
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json)
Hash identifier: hD/oL0Ip6QfTZ1OIzjxF/OvUKF38qVKcsaZiEpTYmeA=
Subject key identifier: 69:F6:52:9C:9E:91:E0:DC:1A:2E:31:53:93:F1:EA:97:A6:1C:FC:57
Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Certificate serial: 019873E1BBD8D064DC653F6CFD7B400ABFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
Manifest number: 1267
Signing time: Mon 04 Aug 2025 07:00:30 +0000
Manifest this update: Mon 04 Aug 2025 07:00:30 +0000
Manifest next update: Tue 05 Aug 2025 07:00:30 +0000
Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: OYUIt2k1kKn38to6f29gNdih4dLX0ESJAt1otfztsng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:bb:d8:d0:64:dc:65:3f:6c:fd:7b:40:0a:bf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Validity
Not Before: Aug 4 07:00:30 2025 GMT
Not After : Aug 5 07:00:30 2025 GMT
Subject: CN=69f6529c9e91e0dc1a2e315393f1ea97a61cfc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:f0:47:1c:99:a2:f7:c6:f2:20:08:3e:50:
91:32:cc:9c:6d:79:d6:13:af:5a:af:7b:52:b4:1d:
ca:6e:fa:d2:dc:60:8b:46:b4:36:37:a0:da:17:c1:
b0:24:50:dd:10:f5:0e:82:78:cc:f0:b6:3c:9c:cc:
01:56:7e:57:20:06:55:c5:c9:04:9b:1d:a9:59:54:
9b:fc:b1:f6:8e:61:f4:7c:0a:3f:ff:d9:4d:6e:70:
35:a5:52:3b:5e:b7:9f:7e:de:de:06:d7:01:ee:19:
fe:ae:a8:c8:6a:08:6a:6e:98:63:d1:ee:61:e4:31:
51:74:b0:aa:b9:c3:4d:c2:49:0f:f3:92:a2:df:08:
77:2a:41:ad:d9:fc:b5:57:da:98:1b:e9:41:c0:02:
e0:3f:94:1d:aa:5b:91:ab:20:53:24:4f:0d:d6:f0:
e7:25:43:bd:42:43:43:57:7b:96:82:70:98:3c:01:
28:d6:5f:75:36:12:69:fa:1a:8f:dc:a8:f5:db:fe:
05:fb:16:73:f0:a4:2f:f9:a9:d7:cb:02:1f:8f:ce:
34:23:fd:69:cf:14:e4:5a:78:e9:56:45:d0:e2:e0:
0b:a2:f2:a4:6d:ca:f9:84:2a:55:94:79:5c:5d:b8:
bd:df:75:45:82:70:c4:b5:9d:d1:2c:37:b5:50:87:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:52:9C:9E:91:E0:DC:1A:2E:31:53:93:F1:EA:97:A6:1C:FC:57
X509v3 Authority Key Identifier:
keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:11:d7:4d:0c:5f:44:5c:8e:62:d2:4f:ae:3b:6d:21:e3:
73:9b:87:52:74:12:fd:e3:f7:08:70:ec:99:69:c2:3d:a6:54:
9b:23:14:f8:78:cf:30:ce:64:eb:9d:cc:59:3b:46:e3:e2:cd:
dc:18:30:ab:31:b4:f4:48:3f:9f:6f:55:22:98:8e:7a:1b:85:
45:e8:0e:c6:9a:c9:9b:74:5c:71:2a:07:ab:f8:94:c3:92:62:
76:70:c8:76:69:31:37:0e:a1:13:3c:cd:97:a2:f4:29:fe:1a:
46:2c:9b:da:77:2b:5c:74:95:c9:e7:a7:55:c6:7a:a8:b7:e0:
50:ce:18:1d:64:ed:b3:5d:1b:db:11:5e:f4:cd:52:86:e8:73:
e2:26:5b:bd:17:7e:0f:ca:32:77:70:13:18:e4:bb:3d:04:a6:
de:aa:9a:fe:7c:ba:e4:2e:48:38:87:24:c4:a7:30:27:87:3a:
59:fc:d1:2e:b5:95:32:a5:ad:d1:c5:31:d9:d4:da:fb:3f:59:
34:a2:97:3e:ca:ea:cf:cc:8d:0c:58:20:0f:20:50:79:21:fb:
b5:5a:ca:96:72:13:e2:83:90:50:e0:9d:e3:03:00:ce:58:88:
a0:a1:cf:e3:4b:90:19:2e:fd:5d:fb:c5:5b:ed:c0:f2:bc:31:
66:dc:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:27 2025 by rpki-client