Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
File: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft (raw, json)
Hash identifier: YQc4Nkh9ygpSkhdzMvvWgY1w3v0hePM7pwkiHeqRqaQ=
Subject key identifier: B3:4A:D9:71:C7:E9:95:BD:8E:00:C0:95:42:4F:F7:CB:DC:32:DA:6B
Authority key identifier: 01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
Certificate issuer: /CN=010d68a876cf5793fd00876254253d382779027b
Certificate serial: 0198733CFD0C8DA62D3167133F7E23F6B07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
Manifest number: 037D
Signing time: Mon 04 Aug 2025 04:00:33 +0000
Manifest this update: Mon 04 Aug 2025 04:00:33 +0000
Manifest next update: Tue 05 Aug 2025 04:00:33 +0000
Files and hashes: 1: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl (hash: 1trdhOLAh+V7oLTKAkpopduX/cimkxMbr1KkXIjgALM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:fd:0c:8d:a6:2d:31:67:13:3f:7e:23:f6:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010d68a876cf5793fd00876254253d382779027b
Validity
Not Before: Aug 4 04:00:33 2025 GMT
Not After : Aug 5 04:00:33 2025 GMT
Subject: CN=b34ad971c7e995bd8e00c095424ff7cbdc32da6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:5f:9a:be:1f:4a:e9:47:fc:e2:a7:5c:2e:
da:b5:6b:69:fe:50:48:ae:14:b8:6c:eb:56:a7:37:
79:44:31:dc:3c:1b:e5:04:e2:40:5e:a9:f2:02:7b:
fe:db:75:0e:af:57:f0:75:4d:03:8b:17:1d:66:e2:
c5:2a:22:c2:4b:f1:cd:98:10:48:4a:df:5d:77:6d:
40:d5:e5:8c:aa:99:fa:e3:4a:d3:ed:4b:97:d7:f5:
07:cb:69:3d:c8:aa:bd:9d:23:59:ad:8f:b5:0d:81:
b2:0b:a4:d4:c2:e7:c0:31:b1:74:4f:72:50:22:54:
2b:24:49:42:96:34:18:8d:51:cf:62:a5:87:ed:57:
49:0e:28:b8:68:7d:0a:e1:73:bc:fe:cb:86:0e:2c:
fe:98:95:4c:cf:37:16:fb:bc:db:33:ac:03:57:49:
f8:84:a5:73:bf:ca:e2:5e:66:c8:5f:b7:91:c7:7e:
50:a3:be:0b:b4:39:22:27:b6:1d:e9:71:20:20:f8:
77:ae:1b:94:04:e6:53:59:6d:ac:3b:46:86:14:d1:
4f:4c:6f:cd:fb:34:2a:34:da:83:ef:1c:6f:a0:9f:
ba:35:30:52:4c:90:02:10:bb:df:70:3e:55:1c:e4:
cd:fd:22:90:7c:7b:bd:ff:72:bd:c5:2f:89:54:cb:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4A:D9:71:C7:E9:95:BD:8E:00:C0:95:42:4F:F7:CB:DC:32:DA:6B
X509v3 Authority Key Identifier:
keyid:01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:79:d3:05:8d:e0:26:25:d6:f6:38:af:c4:3f:78:6f:e5:1c:
ef:a4:55:2c:5b:41:18:67:db:ae:dc:3e:26:9a:a9:80:c7:0f:
10:03:d8:d3:0c:b6:d5:85:3c:af:42:09:b2:28:3b:07:42:c2:
89:bc:ff:04:10:a8:f6:c3:25:0f:c9:b9:71:23:46:f1:db:ce:
ae:2e:8d:a2:83:64:ba:52:b3:81:ed:b9:35:84:bd:da:f1:25:
35:b4:c0:76:47:bd:cd:07:60:fe:22:13:2f:1d:0a:27:62:66:
71:2b:b3:67:4a:82:6d:ec:c1:2d:8f:94:97:20:e8:fd:ad:1c:
9d:0f:58:8c:37:c0:f2:11:d9:7b:e6:ad:b0:2b:64:49:bc:30:
19:3b:0f:47:83:d4:72:11:52:4f:94:cb:79:b8:ab:89:77:ba:
33:88:d2:33:85:77:85:d4:a7:d9:99:be:4f:bc:09:09:5a:98:
dd:93:4f:9b:b6:72:cc:04:e8:4a:cd:07:0f:91:17:a0:1a:ea:
9d:af:aa:75:92:69:42:c8:ce:3b:e7:4a:1b:06:70:26:3f:ac:
05:37:3b:bc:7b:fa:d1:e9:01:ab:ea:b2:3f:d6:96:14:eb:10:
df:00:f0:78:23:09:55:0d:f8:5f:06:23:aa:c0:df:9f:b9:26:
8c:5b:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:10 2025 by rpki-client