Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json)
Hash identifier: kgV2G2f7K53dteaofsvvj56V4/AiaBHwSaIaqFEQJtY=
Subject key identifier: 83:D9:E5:76:66:C2:B1:0D:57:F1:12:6C:A9:9B:82:A1:2D:65:E5:08
Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Certificate serial: 0198D660996C69B86FC1ECE1A56001760A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
Manifest number: 129A
Signing time: Sat 23 Aug 2025 10:01:51 +0000
Manifest this update: Sat 23 Aug 2025 10:01:51 +0000
Manifest next update: Sun 24 Aug 2025 10:01:51 +0000
Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: FOGO+C0n98/tmv9Yw/n4q/fxgHhm2IVaVHJDb3lSiV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:99:6c:69:b8:6f:c1:ec:e1:a5:60:01:76:0a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Validity
Not Before: Aug 23 10:01:51 2025 GMT
Not After : Aug 24 10:01:51 2025 GMT
Subject: CN=83d9e57666c2b10d57f1126ca99b82a12d65e508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:26:dd:14:6f:ff:1c:1f:e0:a9:94:58:5b:
b6:14:4f:74:c6:2d:90:b1:0d:69:4b:9e:4f:81:fc:
0b:66:dd:ff:eb:e6:30:1d:a6:89:b6:f1:f7:0f:1f:
c5:85:26:0b:4d:c1:d7:e2:4b:c6:00:3b:14:0c:60:
fb:2f:7e:c6:33:c9:a5:b2:46:79:93:ba:f1:82:87:
0e:a7:1b:93:b3:2b:dd:77:5e:32:78:88:c9:e5:81:
15:6e:27:8a:d7:14:76:88:a9:a0:5e:37:7a:c0:2c:
4b:fb:83:b0:dd:f3:b9:43:8d:1b:da:a7:e1:c5:0c:
fd:94:6e:d1:0b:e7:91:e0:ae:07:99:a5:7e:43:36:
69:5a:be:78:1c:95:5c:d9:8f:84:ad:82:09:09:0b:
fa:b7:84:35:85:94:14:99:7f:d3:72:8e:6b:75:6f:
e3:fc:7f:15:19:16:64:b8:2a:2c:a0:ab:e9:d1:67:
dc:d4:80:19:17:b0:40:ac:88:06:c2:97:ea:6b:c3:
f0:08:88:54:9b:38:0d:fa:9d:0d:49:62:e5:ea:8c:
88:9d:dd:ef:45:29:6c:e7:6e:46:35:79:ed:dc:d6:
a0:1d:aa:b0:fa:a7:37:a4:69:bf:80:71:64:0c:e6:
0c:b9:a1:dc:a4:63:7b:50:e8:03:49:83:20:67:ee:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D9:E5:76:66:C2:B1:0D:57:F1:12:6C:A9:9B:82:A1:2D:65:E5:08
X509v3 Authority Key Identifier:
keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:52:1d:db:4b:2b:91:fb:87:f5:7e:8d:f3:81:f4:fd:c9:03:
19:46:24:9f:98:6c:48:92:a0:f2:63:39:e7:18:5d:3c:1e:3f:
0a:f3:e0:77:60:c2:1b:99:85:9e:7c:09:1b:b1:22:ec:12:5d:
49:4d:08:5e:71:39:26:c5:42:b3:69:47:32:da:0f:aa:d8:8b:
63:99:99:a5:e2:41:09:45:28:9b:4f:18:fd:2f:c3:18:4b:9d:
62:6d:3e:ae:15:a2:92:17:a6:f4:82:2c:a4:4e:bc:94:90:35:
39:f1:cb:89:3c:63:9d:e1:ea:e5:61:ab:16:59:15:28:a2:1d:
f9:2a:c2:8b:72:3f:55:66:e5:82:c9:37:eb:8a:c1:6a:e2:8c:
00:42:2c:92:ff:1f:9f:67:b2:a4:d8:13:4a:cb:11:31:bf:ea:
17:c1:e4:35:fa:4d:07:5d:8a:39:29:fc:c0:fd:ab:2f:ee:08:
10:06:e5:1a:1d:4a:dc:ef:9a:1d:f8:c9:cf:72:63:ce:84:18:
cd:f3:37:41:2b:28:64:0e:77:59:25:44:8c:91:26:80:dd:a7:
ed:f8:61:94:48:25:2e:22:00:31:85:72:0b:dc:d9:91:60:66:
b9:01:e4:06:64:4a:a0:ed:12:fa:1f:40:e7:66:7e:5f:9d:ee:
99:18:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:25:45 2025 by rpki-client