
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
File: aAkoqR-PfmOX5sZdDgtmKReW01I.mft (raw, json)
Hash identifier: 90kjhz4konLkT3Hq58gTuREPT1vmSxX70dHHFn6owzM=
Subject key identifier: EE:65:3A:14:48:F8:A8:E6:20:F7:26:DB:1D:B8:D3:51:FE:B8:43:AC
Authority key identifier: 68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
Certificate issuer: /CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Certificate serial: 01984AAE79FB65A4983549489165ADBB304D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
Manifest number: 11C5
Signing time: Sun 27 Jul 2025 07:00:05 +0000
Manifest this update: Sun 27 Jul 2025 07:00:05 +0000
Manifest next update: Mon 28 Jul 2025 07:00:05 +0000
Files and hashes: 1: aAkoqR-PfmOX5sZdDgtmKReW01I.crl (hash: CHJVrge/1aQTOpFE9YgeowMa9fR8rScR9mVim8lMCP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:79:fb:65:a4:98:35:49:48:91:65:ad:bb:30:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Validity
Not Before: Jul 27 07:00:05 2025 GMT
Not After : Jul 28 07:00:05 2025 GMT
Subject: CN=ee653a1448f8a8e620f726db1db8d351feb843ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:08:74:0c:ee:65:f7:8e:bf:f3:1a:56:67:
8a:ad:99:0c:7f:6a:a1:51:ea:56:42:34:d1:6d:50:
7a:6e:7a:f8:65:b2:91:40:25:9e:d8:49:e0:da:67:
26:80:d1:4a:a4:f7:44:ca:44:fe:ea:c1:eb:6a:67:
e6:fb:59:7c:21:96:4c:81:52:d3:89:b9:90:47:4e:
83:32:b9:0b:65:06:13:0e:b5:84:65:12:d8:ad:c2:
64:c6:55:49:a1:21:70:27:81:8a:81:ed:c0:77:f6:
fe:2e:1f:f9:9a:e2:ad:ce:58:ea:08:67:c2:e8:17:
16:1e:e4:a1:bb:f2:ee:8c:23:22:b8:c2:ee:28:5e:
e0:78:d0:2c:d3:bd:d2:95:74:84:cd:7d:44:0a:0c:
b6:34:2d:d2:99:d0:b5:fb:84:96:b5:ed:37:d5:6e:
7d:8a:43:b0:71:b3:db:88:2c:64:d0:5c:84:6d:86:
81:3c:80:70:61:d3:18:6f:9a:8f:fe:db:4d:ce:2b:
14:b7:98:98:fb:7c:e2:86:f8:8e:bd:9e:99:45:74:
8a:e2:84:11:06:51:26:b3:e2:43:aa:60:c0:c4:cc:
b1:c6:2b:4b:cf:03:1f:28:8f:7f:4a:29:6e:c7:cd:
7d:e0:11:94:94:cf:93:e7:87:2c:ab:e6:fc:3c:a4:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:65:3A:14:48:F8:A8:E6:20:F7:26:DB:1D:B8:D3:51:FE:B8:43:AC
X509v3 Authority Key Identifier:
keyid:68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f2:21:6b:5d:db:d4:79:f3:e2:72:0b:ac:1a:1a:1b:6a:1d:
23:fc:75:d0:89:35:09:ed:1a:2f:2e:4a:73:25:c0:03:68:ee:
02:07:3f:f7:a8:2e:69:27:ec:ba:54:0a:66:f4:bc:e0:d4:d1:
59:d5:9e:36:d5:45:7b:df:7c:7c:4b:7f:a7:60:8d:bc:f4:ff:
cc:f7:cd:d8:41:9d:e0:16:72:b3:ca:89:79:74:bf:bb:b2:6c:
5a:95:f6:e9:12:98:54:ea:9d:a3:15:42:7a:e5:29:ba:04:b9:
d1:95:8c:23:04:a7:72:a2:0f:cc:e0:76:30:99:10:bb:c0:42:
0e:9c:00:38:4a:ef:c5:ca:56:f5:96:9f:a6:56:04:b4:3a:2e:
01:83:7d:82:f8:27:71:4e:22:59:8f:8f:b7:f9:27:16:d9:bc:
cb:1c:f8:17:37:13:a7:3e:3e:7a:6f:9c:8e:d4:c5:c2:de:cd:
aa:7a:06:41:38:64:38:50:85:e0:be:0b:49:06:69:9d:47:e2:
63:7c:3b:dd:09:1b:40:df:a4:5a:a8:41:3f:b5:d0:9c:d1:f0:
81:f3:24:e0:bc:19:59:2e:c9:45:ce:54:46:79:a0:ab:08:70:
f3:ba:62:0e:26:54:88:c9:9b:71:55:75:3e:9d:23:9d:11:6e:
0f:62:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:40 2025 by rpki-client