Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
File: 5-aiybui7N1AdLMVN1mDXoI6uOQ.mft (raw, json)
Hash identifier: QnKHdxCSSbzexaAj9lHzRIIgr0W8Ayue6QtjO8eq9bY=
Subject key identifier: 3A:E0:E6:A3:0C:74:3F:26:5E:E8:C1:4E:9B:49:1F:81:95:0E:B1:DF
Authority key identifier: E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
Certificate issuer: /CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Certificate serial: 019873E1E0AE8FFAE174383682AE0FB6A42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
Manifest number: 0CF7
Signing time: Mon 04 Aug 2025 07:00:39 +0000
Manifest this update: Mon 04 Aug 2025 07:00:39 +0000
Manifest next update: Tue 05 Aug 2025 07:00:39 +0000
Files and hashes: 1: 5-aiybui7N1AdLMVN1mDXoI6uOQ.crl (hash: I3ATNnRvLDisEESyIlRhMMc9f+690YSdjDSB8CaqYP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e0:ae:8f:fa:e1:74:38:36:82:ae:0f:b6:a4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Validity
Not Before: Aug 4 07:00:39 2025 GMT
Not After : Aug 5 07:00:39 2025 GMT
Subject: CN=3ae0e6a30c743f265ee8c14e9b491f81950eb1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:45:3e:f2:2b:7a:7e:b2:2d:1b:30:32:25:
8a:db:8d:2b:0b:ab:87:d2:42:5e:56:eb:ff:9f:a4:
e9:6e:74:c4:49:05:15:31:18:2d:9e:8f:77:fc:c9:
2e:e8:d4:56:be:f0:d9:80:fe:79:74:8a:d9:11:4b:
55:6d:d0:6f:5a:92:47:11:b0:e7:17:b0:c1:a3:72:
f8:45:59:f8:10:2e:49:f3:d2:8f:72:5f:2f:b9:9a:
dc:e2:9c:09:82:f0:dd:ac:93:95:86:c0:86:fb:70:
55:9e:ea:bc:4e:1e:f9:49:77:d6:f6:79:84:c7:ca:
31:3c:00:da:3e:89:bc:70:55:2f:c6:39:60:52:a4:
b3:2a:bc:93:5e:c6:9e:2a:d3:4b:0d:98:26:d1:2b:
af:d2:e4:68:bc:af:49:df:be:b5:5a:39:ed:d3:bb:
98:56:85:52:0c:06:b5:21:57:00:69:29:ff:88:5d:
54:d6:ad:7b:2d:02:ab:6d:c2:d2:b7:95:3a:d6:fa:
e4:35:5f:0b:5c:22:95:4e:cc:4e:b8:49:81:d2:71:
94:39:eb:a8:d6:c6:d5:65:f9:d5:f1:df:ce:b9:15:
85:dd:19:e3:cb:db:25:7c:73:d1:8d:3e:26:c4:8c:
30:ef:d6:a6:13:f1:7e:e3:30:36:3d:21:07:ab:4b:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E0:E6:A3:0C:74:3F:26:5E:E8:C1:4E:9B:49:1F:81:95:0E:B1:DF
X509v3 Authority Key Identifier:
keyid:E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:51:ca:35:99:88:a5:05:c4:6b:4a:ff:63:b5:3a:b9:ac:f7:
3c:f1:2d:7b:48:b5:57:ad:2a:c3:7f:d5:c4:cc:76:71:b8:44:
8f:df:a8:54:a6:10:bd:6a:12:f0:04:9d:b7:fe:93:2c:f5:96:
ff:d3:ca:e0:cb:28:b8:ad:d2:e4:3b:26:7b:88:a4:b0:4c:a2:
64:c0:cb:84:29:82:de:ac:60:00:72:1d:53:78:1a:f8:a5:92:
cb:bc:c4:29:cd:e9:06:1a:28:a4:0f:9e:4a:c3:c1:e2:96:d8:
0e:a1:cb:72:b3:28:3f:25:29:95:18:5a:8e:2d:7c:94:91:de:
e0:48:09:8e:12:8d:f1:6b:60:36:57:2b:01:70:43:d3:e2:1c:
87:b7:a6:8f:ac:8a:de:42:1b:63:31:5e:fc:8a:ac:72:6b:ea:
bb:98:c5:07:ff:8f:46:27:f8:98:26:74:13:c5:6c:fd:49:54:
a6:7a:5b:92:e3:55:a5:b6:67:b2:0c:7f:d3:56:93:c0:ed:cc:
b2:34:8b:1b:00:3f:5b:d6:fc:49:8c:a5:6e:95:7b:c2:4b:62:
b8:74:60:fd:4c:a7:b3:93:8e:5d:f1:2c:d2:16:90:f4:cb:a9:
2f:16:3e:5b:4d:a8:4c:c1:a6:df:b2:4c:19:5c:d3:04:86:9b:
d6:18:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:21 2025 by rpki-client