
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
File: aAkoqR-PfmOX5sZdDgtmKReW01I.mft (raw, json)
Hash identifier: BaoEP8arOnI9BvKV92AHReB4y/Ns/9gTqaXsK7Ir1pY=
Subject key identifier: B3:88:CA:29:FF:DD:5B:FD:8E:12:93:23:50:FA:6C:6D:1E:E1:65:D8
Authority key identifier: 68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
Certificate issuer: /CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Certificate serial: 0198868CBAAB8574910A22CAC1D734BD073D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
Manifest number: 11E4
Signing time: Thu 07 Aug 2025 22:00:26 +0000
Manifest this update: Thu 07 Aug 2025 22:00:26 +0000
Manifest next update: Fri 08 Aug 2025 22:00:26 +0000
Files and hashes: 1: aAkoqR-PfmOX5sZdDgtmKReW01I.crl (hash: i5yAzgSx/rFtHmdyuc/QWCFsWK6yy5cK49iefdcMd7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8c:ba:ab:85:74:91:0a:22:ca:c1:d7:34:bd:07:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Validity
Not Before: Aug 7 22:00:26 2025 GMT
Not After : Aug 8 22:00:26 2025 GMT
Subject: CN=b388ca29ffdd5bfd8e12932350fa6c6d1ee165d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:41:6d:be:55:12:96:57:3b:65:e2:d7:df:54:
79:96:53:f1:be:fe:4f:5c:a4:4f:80:22:76:c6:94:
c3:24:b9:3a:c3:6c:64:95:df:da:80:f8:f6:cb:b4:
a4:77:0f:0f:c6:b8:c1:73:67:87:03:5a:dc:58:66:
56:59:4a:78:fb:19:2c:84:ca:16:b2:cf:62:6a:c3:
3d:6c:7d:55:97:f0:ac:2e:94:84:1c:cd:dc:03:a4:
e6:15:89:97:94:90:45:b7:7f:5f:10:fc:51:f8:6e:
d1:80:4c:fe:08:2e:ca:92:89:76:ca:0b:51:5f:66:
ec:02:ae:18:44:0d:e8:1e:2c:a1:cd:66:0f:02:86:
a2:92:6b:09:30:d6:22:50:4d:df:eb:2d:14:e6:9b:
9a:a5:bf:2b:e7:2d:f6:aa:15:10:c5:45:76:9b:18:
6d:32:96:8b:ea:f3:99:26:c9:03:11:28:59:96:2f:
8a:69:ac:b3:f0:e0:09:5a:6d:56:06:78:53:04:fb:
47:40:b9:d8:84:f9:bc:b1:49:18:3c:23:7a:5c:d6:
8d:09:e7:2a:cd:ad:72:23:84:2f:aa:63:92:15:aa:
b0:78:40:ef:a6:d6:e4:69:7f:37:46:0c:81:25:40:
84:d9:05:67:14:9a:70:75:70:a4:5b:9d:14:06:a4:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:CA:29:FF:DD:5B:FD:8E:12:93:23:50:FA:6C:6D:1E:E1:65:D8
X509v3 Authority Key Identifier:
keyid:68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7e:de:74:dd:7a:2f:46:f8:89:b1:ae:63:92:a0:bc:95:68:
75:02:b3:4d:92:9a:29:a7:3a:58:6f:14:0a:3c:4b:30:e1:19:
cc:ca:45:f4:3b:c1:85:5d:e7:5f:ba:75:6e:af:70:db:7e:17:
d6:ab:95:74:62:0e:9e:3a:97:3e:d1:0a:1b:a0:85:ed:83:c3:
d2:8a:bd:5c:49:65:02:54:d3:fc:eb:76:cc:80:ad:b7:3f:94:
39:66:89:ef:a3:8e:a8:dc:3b:89:69:68:fe:6f:bb:a2:ca:d8:
5d:7f:50:a8:56:7b:61:aa:88:87:36:08:08:28:c5:0e:e7:f8:
75:51:5f:e3:9a:c3:9b:fa:97:d4:21:68:12:3e:0c:a5:4a:79:
11:43:ed:49:e8:83:b8:33:fd:b6:04:9a:c7:6e:c9:c0:b8:94:
42:46:67:f9:2c:9c:2b:26:cc:ce:86:86:63:49:ee:b1:de:f5:
02:7d:1b:06:4f:ca:e0:77:6e:f4:2f:99:5e:cf:61:63:a5:e9:
83:3f:9d:2a:aa:14:28:9a:18:9a:f9:51:31:ba:d2:43:4b:22:
c0:2b:f2:34:f8:45:7f:8d:2e:2d:e3:e2:d9:48:65:2b:06:85:
e8:9b:52:b9:f6:e1:7d:48:78:f7:a7:d3:2e:b7:5b:18:fc:8e:
0b:9d:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:33:04 2025 by rpki-client