Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: yrhoLDT7FojnktxU1fxNkoASCB6RCw/GHWzAgwHDveQ=
Subject key identifier: AA:DA:9A:2C:7B:C6:31:93:68:3B:0E:CE:12:E2:8C:8E:7A:AD:4A:13
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 0199FEEBA480262B5DA9F906D2E799476962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 062F
Signing time: Mon 20 Oct 2025 00:01:19 +0000
Manifest this update: Mon 20 Oct 2025 00:01:19 +0000
Manifest next update: Tue 21 Oct 2025 00:01:19 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: siWHcQqfqga9QrVVWz93s2dPeke6KP/3//qoI+Pxa4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a4:80:26:2b:5d:a9:f9:06:d2:e7:99:47:69:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Oct 20 00:01:19 2025 GMT
Not After : Oct 21 00:01:19 2025 GMT
Subject: CN=aada9a2c7bc63193683b0ece12e28c8e7aad4a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:87:31:1b:8c:5e:22:9c:b7:48:23:80:e8:
d8:2a:b3:d8:a3:64:02:89:ab:8c:5e:a0:86:cc:6a:
47:58:d0:df:b1:bf:ba:7e:d1:f0:8e:91:82:56:26:
37:cb:5b:9e:20:26:9a:52:8f:30:45:f9:03:89:87:
ea:86:b0:47:94:00:4f:b7:3c:bb:ce:1b:0e:e3:05:
63:6a:d4:83:29:38:87:25:3c:fa:a5:2d:ca:42:68:
d4:b2:fd:83:55:46:3b:a7:71:72:25:a1:6d:ab:44:
c4:20:84:6f:78:53:f9:f7:27:44:57:7f:31:40:ae:
79:bd:a7:9f:88:c3:1c:ae:bb:b2:87:b0:93:c6:61:
6f:04:7b:45:a8:9d:63:d0:0c:3e:e9:53:cc:f4:28:
76:27:32:b1:00:ea:34:b8:c1:c8:55:d7:af:cf:a5:
2b:72:fd:89:cf:ef:4e:8d:cc:6d:63:5e:d2:6f:54:
e6:33:d9:99:48:b6:d4:1a:8c:8a:9b:48:6a:68:5c:
44:30:39:19:18:85:4f:08:35:b3:02:74:c0:a0:5f:
44:12:7c:4b:53:36:ec:cd:55:e7:1e:26:1c:6e:39:
e0:99:41:72:d9:72:88:96:44:46:e5:82:87:0e:51:
86:55:12:51:e9:50:e6:1f:61:f0:65:a7:5a:83:c6:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:9A:2C:7B:C6:31:93:68:3B:0E:CE:12:E2:8C:8E:7A:AD:4A:13
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a2:4f:f7:cb:49:16:19:cc:53:12:fb:0c:1a:f6:75:d2:83:
57:26:9e:7d:7f:a3:2f:e7:ec:0f:50:4d:38:be:75:d4:a6:b1:
b0:5e:4c:26:7c:f2:70:ad:5d:eb:31:15:f1:9e:b5:e4:5e:4f:
bf:b8:43:9c:87:39:88:2f:2b:ec:34:77:16:b0:f3:bc:de:9c:
cc:4b:1e:cc:e6:96:65:77:74:5a:b4:5c:0f:15:5b:42:ea:ba:
9e:e8:00:3f:07:df:60:1f:fa:f6:ff:cf:4a:ce:d6:3c:41:01:
1c:17:51:84:9f:47:47:34:85:9e:c7:3b:28:48:ee:45:50:57:
5f:f2:83:b0:75:47:f1:35:0c:e6:15:ce:cf:7b:d6:cc:ef:4b:
c1:3e:8b:91:01:d9:76:17:f5:20:19:6a:1a:94:96:45:33:02:
b3:0c:80:91:88:7d:37:37:37:43:02:25:37:70:dd:ad:52:4b:
80:7e:4d:0b:c5:b7:53:9a:ca:6b:c5:14:ac:c2:53:2c:6e:9f:
02:b7:8e:7b:5e:e1:9f:52:7a:51:d8:a0:2b:57:48:c1:47:f6:
f6:e0:aa:33:e1:33:fe:d0:51:b2:47:dd:ac:84:0e:f2:9b:bc:
1f:c7:f9:ea:7f:1f:49:6e:df:f0:e4:47:cc:90:e3:4b:a9:0b:
42:89:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:41 2025 by rpki-client