e:be:cc:
5f:d0:87:6d:76:83:d4:e4:3d:4b:38:a6:c4:c9:4d:f1:17:72:
c2:04:28:43:34:a7:78:53:3d:8c:25:01:b6:74:73:32:3d:4d:
c6:40:8e:9c:8a:e5:44:cc:7d:1e:07:51:9b:46:29:42:94:db:
7c:78:ee:cd:76:7f:d5:ae:da:38:8a:6d:2f:b0:14:0a:6a:6d:
c3:0a:10:6c:47:fb:c4:fd:53:98:f8:23:24:fd:e8:12:6e:a5:
0f:33:2b:99:bd:bd:52:ca:a8:49:bb:26:a7:0e:37:c6:71:9a:
d6:14:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:37 2025 by rpki-client