Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
File: aEdQ3w66d01LTWROyOM1CPj1OP4.mft (raw, json)
Hash identifier: Su5km+78mdaj51g9mL/EKdpSsTJemN7f8dz32t721Tw=
Subject key identifier: 5E:92:3D:34:E9:CE:C9:07:AF:9A:7C:3F:B4:EC:55:03:09:A1:16:4A
Authority key identifier: 68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE
Certificate issuer: /CN=684750df0eba774d4b4d644ec8e33508f8f538fe
Certificate serial: 0198D70592F0245474AE272A9A2A94C8DBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
Manifest number: 06F3
Signing time: Sat 23 Aug 2025 13:02:03 +0000
Manifest this update: Sat 23 Aug 2025 13:02:03 +0000
Manifest next update: Sun 24 Aug 2025 13:02:03 +0000
Files and hashes: 1: aEdQ3w66d01LTWROyOM1CPj1OP4.crl (hash: gfuL/w84MidWKam7GzOfDHahlqGUVjp60/gs8rE6pao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:92:f0:24:54:74:ae:27:2a:9a:2a:94:c8:db:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684750df0eba774d4b4d644ec8e33508f8f538fe
Validity
Not Before: Aug 23 13:02:03 2025 GMT
Not After : Aug 24 13:02:03 2025 GMT
Subject: CN=5e923d34e9cec907af9a7c3fb4ec550309a1164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:9a:b5:71:e4:a0:c7:1e:75:6b:4a:53:48:
b9:23:b0:9b:70:fc:28:e9:28:00:c5:e7:3a:2a:70:
b8:9b:53:24:c4:aa:70:3d:b7:57:59:80:e1:35:94:
96:39:6b:db:cd:31:7e:36:16:71:df:bc:ca:c8:e0:
96:91:c6:1d:c2:a2:9b:a4:36:22:c0:87:55:89:7f:
24:90:d6:ea:e4:9c:9c:22:35:9c:9f:ce:9c:3a:f1:
09:01:44:e9:f5:7c:54:f7:a4:84:7c:8d:f6:75:ac:
d1:9b:47:27:fa:aa:2c:76:7c:7c:89:97:55:b5:b2:
6b:fa:24:cf:f8:57:55:10:a5:7d:07:00:63:02:8a:
48:a0:76:70:96:00:08:0e:37:6f:b9:14:3e:aa:8c:
4e:46:53:a6:e7:8e:72:63:44:5d:60:c0:ac:d3:cd:
78:be:86:13:24:2e:65:a8:3b:8e:98:fc:b6:56:55:
29:f8:be:64:bd:88:e5:79:13:b8:3f:02:78:5d:40:
09:7d:69:cd:a7:00:6a:f2:ad:24:85:35:ff:68:f8:
87:6a:b4:d1:5b:f2:ea:e2:bd:38:1c:62:b9:9a:39:
95:33:56:d8:90:36:ba:f5:90:0c:ea:72:b3:5d:cb:
d0:0e:c9:1e:66:80:13:bc:1b:6e:63:ff:53:90:90:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:92:3D:34:E9:CE:C9:07:AF:9A:7C:3F:B4:EC:55:03:09:A1:16:4A
X509v3 Authority Key Identifier:
keyid:68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7f:89:a4:14:76:71:c1:7e:be:2e:46:eb:83:0a:55:eb:1a:
5b:ce:33:70:78:59:74:aa:5c:6a:1b:35:69:9c:a5:18:e5:13:
d0:9c:b0:2a:de:4e:e4:d3:1d:a1:97:76:16:b4:be:1b:df:0c:
44:aa:0c:c2:4c:34:e1:c6:be:29:64:b1:e7:90:57:6b:ae:26:
2d:92:73:4a:9f:38:52:2e:eb:b9:e9:c6:f6:bf:3d:f7:3c:85:
02:b0:f9:37:14:05:71:35:fd:cc:90:b4:0d:4f:6d:d8:3b:59:
41:8d:68:b3:43:ab:a2:81:93:15:ca:7d:88:16:11:d0:75:3e:
b4:b9:fc:e5:db:29:09:b2:d6:b8:69:42:70:cd:2a:9b:36:f1:
88:72:3a:a9:7b:6e:fe:85:eb:a7:d1:3e:0f:19:b2:70:43:7c:
a4:da:6c:38:54:87:3c:04:66:d5:39:f5:cd:79:6f:2c:68:a6:
f2:a7:2a:2e:d1:db:a9:4d:45:0a:67:8f:7a:a0:e4:7d:8c:7e:
ea:e1:1c:4e:0a:dc:fa:cd:fb:f1:31:6c:9f:79:f7:d6:eb:5d:
39:a6:15:01:66:bb:89:d0:c8:e1:fd:77:16:8a:7f:06:ff:5e:
af:c4:ba:b4:f5:a0:f8:8d:61:6e:4c:1a:1e:07:98:24:fc:4f:
94:51:63:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBZLwJFR0ricqmiqUyNviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDc1MGRmMGViYTc3NGQ0YjRkNjQ0ZWM4ZTMzNTA4Zjhm
NTM4ZmUwHhcNMjUwODIzMTMwMjAzWhcNMjUwODI0MTMwMjAzWjAzMTEwLwYDVQQD
Eyg1ZTkyM2QzNGU5Y2VjOTA3YWY5YTdjM2ZiNGVjNTUwMzA5YTExNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwSatXHkoMcedWtKU0i5I7CbcPwo
6SgAxec6KnC4m1MkxKpwPbdXWYDhNZSWOWvbzTF+NhZx37zKyOCWkcYdwqKbpDYi
wIdViX8kkNbq5JycIjWcn86cOvEJAUTp9XxU96SEfI32dazRm0cn+qosdnx8iZdV
tbJr+iTP+FdVEKV9BwBjAopIoHZwlgAIDjdvuRQ+qoxORlOm545yY0RdYMCs0814
voYTJC5lqDuOmPy2VlUp+L5kvYjleRO4PwJ4XUAJfWnNpwBq8q0khTX/aPiHarTR
W/Lq4r04HGK5mjmVM1bYkDa69ZAM6nKzXcvQDskeZoATvBtuY/9TkJBGHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6SPTTpzskHr5p8P7TsVQMJoRZKMB8GA1UdIwQY
MBaAFGhHUN8OundNS01kTsjjNQj49Tj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVkUTN3NjZkMDFMVFdST3lPTTFDUGoxT1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTAxZmUtNTJjMS00ZDViLTllMGYt
ZDMyNWY2ODYzMzQzLzEvYUVkUTN3NjZkMDFMVFdST3lPTTFDUGoxT1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTAxZmUtNTJjMS00ZDViLTllMGYtZDMyNWY2ODYzMzQz
LzEvYUVkUTN3NjZkMDFMVFdST3lPTTFDUGoxT1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApH+JpBR2
ccF+vi5G64MKVesaW84zcHhZdKpcahs1aZylGOUT0JywKt5O5NMdoZd2FrS+G98M
RKoMwkw04ca+KWSx55BXa64mLZJzSp84Ui7ruenG9r899zyFArD5NxQFcTX9zJC0
DU9t2DtZQY1os0OrooGTFcp9iBYR0HU+tLn85dspCbLWuGlCcM0qmzbxiHI6qXtu
/oXrp9E+DxmycEN8pNpsOFSHPARm1Tn1zXlvLGim8qcqLtHbqU1FCmePeqDkfYx+
6uEcTgrc+s378TFsn3n31utdOaYVAWa7idDI4f13Fop/Bv9er8S6tPWg+I1hbkwa
HgeYJPxPlFFjmg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:45 2025 by rpki-client