Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
File: aWZRzL2U9r6et0MyEiM1yrvvw5o.mft (raw, json)
Hash identifier: 0ZJFE8zX+VT/e/rY/s+YbMFAjHwiJjGd52P6o995cS8=
Subject key identifier: 6B:92:E5:8E:A3:E1:DD:98:11:C6:E7:41:A2:99:4E:12:D5:85:F2:F5
Authority key identifier: 69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
Certificate issuer: /CN=696651ccbd94f6be9eb74332122335cabbefc39a
Certificate serial: 0198D4E0162126712510EBCEFE9F98EDC96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
Manifest number: 0576
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: aWZRzL2U9r6et0MyEiM1yrvvw5o.crl (hash: ghVpYpNcIfG0NLzVt1BmzWSi17vlsEi6w20zR2QRbI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:16:21:26:71:25:10:eb:ce:fe:9f:98:ed:c9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696651ccbd94f6be9eb74332122335cabbefc39a
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=6b92e58ea3e1dd9811c6e741a2994e12d585f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:01:41:51:c5:4e:e5:07:19:c2:b6:d3:f7:
8f:7a:16:45:35:9e:82:3a:db:3a:af:37:05:1d:e8:
b9:93:4e:f6:39:42:d5:b9:20:50:36:94:94:02:da:
2a:61:81:4f:06:1e:3f:8b:5b:15:c4:25:24:33:6f:
a2:fd:c9:5c:97:09:28:eb:03:4f:0b:8b:90:b0:a3:
7b:59:37:59:72:b7:3f:80:0a:7a:5a:59:bd:31:62:
06:13:da:04:1b:dd:65:f0:83:5a:6e:88:e8:70:e6:
83:99:b3:4d:65:e3:92:92:42:49:c4:e1:d0:39:1e:
ae:3d:94:f6:aa:c2:95:1f:ff:1c:e6:17:ec:92:e9:
45:cb:47:17:52:e1:4a:d3:39:ae:24:f5:be:7a:84:
2e:bc:f2:d1:48:67:ec:1d:86:fe:4b:e2:9c:b9:01:
8d:b6:db:60:f2:ab:48:fa:69:df:31:73:b0:58:78:
c2:69:9a:9b:a5:cb:17:ff:e6:3f:95:4b:4f:17:d6:
69:fe:12:1d:af:61:d0:31:1d:25:8a:b9:07:a1:2e:
d3:0f:72:1b:0a:53:92:2a:76:f5:73:e4:57:06:8f:
56:62:0d:86:38:0b:c2:8f:c2:db:39:01:00:06:8f:
92:69:c4:10:20:60:e7:1e:10:3b:61:09:0b:1b:c7:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:E5:8E:A3:E1:DD:98:11:C6:E7:41:A2:99:4E:12:D5:85:F2:F5
X509v3 Authority Key Identifier:
keyid:69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:20:16:34:b5:5c:fb:ba:9b:0c:16:55:f4:42:9b:c0:23:66:
51:0d:2c:62:ca:e2:56:e7:9e:02:0f:f5:92:d6:31:1a:17:bd:
e2:fd:35:73:34:1c:8d:01:1a:fc:1a:dd:9e:64:5c:51:36:ed:
f0:a3:e1:79:ec:93:99:40:24:7b:1b:53:fd:68:85:1b:3e:b1:
b9:e9:24:e6:e2:1b:5b:8d:85:1f:02:4c:86:5d:73:42:90:29:
10:c9:a1:5d:63:ff:03:08:fd:27:59:ef:c2:46:12:c3:9c:c2:
b5:52:75:61:6a:86:b4:c8:af:32:85:a6:e2:8b:de:5f:9f:50:
7b:72:50:7e:c5:fa:d2:7c:e5:07:05:74:73:82:b7:c5:34:06:
2d:1e:ff:ec:2e:91:eb:cb:27:20:35:a7:a4:27:53:1d:3f:72:
ab:3c:db:2a:90:03:a3:8b:95:13:6f:bc:09:3f:91:21:3d:8c:
03:6d:1f:f7:68:a0:20:38:25:11:62:a9:f4:f3:1f:19:b8:85:
af:00:d8:b9:2e:4f:05:18:d1:4c:22:c0:92:59:f8:07:da:ba:
fa:62:4a:dc:d3:8a:02:62:48:4f:13:fa:51:ed:e8:fe:28:f9:
20:a2:3d:d7:c3:7b:97:9a:7e:d2:88:9c:4f:52:58:95:8c:8d:
b2:07:50:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:29 2025 by rpki-client