Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: CSHe6mpfnoBWELiu+Guye7Ey6dlanHBKfiLLxOCKiS8=
Subject key identifier: C2:13:B2:F8:97:73:8E:DB:B2:04:79:10:3C:35:E6:39:F6:1A:76:14
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 0199FC58AC9C2AD624481A2BD9C9BDDB838B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: mHQZze0kTMjbaBwR90rXYkwiJrIu14wS9BtjcP4xYWY=)
2: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (hash: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ac:9c:2a:d6:24:48:1a:2b:d9:c9:bd:db:83:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=c213b2f897738edbb20479103c35e639f61a7614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:84:e3:4b:4a:a2:96:53:c6:e8:96:14:b1:
fb:7c:c0:0d:79:c8:c2:00:5f:c4:10:d4:35:cd:13:
b6:e2:4e:e8:78:b5:06:44:33:e9:78:f5:71:40:7c:
ce:8c:d0:a3:df:10:49:82:f2:71:07:f4:49:86:c3:
04:85:11:ee:8d:29:04:5c:18:ba:dd:8b:da:d6:43:
2a:83:51:2f:aa:83:90:79:96:1e:2b:d4:ff:40:66:
e8:c7:a3:58:d2:6a:5a:c9:19:a3:9e:51:28:eb:cc:
7e:bc:f2:6f:66:cf:47:11:3a:ce:cc:9a:e3:d6:b2:
cc:44:35:a5:ca:a7:bb:d2:24:72:25:f2:14:5b:19:
84:bb:1f:a9:d7:53:1a:1e:01:66:85:3e:df:a0:58:
09:05:bf:2a:a9:a1:ba:29:ee:93:94:ce:6d:75:ed:
ac:8b:55:f2:83:70:f9:a1:c4:15:2c:ec:ba:c2:a0:
a3:78:da:0f:51:e8:30:04:3b:22:d5:4f:20:ac:2a:
cd:2a:2f:7a:f7:cb:dd:81:ad:2a:a0:5c:08:cc:74:
b2:3a:4d:1c:a8:66:ee:69:80:af:67:0b:1d:cb:75:
44:da:8d:1c:f1:ae:ae:fe:dc:85:ca:2f:66:f6:99:
4e:33:46:40:d2:85:44:29:65:e2:d7:bc:b1:c8:97:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:B2:F8:97:73:8E:DB:B2:04:79:10:3C:35:E6:39:F6:1A:76:14
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d6:0f:ca:d4:22:a4:ce:21:24:e6:ad:df:cc:1c:7c:f5:79:
24:7e:69:67:d5:1c:f1:62:f6:a0:79:6a:45:3c:21:3f:31:b3:
7e:b5:e1:15:72:77:db:a2:a4:f6:d0:79:08:27:1f:d2:18:b0:
86:6b:02:5b:0d:08:18:9a:8f:bc:af:d5:76:b2:cf:5c:5d:0c:
f6:bf:62:ca:2e:6e:16:7f:11:ec:8f:29:f7:88:cf:ce:47:32:
b5:f5:35:eb:1b:8a:23:d4:37:5f:b2:3e:f5:50:19:29:22:b3:
d2:54:0a:52:31:70:aa:2a:4d:13:5b:e5:0b:d0:c7:94:7e:37:
56:c4:63:da:30:a7:c3:f2:dd:57:e2:75:fb:cb:61:bf:0d:73:
05:11:21:31:69:a2:a6:2f:7b:49:63:93:0c:b0:e2:ab:ce:a6:
be:c2:f1:64:45:45:95:e9:ee:a5:cf:42:4e:7c:6a:47:c6:3e:
0b:01:30:ba:d0:c1:0f:ec:5d:42:91:66:e1:9a:93:32:44:6a:
a0:46:43:01:6d:f4:b5:af:5a:24:4d:33:9a:59:a9:ff:b5:9f:
d8:4b:2c:0b:43:bd:26:e0:27:31:ca:75:76:d2:2e:a3:a2:66:
94:9d:09:62:11:09:90:f6:b9:a9:a0:b6:8e:d5:b8:40:0e:0d:
56:d9:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:13 2025 by rpki-client