Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json)
Hash identifier: e1Eq0j6kOPOu3PMxQvn23bWBhrOa9CKZKbeBarNu9ys=
Subject key identifier: F8:F7:50:29:EC:E9:D4:AF:0A:85:C4:EE:59:7C:72:DF:65:C9:34:90
Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084
Certificate serial: 01988B7D6031785F32854729F2D88574D8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
Manifest number: 04A5
Signing time: Fri 08 Aug 2025 21:01:46 +0000
Manifest this update: Fri 08 Aug 2025 21:01:46 +0000
Manifest next update: Sat 09 Aug 2025 21:01:46 +0000
Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: HpP1Q2xiP7Lcx5TI7yWhEEIuklITpLc5hUS6N9h3LWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:60:31:78:5f:32:85:47:29:f2:d8:85:74:d8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084
Validity
Not Before: Aug 8 21:01:46 2025 GMT
Not After : Aug 9 21:01:46 2025 GMT
Subject: CN=f8f75029ece9d4af0a85c4ee597c72df65c93490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:b5:14:4e:d1:f2:14:0b:48:bb:b7:7d:73:
9e:d5:e1:ce:1f:1d:e3:97:e5:6a:a9:bb:15:bb:b9:
44:c8:14:bb:bc:35:92:3e:e1:b0:9e:d6:3c:a9:a2:
9c:02:eb:51:7f:28:5d:5f:3d:d7:13:aa:17:f9:0a:
47:23:51:7c:cb:54:e5:52:2f:7a:00:19:aa:ef:10:
a7:ac:90:fc:fc:9d:8f:60:92:ec:0b:f3:5b:e3:9d:
33:29:b8:e9:11:b4:5e:b8:39:55:6b:1d:34:80:a4:
78:62:69:fb:8c:b2:25:ff:af:eb:0b:6f:3b:3f:a2:
cf:b3:00:01:47:1c:08:95:fc:a4:8b:29:7c:da:d9:
5f:81:de:41:9d:13:b1:c8:ab:31:1e:9c:03:03:29:
91:2e:0f:84:ee:0e:f3:ed:7b:50:72:01:bb:0b:de:
db:1d:67:35:49:9a:0e:a0:64:49:f7:0f:e2:dc:86:
3b:4f:04:ee:f0:2f:db:77:64:f6:47:e0:7e:8a:27:
74:07:ce:d7:44:6b:1f:89:13:4f:19:ed:49:0c:c9:
76:b6:b9:d1:cf:fd:46:10:18:08:41:f6:87:de:b8:
14:d6:67:30:d9:bb:60:76:d4:e6:22:43:7b:5a:0f:
9b:df:ab:fc:a3:96:29:7e:02:89:8d:0d:34:3c:df:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F7:50:29:EC:E9:D4:AF:0A:85:C4:EE:59:7C:72:DF:65:C9:34:90
X509v3 Authority Key Identifier:
keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:54:1f:fb:e9:be:54:07:87:7b:06:1b:30:e1:03:b5:e8:7d:
f4:d8:da:21:d0:89:77:84:b7:c4:45:2a:d4:7a:fb:59:cf:62:
ca:b0:a6:bb:08:8d:77:1f:2d:05:09:54:71:7c:97:2d:7e:e2:
04:2e:77:6e:94:2f:33:b1:09:6b:80:c7:62:1f:f7:bc:0d:eb:
1c:d2:93:17:80:5c:48:8b:f1:65:f4:70:ca:f4:41:8d:99:55:
e9:4b:b1:0d:bb:9f:bc:bf:43:6e:9f:9d:09:c9:94:03:98:de:
19:f2:08:e2:c2:b6:10:1a:d6:9c:0a:f0:91:ae:d3:f7:c2:66:
58:4f:c4:54:e5:0f:5f:76:67:c6:40:53:c4:22:a9:1c:f1:17:
46:a8:f4:73:f6:72:4d:3b:07:42:a5:c6:9d:af:ac:30:0b:da:
ae:5d:9a:03:d3:9e:a6:60:b8:63:c8:e4:81:42:3c:39:ed:cb:
d3:d2:c7:e5:46:79:1c:6b:98:58:ab:e1:3c:6d:c5:ca:c8:75:
86:b5:86:a3:8c:d4:53:2e:8d:21:14:f9:6e:72:93:7b:8f:99:
fc:25:6f:8d:de:47:d2:51:25:fc:30:9a:4a:39:5d:39:bb:5f:
d7:51:0c:12:22:70:1b:8c:19:7d:b7:42:08:26:64:8b:b6:fc:
57:fb:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:39 2025 by rpki-client