Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: jmNVmUKlRH1BBuQXB7sOKnYHSqAdsWuDz8joZcC1D6o=
Subject key identifier: A3:81:94:8D:EC:D7:BE:BE:74:35:CE:1D:C5:50:C3:0B:95:CA:FA:F8
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 0198D474261E0D89BA235691451A6C69DBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:03:58 +0000
Manifest this update: Sat 23 Aug 2025 01:03:58 +0000
Manifest next update: Sun 24 Aug 2025 01:03:58 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: yn376RxAWsmkIltEbNnzY0Vg98Dxss0C4KRMGia9wK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:26:1e:0d:89:ba:23:56:91:45:1a:6c:69:db:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Aug 23 01:03:58 2025 GMT
Not After : Aug 24 01:03:58 2025 GMT
Subject: CN=a381948decd7bebe7435ce1dc550c30b95cafaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:12:74:65:d3:70:53:5a:6f:47:94:53:2d:
a7:52:47:31:18:0c:9b:c3:01:c6:5a:6b:9c:72:9b:
86:c8:b6:1f:5b:ee:5c:28:7c:05:16:a5:d7:ca:08:
0a:c4:6e:61:44:de:66:89:33:a1:ab:be:55:25:80:
65:63:0c:3c:32:bd:06:80:27:4b:02:4f:a9:84:8f:
96:05:d6:91:fe:47:95:eb:cd:7e:eb:e8:1b:19:2f:
84:7f:a5:fc:43:c4:22:96:e1:73:43:93:55:66:4c:
47:83:d5:ed:39:9e:53:7f:21:c1:ff:a8:9e:e7:af:
4f:2f:ac:c0:29:b6:52:c7:53:88:50:ee:6c:73:b6:
a4:4c:b0:4b:67:b4:9e:ca:b1:49:bc:7c:39:5b:bd:
c4:1b:71:30:48:3b:f1:19:85:a3:f7:91:ee:b5:fe:
53:21:3e:6d:07:5f:58:b5:90:2b:6a:bc:99:54:20:
c7:26:f2:a2:03:4e:a3:81:97:5b:ac:5a:e3:aa:86:
ed:c6:74:72:0c:86:8d:c0:a0:70:16:05:59:e7:41:
bc:2c:03:56:b6:10:fb:a5:08:18:79:20:d3:05:59:
13:b0:a0:e2:26:40:0c:35:16:73:20:15:f3:45:ab:
59:0e:d4:36:c3:db:2b:55:5c:34:5d:09:5b:16:00:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:94:8D:EC:D7:BE:BE:74:35:CE:1D:C5:50:C3:0B:95:CA:FA:F8
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ca:83:61:a2:97:d9:dd:e8:79:ef:c8:98:7c:18:d9:1a:9c:
0d:15:7a:f7:72:56:e7:59:21:1c:68:87:65:76:e6:87:ae:82:
5e:3a:57:23:32:b3:00:ae:7f:ea:d7:a5:ee:07:52:fd:4e:f3:
ca:f3:e3:92:b3:d5:48:fc:e6:64:8a:89:4a:7e:bd:43:27:5e:
86:d3:15:e5:f4:cd:c7:1f:1d:c7:85:0b:f9:e1:0d:be:27:e1:
f6:08:fc:13:d8:fa:48:5d:62:f0:73:d2:ed:37:8d:1d:08:95:
df:88:f2:57:c2:02:12:be:8d:38:fe:ab:59:87:e0:47:1f:86:
df:a2:ca:b2:67:ae:89:ff:6b:33:c5:5e:5f:77:31:c9:ed:fd:
96:b7:5e:3c:95:9b:b5:67:85:d7:4c:26:30:c7:c4:ce:d1:7a:
0d:90:3f:07:a2:9b:b8:90:25:e7:f6:73:db:40:1f:16:27:00:
41:ec:43:b2:78:56:e3:e0:c1:cd:4d:c1:0c:65:0d:d3:d2:2c:
b7:1f:df:60:31:b3:54:d6:c7:9b:ad:56:e9:93:3e:f2:f5:15:
e9:08:96:7d:2e:68:a6:31:d5:95:dd:4a:50:0c:0a:d5:7a:01:
7a:67:8b:25:b2:a4:2a:fd:cd:8f:15:5f:1b:95:b3:69:89:2b:
d3:53:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:41 2025 by rpki-client