Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: ozJZFZZsqD47kaCJDmrCYsY8MJPZxbDhzPPc6N/G5pA=
Subject key identifier: 68:EB:83:89:C5:53:CF:22:F7:B5:53:D0:49:FB:95:AF:76:0C:DE:B6
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 0198D47333012EB800A9F6DAD414DE8BD6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 10BF
Signing time: Sat 23 Aug 2025 01:02:55 +0000
Manifest this update: Sat 23 Aug 2025 01:02:55 +0000
Manifest next update: Sun 24 Aug 2025 01:02:55 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: Np9KW0O6RlM+6l+wERrWBu5bj8uQHf6656Cd+ypcQJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:33:01:2e:b8:00:a9:f6:da:d4:14:de:8b:d6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Aug 23 01:02:55 2025 GMT
Not After : Aug 24 01:02:55 2025 GMT
Subject: CN=68eb8389c553cf22f7b553d049fb95af760cdeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:29:35:f9:0f:30:66:c2:d9:70:6b:a4:25:
22:2c:4f:55:2d:83:6e:b0:ab:ae:87:ce:0e:0d:d4:
2f:4b:8e:95:b4:42:58:97:d8:eb:db:27:f8:fa:c0:
f0:d0:3f:a5:1d:53:72:99:56:08:c6:eb:9a:61:b9:
b5:ad:b8:5d:e3:46:2d:26:1b:00:37:77:5f:c7:23:
ca:39:19:94:50:b3:4c:d4:48:e1:6a:b5:3e:06:6e:
80:0a:89:d3:41:aa:6e:64:ea:92:0a:95:27:3a:d8:
17:b8:c0:3e:20:f0:16:95:27:f9:50:67:bd:e3:30:
dc:eb:c5:22:ba:d6:bb:a0:29:cb:fb:ce:35:3e:53:
ef:de:a4:e1:7a:d7:32:1c:ca:d8:40:20:ea:0d:4e:
33:c6:51:de:43:c8:56:d4:c8:8e:ac:45:0f:2f:5a:
ed:ea:c7:fb:a7:b8:85:3d:ff:88:1f:e1:d4:ea:55:
01:54:8a:07:32:cd:1b:8d:ed:a9:f9:0a:a9:f4:55:
7f:ef:13:a8:d6:e8:0c:13:6c:a9:4e:34:28:4f:8b:
f7:2c:24:27:65:04:cf:f5:a0:9d:e1:af:9e:12:d5:
6c:19:1c:da:a0:5b:15:e6:7e:ce:ce:5c:ad:8a:5d:
b9:2d:6e:62:9e:3f:d7:6d:a5:d3:e5:46:b4:8c:36:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:83:89:C5:53:CF:22:F7:B5:53:D0:49:FB:95:AF:76:0C:DE:B6
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0e:f2:4f:a2:c7:9c:53:1e:a6:64:b2:d7:b0:ae:41:f1:22:
4b:b3:22:9e:ad:44:3e:7b:37:d1:cc:d0:c9:d3:76:6f:19:6f:
55:a3:be:f1:29:d6:30:63:4d:03:e7:21:af:b7:75:63:1e:46:
be:4b:11:32:78:b3:f0:e5:a4:1d:8b:c7:48:73:5e:00:b0:b3:
c4:ab:81:10:bc:14:f1:11:e7:09:cc:30:07:c4:6a:78:24:4c:
c2:eb:ba:e5:e2:d7:88:e8:d1:84:00:da:5e:a5:45:b3:7c:ce:
91:d0:b7:b6:fa:e5:28:4b:c4:16:1a:98:e2:44:e0:6b:45:22:
34:a2:50:c1:94:e3:73:55:a0:1f:3a:e7:40:20:56:7e:3a:53:
59:ce:99:58:5e:5b:07:50:c9:2d:81:30:fa:35:2f:09:32:cb:
13:8b:db:08:d9:8c:ad:62:d7:51:6a:61:54:51:0d:23:8d:8a:
1c:52:03:ea:43:6f:24:72:54:99:8c:ee:9d:93:4f:a8:a1:b7:
89:60:0b:5a:2d:8f:b1:6f:8b:20:85:85:b5:af:85:67:6d:e4:
14:b4:f4:6a:e1:14:37:c4:3c:68:63:8e:8f:19:9a:5b:1c:68:
37:33:0e:b0:3d:f4:89:a9:f1:fb:64:e5:d7:50:12:00:d0:27:
52:7d:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:05 2025 by rpki-client