Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: GHSSkTT/E9tRrLWu6zn/RyX1qb0Gd8Z6ZUm4Pgpsud8=
Subject key identifier: 73:C7:9B:40:89:0F:85:F4:43:62:98:11:F7:18:6C:57:E3:B8:30:6B
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 0198D472E3BAB7B7222A948AFFB403B8B967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 0170
Signing time: Sat 23 Aug 2025 01:02:35 +0000
Manifest this update: Sat 23 Aug 2025 01:02:35 +0000
Manifest next update: Sun 24 Aug 2025 01:02:35 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: Q8lQTcaxhoN+MS/vtp+2ehkzHfH/RBdABA7I/l3MCfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e3:ba:b7:b7:22:2a:94:8a:ff:b4:03:b8:b9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Aug 23 01:02:35 2025 GMT
Not After : Aug 24 01:02:35 2025 GMT
Subject: CN=73c79b40890f85f443629811f7186c57e3b8306b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:a9:81:87:a9:23:0c:14:74:cb:ed:ac:8d:
62:d1:c5:6e:25:87:15:b7:bf:eb:a8:8a:51:7a:38:
51:70:85:47:6d:3b:3f:d1:e8:6a:d6:f5:0b:df:49:
f9:21:3c:38:f1:b6:5f:81:c8:f2:90:ce:1e:4c:c2:
a7:3d:20:dd:71:95:d5:f3:76:7a:b3:f0:ba:80:48:
89:e2:2b:d5:1d:8d:67:43:ff:2c:b7:e6:b7:99:74:
9d:73:80:56:61:da:f9:95:2b:58:7a:ea:a1:82:0b:
86:16:66:4b:86:15:1b:e6:82:0a:b6:52:82:37:4c:
ea:ee:93:f5:57:14:38:c8:97:a8:24:43:1e:ad:57:
7a:3c:bd:40:9c:7b:1b:e4:6f:6c:30:44:70:8a:e6:
97:03:96:8f:4c:81:83:97:f0:93:a6:ab:37:42:17:
07:6c:40:83:ef:e7:63:54:5f:ea:7c:96:9b:1c:ca:
68:5d:8d:05:ed:3d:f4:04:23:d0:5e:f3:7c:ac:bc:
a6:7d:76:91:26:f0:9c:98:0e:a1:e4:ff:ea:02:ee:
0d:35:07:f0:52:46:3e:9a:fe:74:7a:60:5e:0d:79:
88:2f:89:1a:27:bb:0b:5f:3a:49:e1:61:ab:77:b5:
c3:c9:60:1f:61:4c:69:5e:63:86:93:92:8d:b5:dd:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:9B:40:89:0F:85:F4:43:62:98:11:F7:18:6C:57:E3:B8:30:6B
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:c5:99:3b:19:4d:3c:f4:dc:0c:fd:4a:d0:d9:a3:0e:f2:
ae:ec:d5:7f:65:ce:6c:49:2f:fb:93:4e:9f:a3:61:a3:df:45:
1b:bf:8d:b8:e1:9d:83:b0:12:42:8c:90:29:7a:46:e9:bf:6a:
52:f5:bc:c7:35:cf:85:da:1f:c0:4d:94:c8:13:1e:04:b4:ce:
ea:3c:5e:45:a2:8e:07:3a:f6:8b:50:13:2a:2d:c6:99:e8:d7:
27:44:8d:51:47:ad:22:91:60:cd:5e:cf:a7:ea:55:33:e3:4a:
7c:4f:df:80:b8:d9:3c:5c:4d:31:ab:46:b7:cc:88:54:02:b3:
fd:eb:1f:db:93:39:a8:76:63:87:c2:4c:f7:b0:d6:6b:e4:3a:
57:1d:dd:a6:1c:65:e2:df:e4:48:1c:3f:f5:82:ac:ab:e9:c3:
93:6d:ea:83:46:0a:fe:f0:7c:33:6f:22:6c:65:2c:8f:8a:08:
5a:df:f5:38:11:54:9e:a0:12:41:bc:f4:7f:b4:aa:63:1e:24:
3d:f7:d0:c7:6e:11:79:2c:90:29:f2:22:6f:1b:da:ad:f1:80:
8a:9c:9a:8b:0a:21:d5:3b:9b:bb:6a:7c:0d:3d:38:14:01:96:
8b:6c:77:53:a3:00:3e:20:4d:33:7f:c4:bd:a8:34:a3:f8:79:
51:2b:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:46 2025 by rpki-client