Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
File: aWZ-UauBVWetZ8u10biJY4Nfqfc.mft (raw, json)
Hash identifier: htyL+/6/Q6lvSjPnXUzQ5JZ+zEfLI5JEOl1AJzdpDeQ=
Subject key identifier: A2:5B:22:47:DA:39:74:2D:2D:46:87:2A:8F:2E:93:11:A8:F1:EA:16
Authority key identifier: 69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
Certificate issuer: /CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Certificate serial: 0199FDD965E704A259148068DF45AD2E1710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
Manifest number: 0E43
Signing time: Sun 19 Oct 2025 19:01:47 +0000
Manifest this update: Sun 19 Oct 2025 19:01:47 +0000
Manifest next update: Mon 20 Oct 2025 19:01:47 +0000
Files and hashes: 1: aWZ-UauBVWetZ8u10biJY4Nfqfc.crl (hash: bhg+Fa2rgWfux2CxVDJWnNAobIZfWPwEBgcpYZAOGWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:65:e7:04:a2:59:14:80:68:df:45:ad:2e:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Validity
Not Before: Oct 19 19:01:47 2025 GMT
Not After : Oct 20 19:01:47 2025 GMT
Subject: CN=a25b2247da39742d2d46872a8f2e9311a8f1ea16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:f3:9e:5c:f2:be:2c:fe:07:47:af:d2:d5:
03:9f:a5:5c:88:bc:12:b5:49:04:f3:5e:7a:cb:da:
d8:0a:7a:85:d3:b9:18:fe:27:64:2c:19:de:3f:28:
c9:32:19:ba:44:38:24:a9:d8:6d:6b:ce:4e:f6:6a:
88:ae:4c:df:bd:4e:fd:36:7e:7c:cb:5b:10:0c:dd:
da:3d:a6:b2:87:10:ff:e7:1c:39:30:ea:1b:a2:69:
51:aa:1f:40:7c:67:53:c0:11:76:6f:85:d9:3e:90:
01:ad:fe:28:30:4c:d3:1f:fc:c6:6c:f6:c8:97:a3:
d8:86:17:29:7f:bd:4c:e8:f1:26:f9:c0:04:28:57:
64:9d:c0:41:a3:d7:0c:50:6a:18:9a:3e:2e:c3:ce:
30:98:06:37:b5:55:f9:0f:60:df:7a:65:86:f2:8b:
7b:c6:e0:70:c4:e1:a7:2b:53:3d:df:14:2f:82:3b:
96:b8:d4:6f:a7:38:97:7a:21:11:b7:80:5d:ab:54:
7e:bf:d2:c6:5d:b4:34:66:ea:97:19:15:32:7c:17:
4e:c4:08:98:4c:d0:41:bb:c9:de:d1:56:37:b1:83:
31:32:6d:f5:da:74:7d:81:75:72:f9:29:70:48:8a:
af:a9:f7:84:4e:c8:0f:f4:5b:34:e2:df:67:cd:d4:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:22:47:DA:39:74:2D:2D:46:87:2A:8F:2E:93:11:A8:F1:EA:16
X509v3 Authority Key Identifier:
keyid:69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d5:50:c2:00:74:4c:15:25:71:20:d9:09:c1:d3:61:65:4b:
a7:6a:35:1d:da:51:6f:57:c8:63:6c:a4:3e:fa:44:1b:55:33:
e9:84:ca:2b:b7:ce:0b:64:ef:6f:c9:d3:d9:2d:7e:36:96:6b:
b7:30:54:ac:c6:74:c5:12:43:e9:7a:47:df:69:7c:59:4f:3a:
3b:30:95:6e:ab:87:fc:69:63:bb:a9:65:25:f5:6a:d2:da:4b:
40:c2:60:ed:5a:9f:18:12:c7:00:ba:3d:20:b6:53:19:61:ee:
34:44:fd:92:f6:f3:7b:88:c8:72:83:48:aa:61:02:c4:4c:79:
75:3a:66:0e:f3:7e:df:5d:44:40:39:7e:42:cd:25:7b:7c:2e:
d9:f3:87:98:0e:69:05:e2:89:d4:63:96:26:20:eb:5d:42:ed:
11:c9:0e:5e:ee:39:86:db:ca:aa:a5:cb:78:44:00:05:0a:67:
99:20:88:bf:5a:92:50:dc:21:0a:84:0c:8c:79:b2:e0:86:a1:
5c:cf:f9:21:1f:ff:53:eb:55:b6:e4:53:ec:c0:90:f0:68:4a:
29:3b:68:37:05:52:2a:c2:36:b0:b3:56:36:93:ad:30:2c:6d:
a9:96:10:a7:76:c0:c7:80:a8:d4:6b:3a:d4:2b:30:87:e9:e0:
ff:2b:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:19 2025 by rpki-client