
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier: 4mTB2VRaZ6koWFIA2sV4GJF1ig7GTwrCVPBGmmGezn0=
Subject key identifier: F2:28:8F:F6:2D:9D:6F:91:47:1A:67:DF:E0:C4:A5:1F:46:E7:4B:0F
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 019874F51EE67AA7E154B6FDB8283D71782D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number: 26
Signing time: Mon 04 Aug 2025 12:01:17 +0000
Manifest this update: Mon 04 Aug 2025 12:01:17 +0000
Manifest next update: Tue 05 Aug 2025 12:01:17 +0000
Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: u0QsyB1csTJopYDmb7m6PbYWPVI6GIJAHSKaZZnnpcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:1e:e6:7a:a7:e1:54:b6:fd:b8:28:3d:71:78:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Aug 4 12:01:17 2025 GMT
Not After : Aug 5 12:01:17 2025 GMT
Subject: CN=f2288ff62d9d6f91471a67dfe0c4a51f46e74b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:a1:46:e2:de:e7:1f:c9:43:c4:be:72:e6:
c7:22:84:e5:92:70:0d:58:00:9a:4a:99:e9:d9:f0:
88:f1:3b:cb:c0:df:c0:b3:cc:ff:82:9f:85:df:6e:
33:e3:3f:07:f7:22:fc:a4:69:04:68:dd:1a:4e:90:
73:a2:7e:81:a4:ee:32:b6:e3:f7:b3:4f:e2:78:b9:
ce:f4:dd:f0:b7:66:1f:1a:8b:e0:68:c6:36:d9:97:
8c:81:2d:6d:ee:fc:65:16:79:97:c6:3c:f8:b4:01:
c2:51:e5:6f:62:87:93:43:20:7e:85:69:b7:ff:89:
e7:b9:61:ba:94:56:53:1d:13:55:5a:89:43:05:91:
02:0a:8b:08:5e:25:b5:84:10:d6:88:53:a5:62:6c:
d5:f5:ff:6b:c2:cc:b1:43:ae:a0:31:f5:bb:c1:38:
cb:37:a1:17:72:55:3a:6f:3f:ba:35:ff:b3:d5:2a:
b8:d3:58:56:c9:57:ed:26:8c:3e:ab:3e:43:6c:5a:
f5:b8:28:71:5a:af:bd:64:75:05:55:55:10:5a:fd:
77:ea:3a:36:b5:49:1c:af:2d:44:1e:39:c5:db:e1:
01:8f:14:9e:a0:12:7d:52:2e:7a:90:51:85:61:95:
d4:2e:b1:61:d4:18:44:53:40:a6:ca:2d:06:3b:d3:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:8F:F6:2D:9D:6F:91:47:1A:67:DF:E0:C4:A5:1F:46:E7:4B:0F
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f8:57:7f:1a:eb:79:fc:57:df:92:02:cd:0a:c6:80:47:41:
0e:c5:2b:7b:d4:d1:eb:6e:ec:5a:4a:96:ca:94:0a:93:31:06:
6a:6c:84:d1:c8:5a:02:38:45:d8:c3:12:7c:8b:6e:4a:88:f5:
b7:d3:a1:ed:31:a4:75:16:9e:b5:36:74:61:69:e7:d8:24:8f:
50:17:c9:1a:8f:ea:55:7c:f9:08:35:63:3e:a7:fb:24:1d:60:
b1:30:36:a4:f7:78:33:87:99:0f:47:02:5d:ba:be:d9:06:d0:
c7:80:4a:57:4a:cb:1f:95:20:52:19:ff:00:b9:95:59:3d:e5:
e7:eb:82:44:5f:9b:26:26:41:1b:da:b2:6f:67:0d:6b:a7:f6:
bd:f7:e0:57:39:20:c7:02:64:02:6b:35:73:20:e6:4e:f8:b6:
8f:04:40:73:45:6e:e8:47:a8:31:00:cd:ad:5c:cf:1a:bd:9b:
ad:56:db:0f:6a:d0:ab:3f:ce:f1:f5:c5:cb:59:ca:96:28:36:
83:1d:82:23:bd:80:53:b7:0c:62:ed:2e:31:6f:57:78:ba:28:
7f:7e:ef:87:28:1f:3e:42:5a:d9:ea:58:da:30:7f:7e:e2:b8:
ca:9a:a9:d7:65:2d:b0:0a:ba:17:04:9a:f3:67:8e:d3:03:1d:
2e:8c:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:02 2025 by rpki-client