Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: SK4BcvZzkamS+7f5U/WnPtyV7iEPUM42rm0udc7AR/I=
Subject key identifier: 9B:45:E8:6C:3A:15:17:BB:8C:D4:DF:7A:E0:3F:91:EE:61:29:B3:B3
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 01987AC04A05A74236344DC6569700A3FAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 0566
Signing time: Tue 05 Aug 2025 15:01:18 +0000
Manifest this update: Tue 05 Aug 2025 15:01:18 +0000
Manifest next update: Wed 06 Aug 2025 15:01:18 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: IpuA7lPfa9fEXS2vnoTYEP940RzVdzQ+Wn0ioU0Tx+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:4a:05:a7:42:36:34:4d:c6:56:97:00:a3:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Aug 5 15:01:18 2025 GMT
Not After : Aug 6 15:01:18 2025 GMT
Subject: CN=9b45e86c3a1517bb8cd4df7ae03f91ee6129b3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:23:89:34:60:48:86:9c:7f:fb:61:16:b2:
c3:35:03:fd:37:61:3c:2c:53:2f:83:60:a4:6e:de:
75:d3:2c:66:1c:18:0b:d3:50:95:1a:0b:2c:fa:8b:
43:f0:3e:c4:db:64:59:af:51:8a:a9:0b:59:1a:a1:
85:6f:41:c8:3f:2e:45:f2:59:f9:dd:d4:8c:79:64:
7a:3b:b4:c9:9f:99:f3:37:1f:b4:c5:90:5e:a4:97:
d5:fa:3b:93:63:cc:d3:65:45:4e:03:3f:97:1f:33:
f6:60:23:46:79:d4:a9:dc:7b:25:94:e7:78:a7:e5:
94:3b:5c:80:47:d1:90:9e:16:1e:11:31:0d:f0:6c:
b3:1c:02:13:66:19:ef:a9:ce:e1:ae:84:b6:7b:be:
ad:fa:01:88:71:ff:b1:99:c9:88:5f:f3:f8:b1:a9:
7e:d1:c6:32:34:f7:6a:0d:52:76:e3:a2:5b:8a:51:
21:ca:58:bb:37:4b:4e:68:57:12:3b:74:7f:f2:ec:
93:7b:3e:85:f3:c8:c8:2d:89:73:2a:94:77:38:c8:
63:31:82:16:81:e2:d7:ba:d1:b4:d6:c8:0a:34:00:
bc:c5:ba:8c:0a:7f:6f:11:b5:99:9b:bc:f2:ae:41:
d1:5c:fc:86:07:b3:e5:89:32:c6:85:8c:f8:5c:8e:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:E8:6C:3A:15:17:BB:8C:D4:DF:7A:E0:3F:91:EE:61:29:B3:B3
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:75:cd:3d:ba:e7:10:86:14:d6:5f:80:c8:18:1f:28:04:52:
2a:72:2f:50:df:b2:42:76:45:a1:6a:b6:1a:81:eb:fe:4d:ed:
12:6f:99:c5:41:a8:bd:68:06:c0:73:ea:d5:6c:a2:3a:35:44:
ab:d1:db:93:26:8c:7c:73:82:e2:cd:e8:44:a7:b4:92:23:d3:
d2:4e:af:8e:d8:67:7f:9a:be:0f:e1:97:26:a3:41:30:16:e9:
74:ca:d1:75:9b:f8:31:5c:9c:5c:17:0e:c4:fa:47:1f:d9:d5:
ec:de:93:67:be:e7:db:0a:1f:ef:49:d0:90:df:df:28:f0:ca:
52:21:25:f1:8d:55:6e:1b:2b:50:7c:11:67:22:42:11:f8:46:
5b:e3:d4:a9:8e:52:22:7d:a1:e6:c9:84:c4:18:24:20:b1:3a:
22:86:9f:7a:61:b6:8e:d9:5e:6d:04:7e:29:89:af:0e:b0:98:
7d:a7:a9:11:26:c1:9e:d8:9a:52:82:b4:f7:80:43:29:98:c5:
7b:37:81:28:b7:92:99:24:7f:e2:02:4e:9a:de:96:f1:e4:ec:
ec:42:2d:41:5a:76:fa:e0:bb:04:6a:68:8d:ca:8e:f2:5e:60:
78:dd:fb:05:8c:86:36:91:53:52:a1:25:63:5a:81:6a:f9:70:
0f:61:70:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6wEoFp0I2NE3GVpcAo/qpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjE5M2U1NTYzODg2NGVkNjljZDk0N2I3NTBmMzIxNjc0
YTY0YTUwHhcNMjUwODA1MTUwMTE4WhcNMjUwODA2MTUwMTE4WjAzMTEwLwYDVQQD
Eyg5YjQ1ZTg2YzNhMTUxN2JiOGNkNGRmN2FlMDNmOTFlZTYxMjliM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEEjiTRgSIacf/thFrLDNQP9N2E8
LFMvg2Ckbt510yxmHBgL01CVGgss+otD8D7E22RZr1GKqQtZGqGFb0HIPy5F8ln5
3dSMeWR6O7TJn5nzNx+0xZBepJfV+juTY8zTZUVOAz+XHzP2YCNGedSp3HsllOd4
p+WUO1yAR9GQnhYeETEN8GyzHAITZhnvqc7hroS2e76t+gGIcf+xmcmIX/P4sal+
0cYyNPdqDVJ246JbilEhyli7N0tOaFcSO3R/8uyTez6F88jILYlzKpR3OMhjMYIW
geLXutG01sgKNAC8xbqMCn9vEbWZm7zyrkHRXPyGB7PliTLGhYz4XI5h+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtF6Gw6FRe7jNTfeuA/ke5hKbOzMB8GA1UdIwQY
MBaAFGlhk+VWOIZO1pzZR7dQ8yFnSmSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMt
N2Q0M2IzMzU3Y2Q3LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMtN2Q0M2IzMzU3Y2Q3
LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXXNPbrn
EIYU1l+AyBgfKARSKnIvUN+yQnZFoWq2GoHr/k3tEm+ZxUGovWgGwHPq1WyiOjVE
q9HbkyaMfHOC4s3oRKe0kiPT0k6vjthnf5q+D+GXJqNBMBbpdMrRdZv4MVycXBcO
xPpHH9nV7N6TZ77n2wof70nQkN/fKPDKUiEl8Y1VbhsrUHwRZyJCEfhGW+PUqY5S
In2h5smExBgkILE6IoafemG2jtlebQR+KYmvDrCYfaepESbBntiaUoK094BDKZjF
ezeBKLeSmSR/4gJOmt6W8eTs7EItQVp2+uC7BGpojcqO8l5geN37BYyGNpFTUqEl
Y1qBavlwD2FwAw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:01:50 2025 by rpki-client