Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
File: aWZRzL2U9r6et0MyEiM1yrvvw5o.mft (raw, json)
Hash identifier: IfE5avDSxnfD6HnKpI/XiCrsDuJRXxyI/ZJ7xUZbuQE=
Subject key identifier: 87:D6:29:C0:0B:90:BF:20:78:2C:B2:0B:68:48:F9:D0:97:AA:7C:4D
Authority key identifier: 69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
Certificate issuer: /CN=696651ccbd94f6be9eb74332122335cabbefc39a
Certificate serial: 019A4D7457D1ACBF497D37017EA3CEAD18CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
Manifest number: 0639
Signing time: Tue 04 Nov 2025 06:01:01 +0000
Manifest this update: Tue 04 Nov 2025 06:01:01 +0000
Manifest next update: Wed 05 Nov 2025 06:01:01 +0000
Files and hashes: 1: aWZRzL2U9r6et0MyEiM1yrvvw5o.crl (hash: mCsbZx/sF9DAeLsD2j7bJNjmO9IWOPNLjmml75v3pAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:57:d1:ac:bf:49:7d:37:01:7e:a3:ce:ad:18:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696651ccbd94f6be9eb74332122335cabbefc39a
Validity
Not Before: Nov 4 06:01:01 2025 GMT
Not After : Nov 5 06:01:01 2025 GMT
Subject: CN=87d629c00b90bf20782cb20b6848f9d097aa7c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:63:4b:20:a4:36:86:a0:b0:17:42:4e:cf:
8e:c0:ab:e0:f5:fb:fb:4f:67:f0:6e:ad:ce:c9:70:
31:d0:b6:9c:11:45:d2:da:fc:b5:32:75:96:e7:d3:
79:a0:ba:ef:82:c6:65:b8:13:7f:2a:bc:75:ba:ec:
54:52:c1:e6:c8:c1:c7:02:a2:b9:4e:b3:59:1a:95:
f2:13:47:6d:2b:f8:00:d9:ce:58:36:24:68:25:9c:
10:da:98:05:00:e3:f8:30:41:9d:43:45:79:57:dd:
4f:19:ef:c2:5d:d1:4e:da:99:e1:3f:0c:a9:41:30:
a5:11:ec:66:92:12:32:d0:ee:ed:00:88:0e:4a:cf:
84:51:8a:e3:a5:81:61:d8:8d:cd:20:4f:af:d9:3a:
10:5c:05:dc:8f:46:51:a5:13:06:ce:15:d7:25:59:
9a:b3:9d:e3:6f:83:cf:22:ae:f8:10:51:8d:f7:0b:
6d:72:c7:d9:1e:d7:09:c4:f5:9e:07:9b:84:85:5d:
6b:70:b9:b5:cd:fc:6f:c2:2c:d4:23:e7:3f:98:20:
db:3f:05:b8:fb:19:cc:56:b2:7c:1d:2b:d4:0f:35:
1f:9b:38:70:b1:2f:6b:e6:f3:ff:31:f5:87:87:71:
0e:5d:d8:0e:3a:39:ac:cb:13:f8:e1:10:71:77:ec:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D6:29:C0:0B:90:BF:20:78:2C:B2:0B:68:48:F9:D0:97:AA:7C:4D
X509v3 Authority Key Identifier:
keyid:69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:15:c8:8e:de:ae:f3:73:49:92:4a:6d:22:16:1f:92:9f:42:
c3:ad:c0:7a:c8:eb:b7:99:3a:1e:6e:4f:fb:5d:f2:0a:e2:fe:
1a:e8:09:5a:3a:22:af:05:76:ed:0a:69:10:b1:83:88:72:3a:
da:db:ab:88:df:0f:a6:0d:07:7b:70:9a:7b:bf:3b:01:84:93:
4f:52:79:6f:31:d0:cf:21:64:43:80:75:99:7a:ef:97:9e:f8:
65:de:98:c3:35:3d:63:92:6b:8a:e3:27:1f:ab:fe:2c:9a:f4:
b4:fd:6c:72:4a:4e:bf:98:56:a4:99:b4:99:e7:f5:36:7c:2b:
80:ee:c9:49:cd:7b:2c:09:a8:e2:5d:c9:68:10:53:b3:86:66:
0f:54:bb:8d:d9:1a:ce:a5:cb:69:22:64:83:b2:14:9d:41:2b:
ac:cb:9c:d1:54:53:b6:37:07:1d:b8:4a:ec:ea:49:d7:81:8b:
8d:42:6d:e5:f7:ad:56:4f:3c:06:42:f1:f2:80:16:a0:07:dd:
37:fb:96:4e:c1:cb:55:c1:5f:21:60:56:58:c2:44:de:26:be:
e4:df:aa:84:37:65:ee:f1:59:3c:e7:e6:9e:c6:64:8d:81:c1:
67:f6:3e:94:e1:a9:90:38:a5:cf:41:5c:b3:69:91:39:ee:ed:
ed:fa:7b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:27 2025 by rpki-client