
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier: 2KmwFCKdwsjoOFCar2tyfRn4cpq3Aakp6XrGEiEuVZ8=
Subject key identifier: 6C:A5:DA:F7:71:F9:BF:C1:F0:63:BA:F1:5F:D5:92:E8:AF:D2:A4:69
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 0198D5838CE8A1C52A24F91AF84617EFCDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number: 58
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: 7X+GQzfPP2V0BMqt9lGAR2vVydXiRBYgswGFZJCWCf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8c:e8:a1:c5:2a:24:f9:1a:f8:46:17:ef:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=6ca5daf771f9bfc1f063baf15fd592e8afd2a469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:90:69:34:a8:5d:6e:4e:b5:5b:7f:d2:a6:
12:b0:49:6e:11:fb:40:4b:20:7e:13:dd:5e:d7:7b:
e7:4f:62:f2:f0:5d:69:00:0f:e8:a8:bc:08:18:71:
d0:e4:63:eb:b4:bc:61:42:ef:f9:a5:fe:33:1c:b0:
e7:e4:57:74:01:67:dd:11:31:7a:b7:7d:8d:a9:c2:
dd:3a:33:fd:13:71:97:dc:37:46:d8:52:2b:09:c5:
9b:f5:e8:74:b9:43:bc:0e:bf:f7:b5:a2:f7:a0:55:
60:75:43:0d:89:89:7e:fe:f9:4b:82:bb:5d:4f:08:
f4:46:e5:e2:9e:e1:59:5d:d6:db:3d:97:25:14:54:
bb:56:38:b4:0c:90:3b:2f:34:5e:3b:56:2c:82:69:
91:70:b9:13:1c:3b:2b:17:17:3e:ab:94:80:d6:ad:
bf:b7:35:ab:50:cb:04:96:4c:3e:30:7e:cc:f0:9e:
82:ac:8e:24:fc:81:9a:29:34:59:87:47:fe:fa:30:
1b:8c:9c:0a:e5:13:62:cc:08:c9:53:28:33:e5:10:
3d:bb:b9:86:07:78:8d:46:be:0a:40:70:00:20:63:
5a:87:45:05:f9:72:34:c3:64:1a:38:cf:82:95:fb:
84:69:93:d3:75:dd:af:af:ca:e8:87:a0:f5:84:0e:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A5:DA:F7:71:F9:BF:C1:F0:63:BA:F1:5F:D5:92:E8:AF:D2:A4:69
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:85:f0:bc:8d:62:1b:8d:41:33:2e:ad:87:d2:36:20:50:28:
1c:14:ac:6b:e2:61:46:3a:15:b4:43:0c:c2:da:3c:e7:57:ca:
87:1e:c6:8e:62:79:e7:51:08:3c:f5:18:90:56:c8:ed:09:18:
01:9d:5d:aa:cb:38:91:34:68:0b:54:c2:42:a0:18:37:81:3f:
3d:9e:a1:22:4c:fb:3a:c3:98:31:d0:0d:40:3f:6b:64:5e:7c:
9b:26:0e:b7:11:88:0e:59:69:f6:dd:e9:30:bd:3f:a0:28:1c:
7b:ab:ef:90:59:36:33:6a:55:0a:4c:ca:ea:34:ae:7c:6d:be:
a5:ea:4b:27:bf:88:50:55:4a:10:a2:f9:63:a5:e5:82:ee:36:
56:24:2f:f3:c9:a4:83:31:58:73:d6:0a:af:f8:d3:f8:54:58:
03:d2:76:5f:ad:46:52:35:2b:97:83:ff:fd:ed:4a:af:16:76:
eb:5c:e8:8b:28:c6:a7:12:fb:bc:a4:a5:20:55:f5:4d:3f:7f:
91:7d:43:a6:01:80:57:87:e6:3c:79:31:88:3a:31:c0:7a:dc:
08:d2:93:11:38:f5:b9:c6:99:cd:a4:b2:ae:ec:2d:8d:de:df:
87:c7:bf:4f:6b:49:b9:b5:26:bb:4d:52:37:96:d0:f8:2d:9b:
6c:1f:fa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:56 2025 by rpki-client