Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: 6kN/4ZR/cKVqL2f/lUdY49/9nAAhyqqq4MNm3TTuyfY=
Subject key identifier: 0E:F8:F6:E4:4A:94:F4:13:BD:DC:D6:B8:73:F1:53:D7:6B:69:88:5B
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 0198D515CE67A4C4A6E846829D99DD596406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:32 +0000
Manifest this update: Sat 23 Aug 2025 04:00:32 +0000
Manifest next update: Sun 24 Aug 2025 04:00:32 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: EEgM0xmWUrtDpm/lOYrqeqPN+30d+kXdvYBUKdBLkUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ce:67:a4:c4:a6:e8:46:82:9d:99:dd:59:64:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Aug 23 04:00:32 2025 GMT
Not After : Aug 24 04:00:32 2025 GMT
Subject: CN=0ef8f6e44a94f413bddcd6b873f153d76b69885b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:91:8f:c9:ae:54:c8:e1:80:a3:7b:59:0f:
eb:a9:d0:3d:eb:bd:a5:a7:35:41:59:01:48:95:bd:
5d:44:6f:30:73:16:51:83:eb:70:f0:ba:aa:3b:7f:
05:63:06:47:b0:b5:68:6d:c5:bd:1a:00:4f:05:9b:
10:ea:92:44:8e:a2:77:93:02:eb:fd:4e:c6:fa:77:
71:55:40:bc:3d:92:3d:68:3e:8f:50:e9:32:e5:25:
0c:90:d7:79:33:07:07:fc:0b:29:f4:8e:d6:a5:0d:
39:43:e3:a6:b7:d8:7f:44:5b:9a:43:0e:44:81:63:
99:8b:17:17:21:c6:11:44:38:79:66:d7:7f:a1:fb:
84:1e:82:91:e9:61:c3:59:59:e1:88:c6:c2:86:5f:
a3:fc:0b:30:2d:5c:77:a3:99:4c:5d:33:07:70:43:
c3:b2:00:9b:9d:0c:7f:46:67:ee:6a:a9:22:79:2b:
0a:f3:84:2c:50:00:2a:e7:6c:04:9f:45:48:7b:a1:
80:45:c5:06:52:19:ff:97:d0:83:21:16:16:99:c3:
ab:11:e9:ef:cd:b7:d2:5d:86:69:09:98:25:ac:8e:
fb:b5:7c:36:32:e3:67:3d:37:db:69:05:ff:45:c2:
fb:bb:df:c7:da:59:45:c7:cb:e1:f9:ec:0b:9e:6c:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:F6:E4:4A:94:F4:13:BD:DC:D6:B8:73:F1:53:D7:6B:69:88:5B
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:31:9c:f6:99:49:fb:c5:19:e8:50:a0:30:91:a1:06:58:69:
3f:6e:37:39:db:60:c8:29:5d:a4:62:54:91:66:c6:31:60:57:
59:a0:42:66:99:27:da:04:c7:a3:2b:e5:5d:45:c8:cf:67:5b:
c4:12:26:02:a8:65:33:e0:55:07:4a:b9:04:ca:ce:1d:f0:b8:
5f:03:3b:30:f8:27:06:e1:e5:97:37:a2:62:07:34:cc:20:54:
d6:60:64:d3:f6:5a:7e:ec:d3:a4:bf:ed:28:bb:a6:d1:11:ff:
8a:3f:a2:f0:8e:6f:6a:7d:36:29:9b:14:b1:9f:49:1e:8b:5d:
69:e8:e0:9f:ff:af:6c:b3:f0:83:32:77:ae:f5:36:ff:db:4a:
c9:cf:d8:bf:ab:72:7d:dc:23:8d:4b:b5:e2:9c:22:7a:7b:10:
2c:24:5f:59:f4:15:a4:ac:f6:9b:96:e9:19:8b:51:be:5a:a2:
be:1f:d6:c2:80:e0:4d:00:a0:8e:2d:04:4e:42:3a:e7:e0:3b:
07:ec:86:2c:6e:1d:b7:3e:91:fb:6e:e1:52:7d:8d:b6:b8:6a:
1d:76:f0:6a:72:68:ba:d4:15:42:50:48:34:16:86:67:54:7c:
d2:e2:ff:78:35:45:85:20:ca:ad:44:d8:05:d0:e0:25:fc:7a:
b4:b1:9c:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFc5npMSm6EaCnZndWWQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDA2ZDVlMGMyNzkzMTFkMWE4MWZkMGJiZDIxMGQwYmRh
ZDU5NDIwHhcNMjUwODIzMDQwMDMyWhcNMjUwODI0MDQwMDMyWjAzMTEwLwYDVQQD
EygwZWY4ZjZlNDRhOTRmNDEzYmRkY2Q2Yjg3M2YxNTNkNzZiNjk4ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAqRj8muVMjhgKN7WQ/rqdA9672l
pzVBWQFIlb1dRG8wcxZRg+tw8LqqO38FYwZHsLVobcW9GgBPBZsQ6pJEjqJ3kwLr
/U7G+ndxVUC8PZI9aD6PUOky5SUMkNd5MwcH/Asp9I7WpQ05Q+Omt9h/RFuaQw5E
gWOZixcXIcYRRDh5Ztd/ofuEHoKR6WHDWVnhiMbChl+j/AswLVx3o5lMXTMHcEPD
sgCbnQx/RmfuaqkieSsK84QsUAAq52wEn0VIe6GARcUGUhn/l9CDIRYWmcOrEenv
zbfSXYZpCZglrI77tXw2MuNnPTfbaQX/RcL7u9/H2llFx8vh+ewLnmwLtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA749uRKlPQTvdzWuHPxU9draYhbMB8GA1UdIwQY
MBaAFAAAbV4MJ5MR0agf0LvSENC9rVlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2Ut
MWY5MThkOTM3NTZmLzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2UtMWY5MThkOTM3NTZm
LzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzGc9plJ
+8UZ6FCgMJGhBlhpP243OdtgyCldpGJUkWbGMWBXWaBCZpkn2gTHoyvlXUXIz2db
xBImAqhlM+BVB0q5BMrOHfC4XwM7MPgnBuHllzeiYgc0zCBU1mBk0/ZafuzTpL/t
KLum0RH/ij+i8I5van02KZsUsZ9JHotdaejgn/+vbLPwgzJ3rvU2/9tKyc/Yv6ty
fdwjjUu14pwiensQLCRfWfQVpKz2m5bpGYtRvlqivh/WwoDgTQCgji0ETkI65+A7
B+yGLG4dtz6R+27hUn2NtrhqHXbwanJoutQVQlBINBaGZ1R80uL/eDVFhSDKrUTY
BdDgJfx6tLGceg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:22 2025 by rpki-client