Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: o9W2sd/Y6H+LJLjZoa8BtVj50qtgKBTHrlGwSXnTAN0=
Subject key identifier: 4C:4C:A6:3E:92:77:37:8A:9A:39:B0:A7:AB:28:8B:82:43:CF:13:34
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 0198D6610C37B3D2293C3C406158950C3175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0D03
Signing time: Sat 23 Aug 2025 10:02:20 +0000
Manifest this update: Sat 23 Aug 2025 10:02:20 +0000
Manifest next update: Sun 24 Aug 2025 10:02:20 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: yAtQadqIeZ/vkWFc0CY0KWx07oToII1430V9mRcZ27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0c:37:b3:d2:29:3c:3c:40:61:58:95:0c:31:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Aug 23 10:02:20 2025 GMT
Not After : Aug 24 10:02:20 2025 GMT
Subject: CN=4c4ca63e9277378a9a39b0a7ab288b8243cf1334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:76:37:74:4d:5d:cb:3d:31:d3:f8:d8:4c:92:
41:a8:a8:6f:0f:47:6d:62:b4:85:74:06:f4:65:83:
8b:be:4b:ff:0b:7d:fd:3c:1e:e9:05:98:01:3e:27:
3d:60:8a:c2:e0:a3:8e:99:b9:e0:d1:63:02:12:1a:
93:6b:ca:36:67:13:c0:d6:7c:ee:31:9e:25:c4:b2:
92:85:dd:b7:6c:85:d4:ec:dc:44:1b:7d:77:31:3d:
21:b5:bd:fd:f2:aa:aa:a0:86:83:e9:95:15:58:d7:
b5:2f:10:30:27:9b:a8:f5:55:c0:b2:f7:63:37:a5:
d1:37:03:a6:51:1a:3e:a0:7a:b4:54:d9:14:83:db:
1b:13:11:a6:45:d4:eb:7c:df:91:9c:a7:94:00:b7:
17:3e:88:f0:e9:3c:82:8a:81:74:05:8f:35:15:b5:
24:0b:01:45:eb:74:22:18:92:5c:47:b3:74:e7:22:
3d:31:d9:dd:6d:24:a2:15:39:af:3f:6b:5c:9e:75:
96:67:ba:c6:20:6b:35:58:28:27:da:9a:a6:5a:99:
ff:f4:3e:82:f1:07:b2:fc:5f:b2:a4:3b:29:7b:df:
c2:11:cf:51:be:eb:89:f8:89:98:f8:4c:10:0b:cb:
14:ff:cc:d1:de:82:73:cf:27:0f:d6:4c:59:76:b6:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:A6:3E:92:77:37:8A:9A:39:B0:A7:AB:28:8B:82:43:CF:13:34
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:77:d5:86:0b:5b:07:74:03:0c:85:57:6d:46:48:0c:e0:94:
84:f0:a1:ea:32:4a:11:e1:69:8b:23:fb:d0:b8:21:eb:53:7e:
d0:b3:ee:07:ba:5c:63:4f:02:61:67:a9:fe:b9:2d:72:44:d2:
99:e6:48:db:3a:0e:5e:20:94:0c:8e:80:e0:6c:ab:a7:e2:46:
2b:97:ab:19:a7:0f:7f:fc:a9:07:4e:19:a1:42:3c:d1:23:58:
21:b6:1c:fa:94:f4:31:82:28:bf:e8:8f:70:c0:22:42:66:26:
a7:0a:98:0e:43:cd:0a:b4:61:04:b6:b2:36:c1:d9:9c:e0:31:
01:e1:0e:c6:1b:b6:a9:ca:2d:07:1d:c2:4c:da:c3:b9:3b:f2:
d8:12:2d:a6:59:9d:3c:ef:87:3d:c9:63:85:3d:b0:71:b4:cd:
06:27:44:03:87:54:ce:0c:f2:bc:db:2f:85:01:2a:0a:ea:4c:
93:9a:37:da:13:da:20:21:87:cd:ae:8e:ab:3b:ea:96:17:25:
e1:98:f5:55:0f:ac:ce:2d:af:f9:5a:4f:49:41:e5:99:75:93:
85:0b:f5:26:f0:ce:72:80:c3:1f:61:0d:d9:60:e5:81:21:fd:
bd:aa:1c:cd:02:90:18:94:d9:55:01:83:44:2e:c9:87:f0:4b:
09:24:fe:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:17 2025 by rpki-client