Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: tnUdRiQv65ufMiEUle3IXGxtMiLHjw4f9HU/B7rartk=
Subject key identifier: 35:B0:E5:0B:15:F0:8A:22:98:61:66:33:46:5B:D7:C9:54:F2:56:38
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 0198451A6D04B2C3DF5AF0EC4A8DCE00EE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 049B
Signing time: Sat 26 Jul 2025 05:00:16 +0000
Manifest this update: Sat 26 Jul 2025 05:00:16 +0000
Manifest next update: Sun 27 Jul 2025 05:00:16 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: 31EzRhqBHqEk1H4AeFx+j/k66NITDdzkxqZ0DL6WddU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:6d:04:b2:c3:df:5a:f0:ec:4a:8d:ce:00:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Jul 26 05:00:16 2025 GMT
Not After : Jul 27 05:00:16 2025 GMT
Subject: CN=35b0e50b15f08a2298616633465bd7c954f25638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:e1:6e:8c:76:9f:2c:df:60:e3:df:b8:00:
9e:4c:d6:d4:2e:99:98:f8:fa:f0:68:a2:13:a5:0f:
73:33:ad:ad:21:47:7d:29:e6:5f:c3:ac:28:3c:b1:
ed:4c:40:62:2f:9a:7a:08:0c:74:f2:9a:8b:24:53:
80:69:b8:dd:cf:59:e7:22:69:0b:bf:c1:f9:62:24:
37:fd:db:0b:fb:35:69:7a:73:18:7b:b3:fb:f9:0d:
06:f2:b2:48:e3:e7:50:7b:8d:f8:42:7a:84:89:dd:
ab:d1:2d:b8:0e:2a:6d:d3:b8:55:85:d7:33:f3:67:
b6:2e:bf:10:5b:d4:28:7c:21:1f:eb:49:bf:40:85:
c1:2d:62:5a:4c:ae:be:9d:27:2f:3c:12:63:9c:18:
18:de:54:52:76:d1:90:82:0a:85:1f:cb:a1:d0:88:
27:ce:0b:c8:3e:c8:e3:13:b7:5d:a5:c0:1a:28:a6:
ba:d2:e7:92:4a:a3:3e:f3:bb:15:07:ab:3a:2a:dc:
e4:7a:1a:1b:b6:ec:1d:f1:90:b9:58:ed:0b:e7:fd:
ea:2d:93:cf:de:b9:88:9c:3c:10:7f:a1:bc:28:ca:
1e:74:57:86:24:23:03:14:4e:50:c7:f8:1a:f4:55:
56:8b:01:12:4b:e9:7a:2d:6c:9f:c0:ac:f8:84:38:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B0:E5:0B:15:F0:8A:22:98:61:66:33:46:5B:D7:C9:54:F2:56:38
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:03:6b:73:fc:8c:7c:9d:5e:f6:62:35:f6:03:b5:c9:ff:2d:
f2:b4:1b:b7:34:65:4f:c3:e5:41:f2:8a:96:3a:a2:f3:fc:44:
3e:78:53:9d:55:71:80:8e:b5:25:23:53:59:27:c2:5c:a9:63:
02:1e:2a:48:a4:f1:45:51:34:ec:e3:12:bc:57:24:10:5c:d4:
48:f9:02:91:c1:bb:9f:50:f5:04:b2:82:e1:86:87:c0:ba:e3:
7a:5c:64:c5:13:03:dd:76:18:46:be:55:7d:68:c5:a7:a9:2e:
bf:3c:36:4c:86:ae:6d:7a:61:20:f8:0d:32:da:8d:24:7c:51:
38:6d:54:0e:94:8f:eb:e7:75:ea:1a:04:bf:86:60:45:69:00:
a7:b8:35:a9:f0:af:7c:a2:6b:38:bd:f8:60:ce:9c:ea:3b:91:
78:c5:61:d1:1b:32:eb:39:55:4f:79:27:75:0b:2b:fd:ca:3d:
72:dc:ed:7f:b5:67:45:3d:04:96:71:95:62:d7:e9:fb:65:6c:
bb:8b:93:d3:b2:5b:63:1c:bf:cb:78:e4:04:5f:c9:cc:92:b6:
17:ef:44:c5:26:41:c7:9c:5a:7f:08:3f:17:28:0f:0a:30:69:
7b:fd:8b:9e:f3:d4:95:fa:36:9d:21:0f:b5:dd:10:dd:dd:16:
64:2b:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:41:24 2025 by rpki-client