Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: ACPFhHGxw7pDyx9s3+lvY2YWdH1R5ioMR3pdtbknjRc=
Subject key identifier: BC:D7:2A:D1:3C:3B:EF:B4:2D:74:32:93:EB:91:A1:7D:79:38:01:4C
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 01988544E044BD39E7AF52A9AC6142F3B4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0CD9
Signing time: Thu 07 Aug 2025 16:02:20 +0000
Manifest this update: Thu 07 Aug 2025 16:02:20 +0000
Manifest next update: Fri 08 Aug 2025 16:02:20 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: WY4jNQVQ0AHtS+LH5kjx4WKnA7Z8UNqUFLGvbQPVyQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:e0:44:bd:39:e7:af:52:a9:ac:61:42:f3:b4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Aug 7 16:02:20 2025 GMT
Not After : Aug 8 16:02:20 2025 GMT
Subject: CN=bcd72ad13c3befb42d743293eb91a17d7938014c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:b2:54:9c:26:92:4e:db:9c:11:1a:28:ae:
52:b3:91:d6:95:07:a0:63:66:24:d4:17:98:28:62:
f8:11:e0:1b:cf:a5:7d:6e:27:0d:89:8c:e4:4d:61:
8f:8e:41:ba:7d:94:f0:82:f5:13:bc:c1:38:9b:23:
41:c6:de:17:fd:0c:c4:0c:59:f3:58:7b:56:db:4c:
06:ee:58:52:61:90:f9:46:41:3d:3f:49:37:58:60:
49:9c:a8:7d:35:1a:2c:98:be:e9:e8:0a:91:ad:84:
d4:e4:85:44:67:48:17:51:4b:01:5a:5e:3f:57:b0:
9a:46:21:17:2b:0a:21:60:c0:69:c5:25:f2:01:42:
c6:e5:a0:bb:a9:f5:53:02:54:75:35:33:d9:5f:78:
d9:f6:74:e2:51:62:6a:35:c6:6a:f4:47:42:4b:c7:
4a:60:95:d4:bb:d9:9c:f1:67:e5:b4:e7:af:5e:ae:
b4:ba:a4:b4:97:1d:ae:85:2e:58:fb:77:82:56:94:
9d:9e:9e:03:f2:41:5f:18:2a:5a:f4:79:34:13:c2:
f7:63:55:4c:c5:90:a2:3d:34:a2:8a:d6:18:a8:40:
66:4f:e3:a7:f8:e6:e6:49:2b:20:6e:53:2e:23:d1:
b8:77:9b:06:d5:e1:3b:fa:1d:01:82:51:c5:33:c1:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D7:2A:D1:3C:3B:EF:B4:2D:74:32:93:EB:91:A1:7D:79:38:01:4C
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:73:08:67:3b:bf:70:27:43:aa:56:c1:6a:ab:a1:60:e3:c4:
a7:f9:7b:22:76:4f:5c:d9:f5:38:fd:1e:70:8e:43:46:fc:f2:
44:d8:5e:e8:62:bd:60:e8:66:70:b4:5b:33:1f:7a:30:49:78:
b4:db:59:0e:94:8d:8a:94:9a:87:fd:43:0a:61:f0:de:90:15:
fe:58:e8:8f:ca:65:bd:f4:47:1e:74:ed:1b:2d:e8:43:e5:b7:
02:78:0f:7c:1b:02:95:40:6f:12:e6:e6:76:20:0e:88:2f:05:
c2:5d:71:a3:60:7a:43:bc:4c:82:d7:d1:78:55:59:49:3b:da:
63:e6:5e:37:81:21:03:fd:05:f3:6a:8b:19:7f:5b:97:ab:c0:
68:d7:d5:28:36:5e:1a:f6:d3:8e:11:57:f9:6f:f0:24:25:fb:
79:d0:5f:63:ca:af:16:ce:e3:ab:6a:85:aa:be:70:d1:29:6f:
c6:52:52:42:a0:3a:f4:07:8c:e4:05:c8:16:0b:26:15:bb:3d:
8b:1d:97:d6:17:ab:b5:52:9c:48:25:ec:69:26:40:07:e9:83:
1b:bb:4b:76:d0:a0:24:96:1e:92:f0:fa:1f:1c:9f:fb:bf:51:
4f:31:33:e2:fc:83:44:e6:45:99:2c:b8:74:df:69:d6:80:63:
32:2a:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:47:12 2025 by rpki-client