Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: xPb+DR0Zp3qF/fp1Q/46aUR/+jhaII65kbn8vI4WjKg=
Subject key identifier: 61:D8:39:BD:14:9E:38:65:09:9A:94:0F:54:2F:0E:B3:CB:A3:9C:4A
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 0198496552EC39D082E7F056BC3019C9D4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 15FC
Signing time: Sun 27 Jul 2025 01:00:33 +0000
Manifest this update: Sun 27 Jul 2025 01:00:33 +0000
Manifest next update: Mon 28 Jul 2025 01:00:33 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: mOJu3rM3XCGekBapwy+cgWZqhr4P712DKCbLd789D04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:52:ec:39:d0:82:e7:f0:56:bc:30:19:c9:d4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Jul 27 01:00:33 2025 GMT
Not After : Jul 28 01:00:33 2025 GMT
Subject: CN=61d839bd149e3865099a940f542f0eb3cba39c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:b3:fb:0c:f0:c0:27:be:a5:4d:d7:66:2b:
bc:ad:b1:a7:f0:77:09:ee:1f:76:21:3b:12:6e:6a:
ac:e2:10:47:ab:aa:c4:2e:3a:95:f9:3f:5f:17:e7:
d7:b3:b3:35:5d:01:88:bd:4c:cd:93:9e:55:67:56:
1b:52:fd:dd:a6:13:29:a5:f2:45:7f:78:15:cf:2b:
0c:82:d9:34:ae:eb:98:d7:4f:a1:d7:f4:a0:60:f7:
28:d5:30:80:44:07:b2:53:f9:4b:4d:84:50:9a:ae:
2e:b7:36:92:6c:38:53:30:6c:a0:f3:5b:fb:20:e2:
f3:cd:87:8c:d3:40:e7:6c:41:bb:d6:b7:85:78:3c:
b8:b6:f8:46:fc:7c:dd:5d:c0:4c:75:e3:29:ac:e7:
97:44:70:98:6a:03:65:b9:54:a2:4e:4b:07:af:d6:
1a:e7:83:9a:fa:b1:3c:a5:8c:45:bc:26:f7:dc:a2:
c5:d3:16:ac:fa:5e:af:2c:cd:aa:dc:c5:59:34:64:
09:f6:6f:01:d8:de:17:63:2f:8c:36:78:8f:c2:ed:
50:bc:62:7f:b3:a7:43:54:40:56:41:7a:55:97:16:
03:00:1d:ba:bc:d8:c3:0e:13:99:70:11:a5:2a:a5:
e8:f7:04:cf:76:36:1a:b6:76:5c:1b:e7:83:15:fc:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:39:BD:14:9E:38:65:09:9A:94:0F:54:2F:0E:B3:CB:A3:9C:4A
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fc:c5:26:fb:5e:31:3a:2c:12:80:7f:63:f3:60:d4:0d:d7:
e1:83:a9:fd:8c:a5:4d:ed:05:cb:ce:85:53:3f:ce:c8:a2:e9:
e4:10:fe:f9:22:e0:24:1e:e6:ad:c1:e4:3c:a1:2e:0f:09:de:
cd:49:8b:12:a8:4f:43:e6:18:ed:10:52:c1:f7:62:d4:66:8d:
fc:14:52:4e:68:d3:54:bd:ed:c1:b8:87:50:d3:42:80:91:60:
ea:5b:5c:d2:be:55:81:93:7c:2d:ea:01:09:e7:95:0d:39:85:
06:54:97:4d:c1:1d:1c:8d:fe:e5:12:71:34:1d:74:4b:4d:83:
bc:a2:9c:4e:11:45:9e:73:b4:e3:11:1e:79:87:ad:83:9b:25:
14:28:be:67:ea:a9:52:ee:1f:f8:38:28:e3:27:56:91:36:f4:
c4:97:60:27:57:58:e3:78:16:85:ca:05:24:fa:4f:f5:cc:17:
92:1b:87:46:f7:a1:1d:2a:35:e5:f9:13:16:b6:bc:f8:99:f9:
2b:a4:08:32:d2:61:dd:0c:40:1f:70:02:b9:ef:ea:8c:9e:2e:
ad:5c:4d:9f:77:32:d9:c3:81:4d:56:a3:ec:4b:76:ad:16:56:
1d:bb:f5:cb:17:77:61:12:b8:1a:5e:62:c4:61:e6:62:02:05:
91:e0:ee:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZVLsOdCC5/BWvDAZydTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWI4Zjg4OTJkMDFkZDRjODQwNzI0Y2JiYWI5MGMwY2E2
MDk0MzIwHhcNMjUwNzI3MDEwMDMzWhcNMjUwNzI4MDEwMDMzWjAzMTEwLwYDVQQD
Eyg2MWQ4MzliZDE0OWUzODY1MDk5YTk0MGY1NDJmMGViM2NiYTM5YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qiz+wzwwCe+pU3XZiu8rbGn8HcJ
7h92ITsSbmqs4hBHq6rELjqV+T9fF+fXs7M1XQGIvUzNk55VZ1YbUv3dphMppfJF
f3gVzysMgtk0ruuY10+h1/SgYPco1TCARAeyU/lLTYRQmq4utzaSbDhTMGyg81v7
IOLzzYeM00DnbEG71reFeDy4tvhG/HzdXcBMdeMprOeXRHCYagNluVSiTksHr9Ya
54Oa+rE8pYxFvCb33KLF0xas+l6vLM2q3MVZNGQJ9m8B2N4XYy+MNniPwu1QvGJ/
s6dDVEBWQXpVlxYDAB26vNjDDhOZcBGlKqXo9wTPdjYatnZcG+eDFfyhxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHYOb0UnjhlCZqUD1QvDrPLo5xKMB8GA1UdIwQY
MBaAFAKrj4iS0B3UyEByTLurkMDKYJQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEt
ZTNiNzcwMTNmZGI3LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEtZTNiNzcwMTNmZGI3
LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/zFJvte
MTosEoB/Y/Ng1A3X4YOp/YylTe0Fy86FUz/OyKLp5BD++SLgJB7mrcHkPKEuDwne
zUmLEqhPQ+YY7RBSwfdi1GaN/BRSTmjTVL3twbiHUNNCgJFg6ltc0r5VgZN8LeoB
CeeVDTmFBlSXTcEdHI3+5RJxNB10S02DvKKcThFFnnO04xEeeYetg5slFCi+Z+qp
Uu4f+Dgo4ydWkTb0xJdgJ1dY43gWhcoFJPpP9cwXkhuHRvehHSo15fkTFra8+Jn5
K6QIMtJh3QxAH3ACue/qjJ4urVxNn3cy2cOBTVaj7Et2rRZWHbv1yxd3YRK4Gl5i
xGHmYgIFkeDu/g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:54 2025 by rpki-client