Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
File: aXE7HKgNhb8WGCF_qS29R6NcW44.mft (raw, json)
Hash identifier: 9ndOZlf9gQKym2klBsWIquu6Te8Q+8onkMKRm0mJZlI=
Subject key identifier: 89:A3:FD:22:20:F6:55:91:AE:C2:E9:1E:6E:CB:ED:63:DB:9D:3C:58
Authority key identifier: 69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
Certificate issuer: /CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Certificate serial: 019873E26B226E625E66502799A58845C337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
Manifest number: D0
Signing time: Mon 04 Aug 2025 07:01:15 +0000
Manifest this update: Mon 04 Aug 2025 07:01:15 +0000
Manifest next update: Tue 05 Aug 2025 07:01:15 +0000
Files and hashes: 1: aXE7HKgNhb8WGCF_qS29R6NcW44.crl (hash: 40jjTFZSfm9fJNVENkuwZuc+4UYhFX+RPeD1YTLDwA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:6b:22:6e:62:5e:66:50:27:99:a5:88:45:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Validity
Not Before: Aug 4 07:01:15 2025 GMT
Not After : Aug 5 07:01:15 2025 GMT
Subject: CN=89a3fd2220f65591aec2e91e6ecbed63db9d3c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:83:d9:7a:92:8f:da:1e:3e:3c:b4:56:6a:
bc:4f:f9:78:c9:cc:e6:fb:c3:51:73:f7:f6:80:85:
c3:32:33:ee:eb:3a:0b:5b:34:49:df:23:c8:c5:73:
50:18:13:45:ad:bc:89:44:25:c0:0f:94:18:a1:8a:
d5:6a:cb:63:7e:7d:53:fb:de:aa:45:6e:e0:3c:45:
08:7d:5b:58:0f:44:03:94:d7:4e:83:19:d5:c2:4e:
6f:bd:b5:78:dc:3f:5d:46:9a:c1:d5:79:cb:a6:89:
82:1d:ed:08:eb:84:1d:99:8c:af:14:19:eb:b2:fd:
c0:0e:74:2f:65:f8:69:0b:18:ad:b5:a1:5d:9a:b3:
a6:98:6f:3e:46:27:27:5a:22:84:75:20:5a:e0:48:
41:3e:28:2c:aa:7a:c7:f2:77:17:ea:0e:4f:13:90:
30:1b:10:ec:fa:c2:4e:22:f6:72:e1:43:51:63:3c:
ad:9a:41:62:92:8e:62:ba:be:7a:f0:f4:a7:4f:3c:
5d:e0:53:78:c4:64:c3:30:55:dc:1a:ff:25:b5:3b:
5f:65:8f:fd:2b:01:65:2d:b4:fc:66:9c:e1:84:17:
61:9d:df:30:98:7b:df:89:00:23:eb:63:42:cd:4d:
3c:ab:e7:ed:d8:03:d0:9d:bb:a1:84:44:d4:e9:66:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:FD:22:20:F6:55:91:AE:C2:E9:1E:6E:CB:ED:63:DB:9D:3C:58
X509v3 Authority Key Identifier:
keyid:69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:0f:b0:41:6f:9b:92:3c:16:7a:6a:35:26:96:c4:f9:ca:
3b:5c:d8:bb:99:bc:8c:e7:d7:30:18:e2:7c:bf:04:36:a7:8a:
bc:9d:bc:b5:11:b8:0f:b5:01:cb:3e:c3:7b:57:3a:c5:5b:92:
64:45:2e:f9:7c:e8:66:fa:0d:bc:c9:cc:28:cf:b9:a5:09:61:
1d:a3:67:af:7a:ff:1e:7a:34:75:35:80:5d:6e:d0:c7:4c:6e:
a2:0d:12:61:8d:3c:c6:42:77:eb:4b:92:f3:5f:43:a2:3b:c6:
8a:97:9e:c3:ab:d0:f2:ec:3b:cc:71:d3:01:da:12:56:be:18:
31:0e:cb:ef:8d:16:41:3b:c7:f6:d4:b4:88:09:49:3e:62:df:
1b:9f:df:52:38:6b:83:3b:51:64:63:b6:f4:fb:09:60:3d:58:
79:20:e3:18:36:68:85:36:81:16:a4:18:44:30:b4:58:56:cf:
cd:df:5c:07:8f:d0:55:a1:78:eb:35:5d:0f:b9:f7:1e:eb:36:
a0:2a:98:40:18:ea:00:ea:6d:a9:8d:96:1c:1b:0f:da:60:a4:
e8:1f:e9:c7:63:f9:a7:3d:a6:a9:cf:7e:dc:76:07:09:3d:cc:
4d:b2:28:1b:a1:4a:61:92:66:b9:7f:a2:11:7e:2b:b4:f0:cd:
a6:8d:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:39 2025 by rpki-client