Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
File: aWZ-UauBVWetZ8u10biJY4Nfqfc.mft (raw, json)
Hash identifier: cObCOZdrvNQCaDnUxBEVFkUw2mW8UKW0b+bchrBKIzI=
Subject key identifier: D4:70:12:39:8B:4A:9A:DA:1F:FC:08:CC:CB:6F:D3:97:7B:C8:2D:09
Authority key identifier: 69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
Certificate issuer: /CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Certificate serial: 0198D65F274658245CCFC8F80A283135645F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
Manifest number: 0DAA
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: aWZ-UauBVWetZ8u10biJY4Nfqfc.crl (hash: IKbdAxORJyRMKqA3sV6R7jzEuWgU5mZx7b2cKieDOLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:27:46:58:24:5c:cf:c8:f8:0a:28:31:35:64:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=d47012398b4a9ada1ffc08cccb6fd3977bc82d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:f4:fe:1d:3c:c9:02:09:19:87:50:81:36:
4c:d3:01:81:d9:9a:87:19:18:ac:88:08:35:c5:26:
35:e9:0f:c4:10:6a:70:f8:8f:7d:73:f9:9f:2e:c2:
ef:2e:cd:d2:0d:f5:aa:d8:2e:e5:9a:1f:3b:f0:3a:
e3:d7:d5:5a:b2:c2:34:32:0b:87:53:69:2e:d9:5b:
7f:b9:1a:00:76:d8:37:21:bd:8e:15:cd:5f:de:53:
4b:60:bd:39:3b:ad:66:a1:4d:e8:94:c7:2e:59:ad:
ea:30:9d:f5:9e:a5:aa:fd:78:50:cb:26:52:17:02:
65:10:7a:91:51:31:3b:51:2a:29:1e:a6:00:06:c2:
3c:29:cb:b6:a1:43:2c:4e:96:12:46:12:31:0d:b3:
4c:9a:71:c2:25:79:48:c8:9a:33:cb:9e:5c:62:68:
26:21:09:bf:b2:ca:1a:6d:9b:b0:0c:96:d7:22:b9:
32:2a:c9:dc:df:62:a6:00:d9:e7:71:57:51:48:8d:
49:83:53:0f:98:91:e3:1c:ef:6f:b5:6f:2c:48:f4:
db:4a:31:56:90:ca:cf:fc:ec:86:da:60:75:36:9f:
ca:03:ed:ab:b2:5a:bd:54:9f:20:fb:1d:39:10:a7:
bb:35:3e:98:9a:71:2c:93:c4:69:8b:15:c7:43:2c:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:70:12:39:8B:4A:9A:DA:1F:FC:08:CC:CB:6F:D3:97:7B:C8:2D:09
X509v3 Authority Key Identifier:
keyid:69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:24:a0:40:be:cc:1f:3e:a6:4a:94:0f:7e:0d:89:52:82:
96:49:29:66:32:93:be:1c:58:79:ef:6b:f7:d4:06:3d:de:7f:
c7:43:e6:31:2b:ba:aa:7b:12:1b:94:8b:68:26:5d:c6:f6:f4:
b2:de:32:ed:c7:86:d4:07:27:9d:d7:91:7e:f0:ba:b5:a9:e4:
17:90:9e:25:a6:78:4f:7e:8e:4a:4f:7e:ef:3d:83:ec:7a:3f:
c4:6e:b5:79:74:a6:eb:3e:c8:35:16:06:b6:34:73:e0:14:0d:
85:20:59:36:c6:97:6e:7f:39:3f:76:94:30:ac:39:8d:6c:7f:
67:b7:30:cb:d2:2c:23:d8:47:05:0c:70:e3:11:b0:25:7a:f1:
52:40:47:14:f9:7c:2b:b5:c8:bd:b7:17:3a:b3:c4:a3:04:ae:
22:97:02:20:5b:dd:9a:3c:0d:ee:10:1e:a8:d3:65:40:2f:26:
00:07:6c:06:4e:0b:e0:1e:1b:33:50:d7:c0:b2:7f:49:6d:eb:
29:2d:01:55:ca:45:4b:84:b3:01:92:2c:65:bb:30:66:3c:8f:
7e:86:d8:4b:bc:e2:24:fd:b3:d1:07:bf:98:7f:33:fa:ca:0e:
b6:04:70:77:f5:d8:d8:fb:29:4c:d6:ce:a2:d4:bb:2d:8a:de:
21:be:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:07 2025 by rpki-client