Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
File: aDjl4BZgX27c1MlhwZys9YFMeKM.mft (raw, json)
Hash identifier: Wgx30rsfkkcnVwBBUuE1j4rSvMmHFF9nsvCQeJAmRIg=
Subject key identifier: C0:2E:45:02:F5:FC:AB:08:91:38:1C:A9:5B:02:9F:B5:1C:43:44:59
Authority key identifier: 68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
Certificate issuer: /CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Certificate serial: 0198D7059A37E47D3C4164A3BC99F31E4CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
Manifest number: 1086
Signing time: Sat 23 Aug 2025 13:02:04 +0000
Manifest this update: Sat 23 Aug 2025 13:02:04 +0000
Manifest next update: Sun 24 Aug 2025 13:02:04 +0000
Files and hashes: 1: aDjl4BZgX27c1MlhwZys9YFMeKM.crl (hash: ntYzw6cogorrVCK9PbG/ENgVi7EfCkmE6c0thNgdvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9a:37:e4:7d:3c:41:64:a3:bc:99:f3:1e:4c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Validity
Not Before: Aug 23 13:02:04 2025 GMT
Not After : Aug 24 13:02:04 2025 GMT
Subject: CN=c02e4502f5fcab0891381ca95b029fb51c434459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:7a:7c:0f:93:c0:84:33:33:48:51:f3:e4:
0b:7c:83:00:b1:3b:a9:81:8f:cb:0c:22:2d:72:33:
a6:88:ee:55:e3:d6:52:d5:5b:d1:88:bb:09:84:aa:
e2:ff:3f:e5:49:a9:fd:8a:99:c9:5f:21:52:5f:d3:
99:65:0b:d8:ec:ea:1e:73:19:ed:c3:3b:08:04:0b:
a9:13:53:86:fe:ca:4f:a8:85:56:b1:17:fb:41:a2:
fb:69:1a:f8:2b:2c:99:28:a4:59:d6:81:d5:b6:43:
5c:7b:1b:49:33:3e:18:88:ad:aa:02:8a:b8:72:5c:
8b:1d:81:09:4f:52:9b:d7:0d:2a:77:b2:21:8f:05:
05:57:82:36:38:f3:6b:8a:71:7e:c7:af:5a:22:36:
8e:a0:eb:7b:fc:92:cb:74:fa:06:5b:06:7c:17:fe:
48:5d:e3:6f:4b:f3:74:00:10:76:21:66:88:8f:75:
d5:5e:c9:c6:41:ea:4f:f7:6d:34:a6:be:c7:9b:a3:
e0:22:d3:cd:2f:82:39:35:5f:9e:e1:83:41:dd:3c:
af:2f:da:a2:6e:aa:50:8c:c7:67:ec:2f:a7:c5:79:
3e:84:35:35:3d:b5:9f:05:a2:24:fe:13:c0:df:be:
87:86:00:ca:89:d8:bd:43:68:a7:3e:56:40:1e:27:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2E:45:02:F5:FC:AB:08:91:38:1C:A9:5B:02:9F:B5:1C:43:44:59
X509v3 Authority Key Identifier:
keyid:68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:85:0c:3f:6c:f7:e3:ee:dd:92:29:0e:e6:27:4c:6e:2e:a8:
cc:3a:a9:01:80:07:b9:c7:b1:74:93:57:de:1e:ca:77:01:39:
df:bf:af:a8:12:44:19:bf:22:af:67:d4:d0:29:c9:1c:38:4c:
68:3d:d5:86:b4:97:3a:cc:eb:3f:bc:8c:87:6d:9e:44:26:e2:
34:8a:bd:3e:99:d1:20:49:af:1e:e7:2a:37:bf:9e:a1:f6:dc:
35:57:43:f1:ec:6a:b8:af:58:d2:2f:1b:2c:49:97:48:df:7d:
4c:7e:e1:af:70:68:1f:a4:1d:c9:27:bb:99:5a:f2:f4:09:0a:
0d:1e:71:fb:de:bd:30:ba:b7:db:79:ae:04:f7:06:26:1c:2a:
e9:bd:be:89:c7:eb:e6:dc:05:35:48:31:a3:dc:95:a2:d2:9e:
bf:d5:c9:ab:c7:5d:4b:cb:24:14:a3:69:33:ef:e8:1f:0a:8f:
2b:b7:bf:a4:6b:8c:d3:8d:c5:e5:90:e9:97:55:4c:86:90:48:
96:13:05:74:0c:a1:0e:a9:6b:bf:9d:71:80:9e:a4:5e:79:58:
df:a4:62:97:c0:13:26:f9:c7:d3:5d:25:ba:4f:0b:9e:10:48:
f5:d2:fc:a7:76:83:ed:08:84:56:ed:4e:9b:34:51:f2:fe:bc:
9f:2b:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:09 2025 by rpki-client