
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json)
Hash identifier: 17+pouP6L3gOi7XJhlrt8eNqT/1EeLkNYlzS7Q6tsuk=
Subject key identifier: 6A:7E:C1:AC:15:55:F0:F7:18:D9:AC:45:E1:E6:FC:6C:23:29:D5:54
Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Certificate serial: 0199FBEC18CECB36CD993B125F917ED2BE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
Manifest number: 1332
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: IL1CGNqphtNSOCVQArpb2QbfpxGe9rwIBDyx7p+r598=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:18:ce:cb:36:cd:99:3b:12:5f:91:7e:d2:be:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=6a7ec1ac1555f0f718d9ac45e1e6fc6c2329d554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:74:6e:47:8a:81:ae:c0:97:43:f7:38:e4:
c6:b8:32:75:33:e1:47:0f:ca:1f:52:6c:89:f8:57:
77:8a:c1:f6:45:5f:7f:2a:60:8e:39:f7:68:47:9f:
01:f2:0f:31:2b:95:9c:95:68:e2:8a:1b:7d:90:65:
fa:54:e2:74:8d:c4:8c:f7:26:24:d5:f5:2f:68:28:
8e:d2:ed:1c:39:78:5b:d8:9d:72:b0:5f:e9:ab:c0:
89:14:1a:c5:20:06:e6:7a:e4:87:69:e2:00:92:03:
21:d9:7f:aa:c8:42:d7:a6:d5:b6:b1:ca:82:63:35:
de:f7:9a:9b:80:dc:df:65:cf:e8:d6:f0:53:1e:7c:
55:ef:f8:e0:1d:c8:bd:8a:43:90:45:f9:67:79:1c:
e5:29:44:b6:14:ce:35:98:f4:6c:ff:c4:95:61:62:
99:42:00:6b:49:84:88:ae:4b:6e:5f:2f:21:91:aa:
02:2d:a5:d8:f2:57:10:db:1b:44:c7:44:0f:a6:5e:
10:cf:f7:90:e8:24:f9:5d:f1:b2:22:f6:3c:1c:a6:
2e:3e:75:f7:34:72:f7:49:53:78:aa:0c:58:44:09:
b3:71:71:eb:93:96:67:93:64:e7:39:32:53:e1:8a:
bf:ae:10:bc:10:71:8c:aa:06:c3:21:2e:16:fc:32:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7E:C1:AC:15:55:F0:F7:18:D9:AC:45:E1:E6:FC:6C:23:29:D5:54
X509v3 Authority Key Identifier:
keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ef:3a:5f:0a:96:c8:60:18:f9:e2:0b:69:90:d2:2d:3d:03:
09:6b:bb:6e:72:87:b2:91:9f:50:83:40:f3:3b:e7:6f:92:d0:
05:bb:ac:3a:bf:ac:84:0b:18:2f:be:ae:e5:f8:9b:88:35:31:
3f:ac:c1:a7:97:1f:e2:3e:df:3a:62:5a:74:55:ae:ce:5c:a8:
6f:a5:f9:33:b2:32:0b:f9:a6:db:8e:85:84:b8:ec:9b:cd:e0:
bb:10:73:80:a1:05:e2:61:34:00:ba:78:f9:ab:76:48:09:56:
69:a4:5f:8c:08:b9:87:21:bf:48:a2:fd:f4:f8:ec:8d:7f:46:
ce:ee:9b:9c:46:91:36:66:b8:d9:b4:81:63:4a:b5:dd:fa:ee:
27:49:96:d1:52:f6:56:b2:bf:1e:1e:4a:1d:e9:59:22:54:bd:
e9:9f:eb:98:98:f8:ab:59:d7:43:75:b8:63:ce:93:fa:e8:eb:
b4:0b:ab:eb:ba:6b:4a:fc:ac:14:f0:47:80:6f:1f:31:23:5b:
17:d0:39:e7:a4:8a:a7:ca:2d:ef:25:73:f5:c6:4c:2f:9a:fe:
a2:e4:84:f3:cd:13:16:e3:e8:e8:a9:49:32:df:c7:0f:e8:c8:
2c:0c:d5:d2:fb:e8:8c:90:94:1f:30:68:3a:0d:e9:12:1e:b4:
d1:f6:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:42 2025 by rpki-client