Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: BRAVzcDuP8yUOGf1p9OR8ebKo3Ou8ePNf3p/NGhgmFU=
Subject key identifier: AF:C1:C1:25:FE:BE:0A:55:15:10:D2:99:E4:8D:92:AD:33:5E:D6:19
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019872D008E839649D3AF246CB7FDE849941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 48
Signing time: Mon 04 Aug 2025 02:01:33 +0000
Manifest this update: Mon 04 Aug 2025 02:01:33 +0000
Manifest next update: Tue 05 Aug 2025 02:01:33 +0000
Files and hashes: 1: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: vUZcnyidyf6KI3ZQpt0a4rxo/w4Wgh2O6wBUX9WEPGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:08:e8:39:64:9d:3a:f2:46:cb:7f:de:84:99:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Aug 4 02:01:33 2025 GMT
Not After : Aug 5 02:01:33 2025 GMT
Subject: CN=afc1c125febe0a551510d299e48d92ad335ed619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:58:79:da:ad:88:61:c5:9a:40:8c:0c:53:
d4:28:0e:7e:1a:e1:15:a6:51:47:58:12:11:70:6e:
3d:20:2c:30:ad:11:bc:ee:cc:69:ff:95:42:df:21:
d7:78:6b:8d:23:f9:56:19:77:7f:1f:5f:d7:5e:05:
6e:9a:25:02:1d:13:95:e9:f8:c9:14:82:32:79:8c:
d8:fc:cf:b8:40:cc:c6:35:88:43:5c:b2:b4:c2:59:
a7:e8:82:b6:f3:5a:57:ff:b8:96:2b:a9:c0:e8:1b:
bb:5d:da:8b:5a:07:a0:f2:4d:5e:4f:a3:4c:e5:92:
70:69:70:ec:b5:1c:28:e7:65:33:72:6e:25:8f:94:
a6:48:15:f2:fd:98:1a:20:62:45:e7:63:ca:86:5b:
c5:5e:65:c0:9f:2b:52:cc:4b:fc:4e:28:90:dd:db:
22:d9:44:e4:14:42:6f:d4:dc:6b:a1:87:b6:91:d4:
e5:78:72:be:15:40:bd:f7:b5:c7:85:80:aa:de:c7:
36:ea:23:08:50:c5:9c:dd:c3:3e:d4:a9:05:56:d8:
c7:55:6d:b4:78:30:ff:60:07:f0:38:59:b2:c3:7f:
c9:8a:84:b3:7d:77:2c:99:49:45:aa:b3:46:1d:96:
6d:34:73:c3:b0:85:18:05:8a:7a:50:2f:bf:fb:96:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:C1:25:FE:BE:0A:55:15:10:D2:99:E4:8D:92:AD:33:5E:D6:19
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d4:bf:85:53:98:4e:9e:e9:1c:5b:53:a7:b3:63:9d:62:99:
73:22:f3:43:f8:ff:3f:98:d6:50:64:6a:e6:ee:01:8f:1b:f8:
40:7f:f1:7b:8f:38:a5:44:37:e1:b9:df:8b:a2:f3:01:cb:fe:
f1:f4:be:ed:d5:7d:fe:26:80:29:af:31:59:fe:6d:bc:68:9c:
f7:ba:3e:d8:5e:45:e0:05:a0:b5:91:94:ce:fa:c7:5d:08:01:
2c:fb:f2:de:9c:6a:8c:9e:49:09:56:58:29:e6:88:7b:31:e1:
46:bc:cd:95:54:e4:6e:6c:19:59:42:23:fb:05:43:99:80:02:
58:0f:24:c3:f9:22:d6:47:53:61:b5:18:ce:95:c6:a5:7a:98:
93:25:f1:38:b4:5c:17:06:7c:3a:d4:b9:99:70:75:04:7e:bd:
10:d3:60:13:b6:7e:f5:8d:73:9b:db:e9:a3:80:b7:4f:39:c2:
41:4f:2b:22:9a:a9:f5:56:18:37:73:34:94:ce:fd:39:32:3a:
bf:f5:e7:54:1a:61:33:c6:1b:ee:b9:09:c7:f5:7e:ec:fe:41:
91:6e:c1:d9:6d:85:50:25:5a:4f:86:94:67:0b:d0:dc:b3:c0:
d5:a2:a1:6c:ae:8e:a9:40:3e:3a:b5:b6:f1:b8:73:f9:20:fa:
34:f9:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:43 2025 by rpki-client