Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier: paxU0Cpi38WuP3vDwGuAMhyYSNIQ3NQXfI0V4xnb6NE=
Subject key identifier: 3A:21:4C:C2:74:3D:10:84:B5:EA:F8:2E:3B:CF:1E:68:DD:FB:81:B0
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial: 0199FF22E02B702E3DE3B8880B114561CC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number: 099D
Signing time: Mon 20 Oct 2025 01:01:39 +0000
Manifest this update: Mon 20 Oct 2025 01:01:39 +0000
Manifest next update: Tue 21 Oct 2025 01:01:39 +0000
Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: ZwrV9ooduuJn08c+mWEdp7BpF2ZEErcoPeHbHgtC1m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e0:2b:70:2e:3d:e3:b8:88:0b:11:45:61:cc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
Validity
Not Before: Oct 20 01:01:39 2025 GMT
Not After : Oct 21 01:01:39 2025 GMT
Subject: CN=3a214cc2743d1084b5eaf82e3bcf1e68ddfb81b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:e8:26:60:90:1d:b9:23:da:c4:f4:6f:78:
30:94:b5:87:6f:6f:92:c4:19:d6:01:46:cf:c2:d1:
68:11:a9:e3:ae:97:42:98:9b:b0:13:fd:12:77:33:
7b:c6:b2:10:19:9b:9f:f2:0b:42:74:cb:81:6c:85:
c0:8c:82:44:fb:05:e0:3e:a5:b9:97:11:8a:9c:99:
02:27:b3:11:de:d7:b0:e7:7a:0b:ba:3c:12:93:ad:
60:77:61:96:40:6e:9e:5d:e9:b4:6e:b0:3b:fa:0b:
26:22:30:11:d2:02:7d:99:3e:d1:ec:07:9f:18:b9:
0f:fb:3c:ba:ac:64:3f:17:df:db:6e:11:aa:f6:df:
bf:d2:2e:87:e1:67:14:a6:ed:56:24:9a:0f:86:17:
f8:a1:b6:4d:b2:77:f1:57:60:d6:58:19:fb:0a:00:
ce:d6:49:25:20:cb:6f:47:04:46:ad:90:41:f9:b6:
14:6f:47:b7:af:54:9b:fd:7c:f2:66:5a:df:dd:fa:
32:21:fb:b7:eb:e3:f9:8c:16:03:26:45:c9:b2:ee:
2d:d3:62:84:a6:8b:b0:c9:c3:12:fa:47:84:0b:97:
50:eb:4b:63:d7:1c:3f:0e:d7:2f:a5:5f:82:1a:bf:
d8:2a:d3:58:0f:26:52:93:53:3f:04:ee:9e:59:d4:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:4C:C2:74:3D:10:84:B5:EA:F8:2E:3B:CF:1E:68:DD:FB:81:B0
X509v3 Authority Key Identifier:
keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:53:41:e5:da:70:15:4c:f0:08:9e:6e:2b:2f:90:7c:64:b2:
a2:c3:3f:9b:b6:a2:e5:7a:80:3d:c2:5d:fc:76:55:0a:4a:0d:
74:71:73:14:90:fe:9d:f4:5a:6a:9a:69:c7:55:7b:d9:cb:8e:
52:e9:d2:aa:ad:d8:22:0a:7e:c9:b9:54:b6:1e:39:43:52:f7:
f1:54:99:28:32:8f:64:2e:f1:39:9c:c8:ef:35:f8:db:5d:6f:
95:49:c4:8a:88:21:e3:be:7b:22:ab:3f:bb:9e:7c:64:37:02:
81:ce:d5:87:a9:75:7c:4c:a4:e2:66:20:77:65:91:b5:19:dc:
31:a3:e9:32:d9:15:0d:07:b8:64:d3:84:83:0b:45:14:c6:81:
d7:af:9b:f1:be:71:08:00:c9:f1:ff:6a:43:63:54:dc:d9:95:
bb:8e:5a:13:25:97:64:f4:b0:98:7e:62:0a:b2:ab:e6:c7:80:
2c:93:da:51:85:89:34:26:84:84:a1:90:c2:68:fd:87:4e:5d:
60:67:67:52:be:ec:a2:57:25:45:bf:94:27:a1:fc:2d:20:35:
d7:d2:a2:37:6a:5a:85:ee:ff:9b:6c:8f:bd:11:60:bd:2a:74:
d3:12:51:29:57:54:33:67:e3:6f:5f:16:fe:0e:11:fb:35:a3:
ed:35:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:26 2025 by rpki-client