Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: dT7mn/J4aIKLxfqROTwni7eqMNp5TEZxjilKJO5YvIs=
Subject key identifier: 62:C3:86:77:64:EE:B1:3F:CE:26:1F:DB:5C:F3:E6:EC:61:8C:62:2A
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019A4DAB074D669F6ADCD1043A1C5F8616AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 07:00:45 +0000
Manifest this update: Tue 04 Nov 2025 07:00:45 +0000
Manifest next update: Wed 05 Nov 2025 07:00:45 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: KGo7NsyIGMDRUSAj6F19SUY/KXVFKvFE0IZ26UEivuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:07:4d:66:9f:6a:dc:d1:04:3a:1c:5f:86:16:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Nov 4 07:00:45 2025 GMT
Not After : Nov 5 07:00:45 2025 GMT
Subject: CN=62c3867764eeb13fce261fdb5cf3e6ec618c622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:01:e7:0e:5a:37:a2:95:05:b3:93:aa:46:
4b:e5:db:3b:24:e6:92:78:51:35:2b:1d:b3:11:19:
31:fc:1c:5e:2f:17:9e:06:cf:68:a3:4c:e3:7c:41:
e6:d1:99:3d:9b:3e:28:40:ed:17:23:51:82:ec:f2:
fc:33:6b:03:0a:37:65:3e:61:42:a2:3b:2f:c2:32:
11:f8:47:99:3d:da:49:ea:94:40:1d:4a:33:4a:7a:
38:56:1a:ef:6f:a1:92:80:6c:f1:f8:6e:d4:b3:cb:
d2:a6:cb:9d:32:87:f4:f5:da:60:dd:f5:20:75:7b:
ab:ae:88:68:f0:de:7c:bf:79:58:ff:5c:76:08:3e:
88:f9:20:c8:a7:1c:e2:e5:16:23:5e:06:ab:20:fb:
2a:83:62:4a:4d:01:2d:88:4d:fb:8e:85:3a:e1:03:
db:35:b4:c0:ac:9b:20:92:1e:f5:8d:8f:83:8f:95:
f8:a8:5e:01:83:41:60:19:2b:1e:03:dd:e3:b3:87:
01:47:8d:3a:94:f4:50:28:d1:37:ee:2a:ce:45:df:
73:bc:44:17:16:a8:a0:0e:85:b8:4e:e0:8b:58:2d:
aa:56:ea:7e:de:77:4a:f3:55:ce:7d:f2:b2:c3:41:
cd:e7:36:ec:d9:41:47:ab:b4:66:2c:ec:f9:a3:43:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:86:77:64:EE:B1:3F:CE:26:1F:DB:5C:F3:E6:EC:61:8C:62:2A
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:09:e0:ef:f5:ff:8a:61:e1:1c:e1:2f:5a:af:6a:1f:a7:69:
2f:02:37:45:04:7f:ed:33:7f:0d:3f:35:c1:88:83:58:98:db:
89:e0:03:66:39:c3:09:26:0c:0f:eb:63:dd:5b:5b:43:de:75:
e1:ca:d1:1d:1c:43:5d:4d:c3:fb:1f:8d:de:6f:17:91:30:4a:
d2:f6:e4:c1:d6:4d:6f:20:61:28:72:57:96:7b:e3:85:33:a9:
77:da:16:bf:04:08:c6:6c:2a:e7:5e:68:89:25:8a:bd:39:a6:
e7:f5:35:95:10:6a:96:23:fa:1b:03:14:58:5e:8d:48:66:05:
8b:19:d4:3e:4c:bf:b4:4b:2c:38:8f:7e:85:bf:78:96:99:93:
14:56:bd:92:8f:a3:d4:fc:76:d3:12:a7:8f:46:3a:c8:6c:a9:
90:4f:a0:d4:a9:33:da:f3:19:64:b6:f0:0d:82:b7:6e:8e:aa:
97:e8:9f:50:2b:58:4c:38:29:3c:b0:1e:d0:0e:5f:47:a8:16:
68:e3:ee:6e:3a:d7:0c:4b:36:c2:fa:e6:1d:2b:06:2b:72:91:
b2:45:fe:f7:24:26:23:00:46:70:08:d7:9f:b1:2f:30:8f:1c:
fe:87:61:52:06:78:3c:2f:57:cb:cd:c8:22:3e:cc:75:63:0c:
1a:ed:a2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:16 2025 by rpki-client