Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier: h2878GWPCcjZCILDPbBeMzgRgt10CE9YHGZqyoGtHC8=
Subject key identifier: BF:48:82:4E:D5:5F:68:24:A0:89:02:F8:C1:33:19:B0:EB:9B:09:C6
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial: 0198D5BC358A4992309C3EF602E4DBEF4BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number: 0903
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: IakL6NzdAX8RI+2eJH/iqbH2DaiblHQTDEWBT4IVWtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:35:8a:49:92:30:9c:3e:f6:02:e4:db:ef:4b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=bf48824ed55f6824a08902f8c13319b0eb9b09c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:54:10:6e:06:e5:80:f1:26:f4:17:58:4e:
c3:20:8e:63:b4:73:41:cc:da:52:04:27:06:58:b7:
4f:a1:95:b3:6b:65:50:6f:5b:95:2c:51:a8:0c:03:
be:34:99:ac:91:67:ec:90:63:4b:a8:4c:37:36:ae:
a1:3b:67:ee:6a:1e:b8:ea:3e:e5:dd:0e:d5:fc:b6:
bd:c7:88:27:d4:0b:98:ad:90:48:78:3a:c1:cd:8a:
61:bf:00:12:2d:20:76:ac:cb:6d:15:19:ee:23:48:
f5:7a:01:cf:3b:91:4e:72:ac:ce:4e:36:2c:5b:e0:
3a:b2:65:1c:6a:06:40:26:ef:9b:bd:1f:3c:af:34:
3f:81:4a:5a:3d:a0:2d:4e:80:0c:6a:c9:7c:46:12:
1e:ed:1d:43:4a:3c:9f:5c:33:9d:5f:f6:87:9c:0d:
50:ea:77:ed:06:2e:e9:2f:7e:ec:75:42:94:fc:ee:
10:ab:b4:7e:8d:9d:de:25:13:8c:67:45:18:37:e0:
68:cb:68:fc:00:6f:1e:4c:00:97:a0:37:86:3f:7f:
c4:ba:d5:26:95:96:bd:93:6c:26:7e:2f:80:03:0e:
e6:98:42:18:c7:44:02:5d:ec:be:33:a7:c6:bc:e9:
15:27:3b:aa:e1:ee:73:d7:93:32:f9:09:67:53:6e:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:82:4E:D5:5F:68:24:A0:89:02:F8:C1:33:19:B0:EB:9B:09:C6
X509v3 Authority Key Identifier:
keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:43:ff:f3:e6:d5:81:a9:65:61:a1:74:2d:5d:0b:4d:7b:ae:
8d:5f:e6:b6:e7:6b:92:10:fa:75:b7:13:40:25:03:0a:fb:0b:
23:aa:c1:86:04:91:f3:07:f5:c2:94:d2:56:12:27:f9:c8:10:
d0:d0:01:9e:50:43:4c:6a:4a:6c:a4:ca:1c:fd:36:35:db:41:
f5:b0:57:34:10:c7:7a:74:40:fd:35:78:04:bd:e7:f5:e4:cb:
d4:e7:05:b6:2b:a8:44:07:64:a4:19:8c:08:2f:5f:13:2a:94:
6a:e2:68:11:b1:47:3d:f1:31:19:99:91:40:6b:96:d8:21:ce:
c4:97:09:7d:ab:40:1d:9c:3c:7b:44:91:82:ef:9d:6f:e7:80:
ac:53:3e:71:f3:a8:42:bc:27:5e:0e:45:2a:4d:7e:3f:1a:97:
f3:cc:80:f2:40:07:d8:df:8c:8a:69:50:0d:c3:b9:18:cc:ce:
e2:5a:a9:0f:2a:53:47:ba:8f:e6:3d:96:47:e7:25:54:b2:26:
26:f5:cb:32:60:59:ce:fe:74:1b:eb:0f:68:80:ee:ef:de:d5:
21:04:ab:0b:d1:d1:91:55:9e:66:96:af:e2:0c:4a:fb:a4:f1:
15:ce:05:be:c1:fa:da:28:7e:5f:93:39:01:e6:14:98:6a:e2:
24:bc:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:28 2025 by rpki-client