Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
File: aXE7HKgNhb8WGCF_qS29R6NcW44.mft (raw, json)
Hash identifier: wW41rYXoggIT6/I2r1a/oE+bpUMIqbN37PB6jhmv+qQ=
Subject key identifier: 8C:BB:A4:4C:D0:65:BF:58:56:EB:89:F9:EA:5D:4E:93:A4:F3:BF:D6
Authority key identifier: 69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
Certificate issuer: /CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Certificate serial: 0198D660BDB3894D0752779443D3241B06C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
Manifest number: 0103
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: aXE7HKgNhb8WGCF_qS29R6NcW44.crl (hash: Zs90dTeKiGIiyvsKwQaChUJaBGO77L8vJGux46LSmDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bd:b3:89:4d:07:52:77:94:43:d3:24:1b:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=8cbba44cd065bf5856eb89f9ea5d4e93a4f3bfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:7b:d7:f8:16:75:bf:6f:42:f9:f0:92:cd:
1f:c8:ca:f3:d2:da:b3:84:52:d4:11:bf:b6:85:07:
a5:94:71:93:fc:59:30:f4:b8:cb:ec:eb:35:d2:44:
c6:cb:60:99:84:b7:7c:5e:bd:16:38:4b:2e:e1:d0:
26:f5:8b:b0:74:f1:34:64:f1:f4:8c:21:99:e7:02:
96:aa:7e:9a:df:56:3a:07:c1:01:d0:7e:03:ce:18:
cc:cd:87:b2:4c:00:61:8f:98:0b:d6:5c:0e:c0:ab:
61:83:61:ad:0e:b9:e0:da:c7:62:e2:d9:d5:0e:21:
23:dd:11:e4:e6:ec:f0:38:9b:54:01:23:f1:c8:f1:
07:31:16:88:a7:f7:00:2d:52:f2:dc:29:df:10:c4:
c8:a5:92:57:3a:16:57:ba:b5:b8:7f:2a:dd:a0:45:
d4:4a:22:b4:20:6d:e4:53:8e:a2:31:09:84:81:9a:
b1:31:82:b0:c6:44:c1:6f:ff:94:d5:04:fe:1c:a6:
c5:ee:0b:2c:51:b1:26:71:bb:e3:a6:89:a5:ab:ab:
9e:5c:1a:64:e4:84:e5:1a:af:99:eb:f2:53:ea:0c:
16:e8:94:86:26:36:7a:dd:34:63:9d:22:da:06:99:
5a:88:7e:42:51:ee:e6:0e:10:2d:f5:5b:9e:54:b3:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:A4:4C:D0:65:BF:58:56:EB:89:F9:EA:5D:4E:93:A4:F3:BF:D6
X509v3 Authority Key Identifier:
keyid:69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1a:8c:71:a5:e7:bc:4c:dc:58:7e:34:78:57:a6:ff:a0:cb:
45:ff:b0:e8:15:64:e4:4d:3f:a2:18:fc:6d:ad:b7:6d:9b:4f:
86:cf:ef:2a:c1:1b:0d:f6:a1:f7:f4:1f:95:d6:f2:03:36:15:
b8:21:f2:42:2b:9d:67:95:e8:2d:17:f9:61:38:23:2e:a5:da:
5a:f1:18:06:e7:ba:84:61:d4:ba:9d:9a:bf:79:4a:ff:8d:9e:
42:48:38:e0:e5:3b:01:bf:ea:c8:15:6a:db:e1:d8:db:a9:43:
bf:02:fc:d4:93:79:1d:2a:a9:31:cc:64:07:30:3b:4a:e0:18:
12:df:f6:52:7d:9f:34:93:31:8a:03:fa:ce:eb:df:de:9a:56:
fa:3f:14:4a:92:3f:30:f1:ca:38:f3:4f:b1:ad:b5:ee:c5:f4:
2c:c4:30:aa:ba:3a:a0:ee:67:93:6d:9c:b9:ca:c5:c8:39:54:
c7:83:8a:eb:55:d3:0e:d9:86:82:d6:37:eb:15:66:90:38:81:
95:e8:8b:13:4e:ba:60:7f:85:2d:3d:d5:74:6c:c5:3b:49:70:
6d:d9:be:40:85:39:2a:63:cb:49:b4:d5:b5:ae:c9:ec:02:21:
fc:90:fe:9e:d3:e2:9b:7f:eb:97:03:38:5a:e0:69:56:32:35:
ca:1b:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:04 2025 by rpki-client