Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier: WlJ1Abu2JTsFyc/vQVWAKkc/e+Dv+BdKyCGr/HoMPOQ=
Subject key identifier: 86:26:E9:5C:75:5D:AE:AB:40:9C:3F:2D:7F:5E:E9:46:22:48:EF:D0
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial: 0198898DF47ECBFE530793924553A9E48D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number: 078C
Signing time: Fri 08 Aug 2025 12:00:38 +0000
Manifest this update: Fri 08 Aug 2025 12:00:38 +0000
Manifest next update: Sat 09 Aug 2025 12:00:38 +0000
Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: oQXk6Qt0LLeA7NJBxkjDEI/UqGmb25DSU/cVh4xGM9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8d:f4:7e:cb:fe:53:07:93:92:45:53:a9:e4:8d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Validity
Not Before: Aug 8 12:00:38 2025 GMT
Not After : Aug 9 12:00:38 2025 GMT
Subject: CN=8626e95c755daeab409c3f2d7f5ee9462248efd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:a6:8b:23:a2:5b:ea:28:9d:af:c0:7d:c6:
84:95:5c:9a:c8:88:6d:ae:c9:e2:e7:7a:2f:d4:07:
63:8c:33:2d:0d:69:77:c2:7c:fc:ef:66:3e:f3:39:
b4:e1:8b:26:63:73:5c:ff:1d:b2:de:10:5c:b9:5c:
c5:ff:0e:f0:c1:2a:23:77:00:6e:2e:70:1b:e7:d2:
58:48:4c:d3:f2:b3:10:86:18:de:72:e4:79:a9:97:
08:0d:3f:87:4d:06:56:aa:10:53:98:8e:34:f7:ea:
3b:fc:72:2d:fc:b2:4a:b7:a2:26:d2:18:57:f6:cb:
3d:34:07:05:01:42:bf:70:c2:ab:2b:6a:82:f2:f8:
d8:4e:52:bb:aa:b9:27:97:3a:a2:99:1c:7e:15:22:
7f:a3:bd:76:ab:ed:6b:f1:6a:b2:0a:e9:0e:9f:54:
4c:80:8d:b7:1d:84:f8:36:95:c9:2b:6b:83:ac:bb:
c2:68:d8:de:ae:fb:cf:61:d2:84:41:06:2f:3e:e6:
c7:bc:f4:bc:55:bd:6c:59:35:c2:e9:7a:2d:03:5f:
47:1f:e7:86:c2:ee:bc:69:83:f2:b7:ad:98:f2:e7:
41:b5:d4:c0:49:3a:61:09:b8:0b:fb:d7:7e:17:37:
3a:7c:ac:58:ee:f0:17:3f:9c:95:e3:fd:1c:6d:e4:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:26:E9:5C:75:5D:AE:AB:40:9C:3F:2D:7F:5E:E9:46:22:48:EF:D0
X509v3 Authority Key Identifier:
keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0a:7b:12:9f:46:57:a2:ed:2f:6d:70:73:ca:01:0b:3b:55:
a4:8f:59:da:21:06:c0:00:94:16:e6:ef:a4:ba:a3:a7:86:83:
53:85:b5:be:39:5c:41:2a:c4:07:92:8a:84:bc:3f:31:61:1d:
7b:d5:b8:87:58:fd:01:2f:a8:50:72:ec:bf:77:78:6e:d6:93:
23:73:b5:79:1d:5f:dd:39:ac:45:c0:d5:6b:7b:de:46:8b:a7:
e9:03:91:89:8e:ae:38:16:51:16:70:00:85:e7:aa:86:40:49:
99:ab:be:21:af:e1:1a:d3:70:2f:41:81:ad:62:52:d3:1d:3d:
20:15:8a:eb:fc:07:54:0f:89:b8:09:7b:a5:00:8b:11:f2:76:
42:20:7f:04:de:4a:5b:0d:4e:75:fd:31:83:bb:d6:61:4e:78:
5e:d3:ca:47:26:49:92:cb:bd:a2:06:ad:79:f9:24:e7:7c:65:
a4:f6:2a:1b:15:27:7c:19:f5:17:0b:b3:dd:84:93:a2:ab:1e:
7c:a2:a6:12:f4:b3:05:c0:41:38:d1:90:f6:75:1f:9c:3f:0e:
70:21:13:13:f6:d6:75:eb:c2:52:0f:e2:d9:4b:07:17:17:fb:
fd:6f:dc:a1:d1:dd:96:a0:ec:f5:41:4c:06:6d:4d:46:9c:9a:
8b:95:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:36 2025 by rpki-client