Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
File: aAImjB8WbJ31GjQgRbsTLw-WyC0.mft (raw, json)
Hash identifier: o5xxXLt7ON5AezYbbL0Tnzmfd+Jqf9FxwkfdyBos1nQ=
Subject key identifier: 0D:A2:84:6C:6A:68:9D:A2:89:5E:D4:96:7A:9D:8D:AA:5B:4B:CC:98
Authority key identifier: 68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D
Certificate issuer: /CN=6802268c1f166c9df51a342045bb132f0f96c82d
Certificate serial: 0198D4740FEE7452DD60F8CE7F3664F06B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
Manifest number: 0BCB
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: aAImjB8WbJ31GjQgRbsTLw-WyC0.crl (hash: UBBFyKekLmDo1nt6lNkjbvdFBR9JrIC1jOSUARQ7M/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:0f:ee:74:52:dd:60:f8:ce:7f:36:64:f0:6b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6802268c1f166c9df51a342045bb132f0f96c82d
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=0da2846c6a689da2895ed4967a9d8daa5b4bcc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:98:80:9b:91:dc:10:e8:1d:f6:b8:26:a0:
eb:ff:b1:2c:23:8b:17:90:67:5b:8e:ae:68:66:df:
14:b2:71:70:f2:47:d9:57:87:7a:fb:61:c2:1e:a2:
0d:23:0e:7c:57:61:3a:70:80:20:be:43:fc:32:7f:
8e:8e:2d:58:a6:42:89:ff:df:29:3d:38:d4:a4:d3:
cb:2a:17:57:67:8d:16:29:67:b8:44:57:96:16:df:
ab:ad:40:a2:e9:84:6f:9b:96:17:03:40:c0:4b:7e:
17:93:77:24:fb:7f:56:ec:78:87:5d:15:b7:2b:6c:
32:75:5b:4d:32:d5:94:9b:6a:16:2c:db:b7:8d:34:
12:c1:f8:b7:8a:77:be:1a:3e:b6:8c:69:64:e4:f8:
49:de:51:ff:85:a7:f3:c6:1b:b6:c6:0e:eb:58:19:
55:d8:52:5a:7a:8c:1b:fe:b0:4b:75:ef:bb:0b:1f:
d7:46:7b:55:53:1b:2d:df:9c:20:91:4e:74:58:83:
0e:e5:0a:df:f8:dd:75:02:f7:8c:54:a0:d7:ad:06:
5b:eb:4c:46:de:3c:36:60:36:02:a9:97:b8:98:f7:
4f:5c:cc:ce:58:98:b2:ae:42:80:0a:84:e1:eb:a1:
e6:49:d2:1e:e1:fa:eb:0d:48:ee:e0:95:c9:dc:d0:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A2:84:6C:6A:68:9D:A2:89:5E:D4:96:7A:9D:8D:AA:5B:4B:CC:98
X509v3 Authority Key Identifier:
keyid:68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0c:1a:69:53:cf:3c:15:9a:d4:d6:3e:99:85:ad:cc:90:71:
e3:91:57:93:83:55:82:e1:d2:1c:af:48:74:24:28:81:fc:8f:
8b:b8:0f:72:40:4b:ae:93:05:4a:6b:07:7b:55:f6:2d:a0:30:
4c:90:f6:4d:c2:81:df:70:60:87:dc:ec:32:16:aa:1b:85:07:
b3:c1:8a:5b:aa:1b:63:6a:08:d4:3c:ff:60:0e:db:f2:26:31:
09:4c:d8:63:54:48:71:84:83:c1:3e:db:02:9d:87:d0:d1:ce:
1a:17:55:6b:61:00:93:a7:c0:2a:5c:77:4b:59:7d:88:77:da:
cc:17:a2:40:a0:83:08:b9:e3:b6:99:e1:7f:4a:b8:93:fa:76:
f0:cd:d5:6f:5c:21:f2:2d:c3:0f:9f:5e:d9:97:cb:d1:7d:f7:
88:ee:6c:cc:3d:e9:99:9b:31:39:b7:c2:5a:13:a2:6c:56:c1:
f3:dd:9c:a0:90:d5:fe:87:de:50:56:e0:cb:6b:c3:fc:87:42:
40:b8:65:84:03:14:c1:2c:3c:44:36:0e:fd:09:41:b5:50:d7:
1b:59:8d:b4:fa:fe:bb:da:ef:35:0e:c2:2c:00:9f:3c:c5:dc:
25:ec:64:9b:e8:22:c2:72:29:51:4d:b6:1c:f3:c5:5d:5b:8f:
1a:93:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:03 2025 by rpki-client