Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: /kJSAQFT3eUtwK2edJ6eh2+U/p5gg799ZNuDguk4Avg=
Subject key identifier: 44:0F:A9:7E:7C:66:79:C9:11:89:F4:68:AB:A2:5B:68:5C:F1:66:5A
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 0198D5BB92F85A89F0A6E397417881084CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 0370
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: tp6+VIx9vjVwQt1RQimO6Gu77MV7zggaMGBOlD05dzc=)
2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:92:f8:5a:89:f0:a6:e3:97:41:78:81:08:4c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=440fa97e7c6679c91189f468aba25b685cf1665a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:7d:e2:b1:c5:5c:d6:47:7c:df:e5:99:5b:
67:0e:20:d4:48:18:03:13:11:94:8a:5a:55:99:d3:
22:cf:4d:68:9f:2d:ee:07:c7:3d:8d:bc:a7:42:91:
59:e7:a2:f7:53:86:f1:c8:6b:e9:3c:a3:38:a4:55:
e1:67:50:29:06:e8:29:04:5e:8a:52:6f:44:c6:9b:
da:20:05:b8:27:3e:e3:ee:af:57:fc:bb:98:0a:5d:
ef:b2:24:8c:29:f6:b7:35:07:80:59:08:8c:11:a1:
28:03:83:ee:7c:c7:1e:3d:4a:11:22:25:98:37:75:
c9:72:c0:55:a0:85:c3:6d:24:fc:d0:03:27:06:0d:
dd:3b:bc:3b:5a:91:88:8b:5f:30:a1:36:31:fd:97:
0b:b1:0e:bd:96:f8:32:19:56:32:c0:79:c6:58:ea:
6b:f3:a8:b6:66:eb:c5:b5:ec:bf:cc:d0:9c:20:ca:
16:09:d1:09:fd:9e:49:4a:d5:6a:f4:4b:b4:de:e6:
a2:77:3e:cb:ca:23:fe:b7:0c:5f:87:ce:f2:55:fb:
e4:16:4b:31:9e:48:14:89:04:b9:58:32:be:35:95:
d7:90:a6:9f:b9:17:00:ec:d3:bb:de:6e:b9:b9:81:
28:1d:4d:2c:74:6f:65:a1:b7:c6:55:55:9b:6e:73:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0F:A9:7E:7C:66:79:C9:11:89:F4:68:AB:A2:5B:68:5C:F1:66:5A
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b5:af:77:34:18:0c:d6:a3:94:27:c1:6d:7b:d3:7a:50:58:
c9:57:40:75:bd:02:3f:44:2f:de:59:d8:b4:65:c7:c1:a5:bd:
b4:90:b2:38:1c:87:c3:99:a5:37:4b:be:3e:6d:4f:8a:72:02:
dc:9e:db:03:3c:2a:b2:8f:22:dd:c8:97:8a:9d:6b:a4:43:06:
51:21:b3:cd:de:5f:64:b5:42:5a:7e:59:8c:bd:31:2e:4b:a8:
d1:eb:36:af:db:9a:ca:55:08:ed:a9:c2:63:f5:9f:cd:cd:c5:
32:0a:9e:cc:e3:25:fa:32:6d:cd:fc:ed:61:6a:7f:49:c8:b9:
bf:1c:66:d9:91:63:1a:f3:81:70:fb:0c:6d:1d:93:b6:64:30:
e1:3d:ab:bc:9b:0d:d2:4f:99:97:4f:00:af:54:76:d7:32:c0:
54:76:e3:ac:61:ba:83:32:0f:90:b5:36:98:2e:ef:64:17:94:
52:9e:5f:95:5d:19:ee:77:47:4d:9a:bb:26:fc:66:0d:da:ac:
4f:90:ee:d8:ab:2d:c6:1e:e3:ef:24:c7:95:d4:97:cc:33:dd:
46:85:68:35:95:23:67:69:fc:85:19:35:ea:3a:94:29:52:1e:
d7:32:f7:ef:05:6e:de:93:e3:da:73:8e:0a:d7:eb:7d:04:30:
27:4f:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:20:23 2025 by rpki-client