Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
File: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft (raw, json)
Hash identifier: 5JSkynP1X7hr5EteECvEYkXQbD9vGhUx2IvxPOzMY5A=
Subject key identifier: 05:57:8E:0D:9E:34:01:A8:76:B2:ED:48:B3:C9:BB:DA:94:74:98:7B
Authority key identifier: 6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
Certificate issuer: /CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Certificate serial: 0198D65F3DA4AC5E66A85DD9ED98C84F6723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
Manifest number: 024F
Signing time: Sat 23 Aug 2025 10:00:22 +0000
Manifest this update: Sat 23 Aug 2025 10:00:22 +0000
Manifest next update: Sun 24 Aug 2025 10:00:22 +0000
Files and hashes: 1: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl (hash: UQfIjMTd+kr4wiQ56XDwkprTkxlqegySWB9uZR4oNLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3d:a4:ac:5e:66:a8:5d:d9:ed:98:c8:4f:67:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Validity
Not Before: Aug 23 10:00:22 2025 GMT
Not After : Aug 24 10:00:22 2025 GMT
Subject: CN=05578e0d9e3401a876b2ed48b3c9bbda9474987b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:ef:f4:5f:c1:6e:3f:08:9c:8d:c8:8d:d8:
5e:03:9b:fa:7a:b7:30:d7:3d:59:df:99:91:cd:f5:
eb:33:64:7d:23:db:6d:cc:f4:ff:2c:00:8b:d7:0b:
99:33:60:cd:7d:b6:2d:25:9c:cb:be:1c:09:64:6e:
03:d6:78:dd:75:7d:36:db:78:e5:50:1b:f4:22:53:
b7:bd:f9:be:86:f9:47:65:7d:a4:cb:57:98:a5:d4:
a1:20:03:f9:0c:75:55:19:94:4f:db:a3:d7:af:2b:
aa:82:60:6a:d9:07:c3:c8:43:03:75:7e:0f:89:7b:
6a:7c:bf:34:ba:37:ff:e6:de:ff:03:75:8f:9f:2b:
3a:d4:e1:54:1e:18:56:f3:07:f7:5c:c9:dd:19:de:
30:f0:fd:9f:bc:da:a3:b3:7e:13:46:77:11:10:27:
0b:51:82:26:1a:9e:e1:75:48:b9:0c:d3:77:e0:6f:
22:1f:05:07:1f:18:ae:af:22:7d:50:94:a2:14:3b:
9a:47:43:66:e7:58:ba:59:16:5d:11:96:bf:12:73:
a7:f4:b7:96:10:3d:e4:52:91:88:61:3a:08:1a:99:
04:50:9c:ac:b9:10:ff:20:97:9d:c0:e7:21:b3:07:
f0:23:9d:61:45:00:f3:4b:f7:08:62:37:12:40:16:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:57:8E:0D:9E:34:01:A8:76:B2:ED:48:B3:C9:BB:DA:94:74:98:7B
X509v3 Authority Key Identifier:
keyid:6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ed:32:59:ae:7d:d0:fe:f7:f6:83:ec:2d:be:6e:1c:51:f5:
82:ca:55:2d:7d:1a:f9:0e:ed:36:e8:d2:cd:95:b3:e1:a2:02:
73:7e:98:ca:9f:2b:4e:6b:bd:9e:5d:cd:8d:c3:7c:26:4a:09:
dc:4c:d4:66:56:78:d2:70:09:c4:2f:a1:b6:c9:57:a7:9e:7a:
45:bf:d0:79:2a:9f:85:a8:75:8f:df:c0:53:d1:7e:6c:a1:21:
65:f7:d3:79:59:f4:c2:8b:53:18:39:0d:5b:be:89:e4:bc:0c:
8c:44:b5:f8:f7:1b:ba:85:de:3c:10:5b:af:01:9c:fb:0d:95:
49:88:b4:21:bd:02:5c:04:de:7a:fd:75:0a:5c:c9:c0:ca:2c:
b6:fa:28:9e:bd:87:2f:6a:ce:8a:22:bf:6b:12:45:d2:9b:cc:
0d:c1:62:ba:de:02:3e:b1:dd:6b:98:8a:32:57:a7:38:6a:03:
4e:18:f5:e6:81:f6:66:9f:12:74:61:a0:99:8e:77:39:99:93:
3a:11:42:10:cf:cd:9d:ac:a7:79:fe:a3:a3:00:6b:fe:3c:38:
be:1c:fa:93:7c:0a:9d:f4:59:1e:08:3d:af:62:58:0c:35:e4:
2e:cd:05:c2:af:a3:7a:ab:62:76:f0:87:c3:66:69:44:be:f1:
e2:16:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:29 2025 by rpki-client