Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
File: aDjl4BZgX27c1MlhwZys9YFMeKM.mft (raw, json)
Hash identifier: Pg5t1rWfobBpwhGf/5aePvKIuWrB74tv+io/1+fOFTM=
Subject key identifier: 5B:87:63:DC:C8:22:D0:E5:31:96:90:4C:73:DE:AD:C0:D2:AD:38:84
Authority key identifier: 68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
Certificate issuer: /CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Certificate serial: 01988DA1C5988F41189377E2AF350D754007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
Manifest number: 1060
Signing time: Sat 09 Aug 2025 07:00:45 +0000
Manifest this update: Sat 09 Aug 2025 07:00:45 +0000
Manifest next update: Sun 10 Aug 2025 07:00:45 +0000
Files and hashes: 1: aDjl4BZgX27c1MlhwZys9YFMeKM.crl (hash: qpJoLVDKSSOYeogCoGEu6CQ16XE+nJ6hnkeixT1yhc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:c5:98:8f:41:18:93:77:e2:af:35:0d:75:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Validity
Not Before: Aug 9 07:00:45 2025 GMT
Not After : Aug 10 07:00:45 2025 GMT
Subject: CN=5b8763dcc822d0e53196904c73deadc0d2ad3884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:e0:b4:fe:c4:d6:35:16:d7:3f:00:39:be:
8a:c9:60:0b:dc:6f:21:fc:02:21:57:c1:ac:9b:34:
e3:d2:18:cd:4d:dc:66:88:7b:b1:d4:49:2d:ed:00:
07:5d:60:30:6b:2b:99:55:f4:10:a2:6d:bb:0b:f5:
1b:37:70:c7:05:f3:bc:c1:67:3c:d4:5e:29:b0:e0:
e9:13:c9:12:4d:3f:98:bd:6a:b3:b3:c7:54:58:77:
e9:ec:46:12:5f:71:fe:31:4e:47:b9:be:af:34:e9:
37:d1:77:5e:54:89:86:67:e0:3f:12:04:70:5f:24:
bc:3b:83:45:74:c1:a6:99:83:76:2d:4d:0a:f6:d5:
23:18:09:52:a7:dd:66:47:b1:d4:b5:7c:6c:cf:64:
9a:21:0e:1d:90:28:0c:4d:52:d5:44:f5:c4:8c:c6:
7f:f8:f1:aa:fc:95:1c:7c:dd:2a:6b:3e:04:ee:c3:
49:d8:bc:49:ff:98:60:b3:7e:75:95:b0:31:6e:96:
0e:5c:fe:b1:07:8a:f7:75:df:2d:18:4b:b6:fe:7e:
07:ee:2b:f9:63:c1:ad:e5:d6:67:04:4d:e6:4f:f7:
68:ec:38:71:84:d4:99:ff:79:53:4e:c1:ae:90:e6:
02:ed:ac:fd:08:2e:f1:3c:0a:58:0b:b3:ad:f1:37:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:63:DC:C8:22:D0:E5:31:96:90:4C:73:DE:AD:C0:D2:AD:38:84
X509v3 Authority Key Identifier:
keyid:68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e8:9e:34:2c:5a:33:a5:55:5a:a2:5a:da:02:f1:07:d2:f1:
a8:27:e8:b3:0a:64:96:5e:a4:b4:5d:5b:cf:ad:99:ea:19:52:
1a:78:42:e2:fe:33:ec:a5:f0:6a:43:6a:e8:35:a3:23:fb:57:
b5:87:92:62:48:7b:cd:f6:cb:ae:c1:1f:57:f0:75:42:da:62:
e8:f4:bd:15:9e:7c:53:44:3f:12:94:a7:c5:2e:26:ec:7d:68:
da:bf:e6:24:e5:e7:ed:a3:4f:b1:10:f9:50:2d:35:90:e5:f4:
72:0a:7f:09:0b:ab:73:b9:06:b3:fa:47:a4:bf:1a:79:7c:1f:
74:07:91:56:42:ab:99:a2:d5:51:4f:4f:1a:3a:49:e8:82:89:
4e:18:5e:d3:e6:af:2d:ff:68:96:b4:c3:5a:18:56:32:c8:7a:
c5:7c:67:15:57:db:a9:04:66:70:5a:78:64:f2:ff:9b:00:4a:
f1:52:e9:79:a4:5b:98:63:0b:f4:39:bb:f6:b5:a8:d7:c7:07:
d9:c7:ef:33:ae:b6:fc:58:14:54:69:9d:b5:bd:d1:7a:55:c1:
5c:88:01:c9:c0:d5:ae:10:9b:f4:6d:24:a8:79:b5:cb:c1:db:
05:b8:b8:ab:67:8c:01:81:b3:5a:b5:39:6e:58:71:4d:d9:8a:
eb:60:f3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:33:16 2025 by rpki-client