Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
File: aomTYnatLRhxB9-3QAeTADrBSac.mft (raw, json)
Hash identifier: 3zgWJcvZSpFJTDQsm/ohp1NeQqM3uo4o3CHZK36h1Gw=
Subject key identifier: 03:29:51:F2:DB:0C:D9:25:5E:E6:AD:75:05:76:0B:E3:1C:A7:6B:E3
Authority key identifier: 6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
Certificate issuer: /CN=6a89936276ad2d187107dfb7400793003ac149a7
Certificate serial: 0198733D265DDDF6621801D3DC0BECE6D1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
Manifest number: 15A5
Signing time: Mon 04 Aug 2025 04:00:43 +0000
Manifest this update: Mon 04 Aug 2025 04:00:43 +0000
Manifest next update: Tue 05 Aug 2025 04:00:43 +0000
Files and hashes: 1: aomTYnatLRhxB9-3QAeTADrBSac.crl (hash: 19kkgP4jfNKHU5naAbsllexKEAIxV0badNI9DBg7xLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:26:5d:dd:f6:62:18:01:d3:dc:0b:ec:e6:d1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89936276ad2d187107dfb7400793003ac149a7
Validity
Not Before: Aug 4 04:00:43 2025 GMT
Not After : Aug 5 04:00:43 2025 GMT
Subject: CN=032951f2db0cd9255ee6ad7505760be31ca76be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:c4:37:01:b6:b5:8a:32:d4:6d:0e:19:ee:
5b:dd:09:b7:93:2a:d7:5a:1a:33:73:15:e0:37:ed:
79:34:dd:c7:cd:cc:c4:f7:e7:1a:55:ac:8d:17:27:
93:76:b1:80:24:9c:40:1c:5f:56:ed:4d:bb:2b:a4:
d5:c3:3c:ff:44:26:db:55:1f:a1:84:f3:25:5f:89:
c2:b9:5d:ee:a1:c0:9e:58:39:63:19:6b:69:d2:8c:
7f:6e:96:a5:8a:4e:c9:96:89:b5:71:61:26:8c:b1:
a6:18:ba:e6:49:b7:94:34:da:a7:b0:2d:4e:67:9f:
81:64:e4:82:63:3b:e2:f8:21:59:0b:c5:f7:da:d4:
85:5b:0d:29:9d:24:01:b4:96:9b:33:3a:9e:fb:b8:
fb:d0:cc:50:30:53:20:88:fe:04:26:55:cd:5e:3c:
a0:02:a0:ac:ac:f8:9f:20:a9:fd:93:df:39:2f:65:
6d:d6:d9:26:14:57:bb:ed:e0:ac:d6:3c:18:e2:4f:
75:a7:2f:aa:24:de:19:41:e1:04:4f:41:76:8a:b2:
f3:7b:3e:60:5b:26:31:c2:05:f8:c7:49:75:4a:6b:
68:45:02:b3:43:63:3b:73:7d:1e:e6:34:c0:0c:4f:
f1:43:1f:d3:57:da:d5:37:6f:00:32:92:c2:41:d1:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:29:51:F2:DB:0C:D9:25:5E:E6:AD:75:05:76:0B:E3:1C:A7:6B:E3
X509v3 Authority Key Identifier:
keyid:6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a0:04:18:08:13:2e:3e:06:7a:b6:87:ad:64:45:8e:f2:dc:
a8:66:64:12:5a:1e:ee:51:fc:fd:01:83:11:6b:3c:41:16:a1:
ec:c3:32:63:e4:ba:7b:c6:55:7a:97:e8:b6:e2:25:ef:ab:d0:
10:12:c4:12:14:9c:64:3c:7e:88:e2:de:71:7b:fc:01:1f:4a:
48:64:f7:4b:3b:19:12:da:5e:fc:9a:fb:d7:25:6f:73:0d:e8:
b4:7e:d6:19:57:40:0d:da:81:9b:c0:ac:7a:38:bb:98:e7:bc:
29:dc:26:01:9a:fb:b2:59:61:03:f1:2e:0b:1a:fe:57:73:ac:
c0:ac:6b:e8:48:84:c9:65:8d:14:0b:84:89:08:ff:f5:d0:6b:
3a:10:2d:c4:72:c7:55:ca:5e:e5:27:ee:a6:7d:82:18:06:9c:
71:5f:b5:e5:89:65:a3:9b:1c:97:b8:19:3d:d2:37:0e:2a:d4:
d9:20:6a:0f:13:9a:e1:01:90:53:fc:f5:02:b5:f9:8d:26:cc:
c9:d9:c0:7a:7f:91:c3:a6:8e:bc:b2:1a:8a:33:7d:0d:a8:53:
97:35:07:a1:16:4e:e2:6f:90:14:8f:4d:af:a4:30:ed:a6:87:
9d:6c:bc:08:05:59:15:b0:dd:4a:c4:44:50:0d:15:7f:ad:74:
6b:90:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:39 2025 by rpki-client