Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: alrnXVqFDN+6hJCKr8KMdwArZWlqrCur6B80DKyYNEQ=
Subject key identifier: 49:D5:82:14:68:4A:16:15:04:EF:25:DD:77:EB:17:01:AB:DE:2D:F4
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 0199FBEBE1AAFDAF16570E02C9D2BBFE19D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0D9B
Signing time: Sun 19 Oct 2025 10:02:43 +0000
Manifest this update: Sun 19 Oct 2025 10:02:43 +0000
Manifest next update: Mon 20 Oct 2025 10:02:43 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: DpR1JqOxiADUjmUnf3TlC6bR+CAQcNZ0bWLbdFQptMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e1:aa:fd:af:16:57:0e:02:c9:d2:bb:fe:19:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Oct 19 10:02:43 2025 GMT
Not After : Oct 20 10:02:43 2025 GMT
Subject: CN=49d58214684a161504ef25dd77eb1701abde2df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:1d:81:aa:08:65:62:7e:a4:53:93:b5:97:
a7:28:77:f2:bd:b1:c6:bf:96:44:f1:08:6b:77:3e:
bc:de:60:40:8c:9f:42:2d:d5:b9:60:ae:18:26:00:
86:be:35:82:da:29:7c:d2:24:66:3a:66:5e:27:34:
69:78:fd:c3:53:96:10:57:33:bb:44:84:4d:03:c8:
a5:8c:dc:0c:9c:f2:38:ed:4d:93:47:29:24:e5:b2:
10:ee:54:83:1f:1a:d3:54:3f:d0:d6:67:a2:6e:0e:
74:a7:7e:5c:66:1b:24:5b:34:d3:cf:ca:6f:14:9c:
57:53:10:71:17:65:9d:c8:62:1c:e1:a4:4f:8e:09:
32:4a:8b:b2:7e:d0:56:a7:ff:13:ad:96:9d:63:f8:
80:86:d8:c4:9b:dc:ab:76:c0:82:87:77:dd:75:48:
63:a3:83:5f:6e:37:48:d7:f2:e3:5d:10:dc:82:fd:
15:93:f2:6d:d2:be:44:60:e4:8c:6d:11:75:b1:41:
e8:73:e9:7e:a0:8c:6a:b3:ff:40:ba:08:a5:f0:7d:
ea:fc:87:1a:db:cc:4c:15:84:99:de:e3:ff:f0:bf:
96:4d:ff:b1:91:7c:3f:26:a9:2c:ca:08:c8:db:36:
8b:71:ef:75:9e:2a:6b:e6:83:0a:d6:2c:c4:2b:15:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:82:14:68:4A:16:15:04:EF:25:DD:77:EB:17:01:AB:DE:2D:F4
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:64:0d:ee:94:99:d6:0f:ba:3e:08:e1:43:3b:c5:da:dc:cc:
d4:3a:40:19:e2:aa:3c:fe:b2:8f:ea:d0:c8:ba:f9:55:ca:e8:
50:9b:54:02:59:dd:bf:26:d2:cd:41:d2:5b:f8:d9:11:58:7b:
a1:ee:83:6b:e0:55:70:ff:28:c5:87:53:86:fd:96:14:22:5c:
db:a4:6b:ea:14:79:9f:fe:c6:11:a0:8d:ec:fe:2e:29:ce:c2:
c8:a2:b1:93:c3:70:6d:af:03:73:82:55:f3:e5:3f:56:b7:cd:
46:fe:34:69:8d:99:46:1a:6e:11:bd:04:50:52:a7:88:08:46:
31:8b:c6:8f:e0:f5:a0:f9:35:44:54:b6:ab:1f:aa:43:9b:79:
9c:7f:5a:8f:c2:2a:ed:84:45:29:0c:ce:cc:de:4a:b7:02:68:
3b:f3:71:af:df:5e:91:6d:32:5e:f2:28:fe:89:19:83:aa:b6:
1a:c9:5e:0c:85:f0:b3:ed:97:8a:41:20:ea:30:0c:45:5f:26:
2a:3a:20:9c:63:87:03:5c:a3:64:50:62:16:f0:ed:a6:7a:1b:
98:4e:b8:42:35:ff:14:41:94:da:33:87:55:4f:6b:ba:34:68:
3e:19:d5:07:ee:e2:8c:18:02:7f:47:83:3f:7e:fe:3c:84:42:
f7:56:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:42 2025 by rpki-client