Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
File: aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft (raw, json)
Hash identifier: xgpoxqJqbBD+Sdd+ipi+m5HgGS8LAE6ni2dV7RxE/o4=
Subject key identifier: 17:86:AC:B6:FC:E8:81:29:1A:BF:88:BC:41:63:80:23:87:4E:77:0C
Authority key identifier: 69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A
Certificate issuer: /CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
Certificate serial: 01988FC7C627A467FFF48E5640FB93214FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
Manifest number: 15B4
Signing time: Sat 09 Aug 2025 17:01:30 +0000
Manifest this update: Sat 09 Aug 2025 17:01:30 +0000
Manifest next update: Sun 10 Aug 2025 17:01:30 +0000
Files and hashes: 1: aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl (hash: JH75Py+t4pPSCAr3dwq9M5ogKrJPg7OUDNfIW02b/zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:c6:27:a4:67:ff:f4:8e:56:40:fb:93:21:4f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
Validity
Not Before: Aug 9 17:01:30 2025 GMT
Not After : Aug 10 17:01:30 2025 GMT
Subject: CN=1786acb6fce881291abf88bc41638023874e770c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:96:40:70:49:85:9b:19:b3:46:4f:86:99:
6f:0b:23:9f:8a:f2:f0:77:b5:51:12:b0:9b:26:4e:
e1:79:86:af:75:b1:2b:53:b2:fb:14:ca:56:b2:79:
3f:ed:60:85:c0:0c:5f:1c:81:eb:40:4a:79:db:3c:
55:a1:89:9c:7e:38:c6:de:51:19:f7:11:b4:5a:d6:
3c:71:82:9c:ec:cb:df:ff:01:8a:7a:f3:0d:00:26:
8f:04:73:8f:4f:90:61:81:01:f7:6b:fb:cb:2c:aa:
e0:ad:c2:b2:61:63:05:9e:fa:10:83:83:33:50:a4:
46:09:e3:1b:d5:fc:84:9c:73:15:27:11:a7:07:66:
fe:5f:f0:a5:ed:78:0d:f7:c0:4f:a1:33:43:4d:a1:
de:38:6e:4e:2d:eb:9e:d9:9d:b1:1e:d8:1e:8a:b6:
c8:3d:0c:3c:98:c5:88:c5:f3:d5:23:5a:01:34:be:
02:a9:27:3b:00:6e:93:cd:67:6a:ee:c6:14:dc:fd:
e1:21:67:89:cb:9d:f0:d5:2c:60:4b:2d:f9:ad:19:
f4:6f:16:e3:12:eb:bf:6e:79:a5:57:44:eb:d0:18:
1e:20:94:8c:c4:11:6a:d1:68:df:61:21:93:9f:4a:
de:d0:e3:2f:c0:1e:9b:22:da:f5:8e:34:b6:cc:9a:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:86:AC:B6:FC:E8:81:29:1A:BF:88:BC:41:63:80:23:87:4E:77:0C
X509v3 Authority Key Identifier:
keyid:69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:45:51:99:17:3c:57:dc:f0:b1:31:2c:95:53:d8:f2:29:78:
23:a5:bc:f9:e8:25:27:8b:b6:6f:5c:05:88:60:f2:f0:06:b2:
f7:3a:d0:85:b5:82:87:6a:f5:21:20:77:a1:d9:47:fe:f6:12:
45:c6:bf:59:c8:50:7e:d9:cb:01:bf:e3:17:e2:86:53:7a:e0:
b1:6f:1f:ac:2f:77:ec:37:5b:32:9d:84:b6:c6:2e:db:63:bd:
d9:37:1e:4f:80:fe:31:e1:17:e8:ee:e6:60:65:ad:d7:28:3f:
8e:a4:8f:84:41:5d:47:b5:7a:ac:a8:ed:62:54:88:75:6e:5c:
20:71:fb:d2:aa:e3:43:bf:ca:2c:16:ae:c9:a2:51:ca:ac:4b:
9f:3c:2d:57:05:3a:67:42:a9:21:27:9b:8c:39:c2:c0:6f:46:
3a:4c:37:a0:9f:d3:40:a8:5e:aa:1a:75:19:78:66:4c:4b:24:
bb:25:cf:cd:0b:a4:da:b0:45:15:c8:3f:d3:7c:85:55:96:a6:
9e:d7:3b:2f:28:b6:15:2b:63:cf:e0:88:ab:cc:ef:cd:c9:2b:
3d:94:cf:51:7f:58:2d:1e:3d:f4:62:c0:15:4d:b1:fd:53:b2:
06:72:8d:02:79:58:0b:c5:c2:a6:e8:fa:87:84:c6:56:37:4a:
bb:05:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:16:52 2025 by rpki-client