Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier: QdgfZTApI6L4QZ4hUbW0ei4F0fJ0JWbjBzEmZi4z60o=
Subject key identifier: 45:5E:C1:AE:F7:EB:2C:88:82:40:1E:85:32:DF:75:A7:E4:76:E6:FB
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial: 019849D2E971C93E3729FCB619BEEE3B8366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number: 076B
Signing time: Sun 27 Jul 2025 03:00:15 +0000
Manifest this update: Sun 27 Jul 2025 03:00:15 +0000
Manifest next update: Mon 28 Jul 2025 03:00:15 +0000
Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: eE/NMj9MOcyuRo4D9cA5GDsuzZnN4GU9PDaE2askm6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e9:71:c9:3e:37:29:fc:b6:19:be:ee:3b:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Validity
Not Before: Jul 27 03:00:15 2025 GMT
Not After : Jul 28 03:00:15 2025 GMT
Subject: CN=455ec1aef7eb2c8882401e8532df75a7e476e6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:01:24:ac:19:fd:f2:90:55:a1:d9:6e:7f:
e6:3c:a6:f4:2f:2c:c6:8b:fe:a9:3e:a0:1a:e2:89:
87:8c:83:d6:9b:cf:2d:30:39:65:81:10:4f:b9:17:
b8:ae:61:ce:ba:4b:c4:90:f1:b5:01:cd:f1:0d:ad:
d7:08:c1:43:a9:a0:af:09:60:7c:d0:d6:ac:2f:ad:
e6:ac:7c:f9:cb:0e:74:51:08:a2:53:6a:cb:b5:02:
5e:98:8d:86:d4:81:e8:4b:4a:96:ee:c1:56:fe:bc:
85:f2:6a:69:c7:e6:b6:59:8c:17:81:ac:65:99:b2:
9a:7b:0c:6a:fe:ba:f9:96:18:c3:2c:04:5d:82:56:
9c:b4:16:c8:80:c6:4c:3e:63:d6:2d:84:6e:76:41:
a4:89:f5:c1:ce:47:18:e8:69:42:82:25:ea:85:59:
8f:3d:72:24:ad:c3:67:3d:1f:95:15:26:de:f6:63:
e3:51:d3:80:12:85:7c:50:d3:2a:35:2f:19:b7:f0:
96:c0:46:ae:e1:4a:d3:db:37:f7:40:7b:4e:f7:3e:
dd:8c:40:7d:39:09:3c:85:34:c8:d0:3e:01:68:db:
b8:80:e3:9f:8e:dc:c5:4f:10:80:5b:10:2b:f7:a7:
71:bb:a6:cb:7f:02:c8:5e:40:ec:64:93:4b:a8:70:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5E:C1:AE:F7:EB:2C:88:82:40:1E:85:32:DF:75:A7:E4:76:E6:FB
X509v3 Authority Key Identifier:
keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:20:32:b4:f3:41:99:77:1d:a5:0a:ca:de:23:60:20:1c:31:
bd:f3:c4:f8:2c:29:84:3a:0a:27:af:dd:a5:ff:78:7b:50:d3:
68:d2:80:56:ee:95:f1:a5:8a:40:b6:36:c3:2d:ce:0b:eb:cd:
2c:5e:db:bb:d4:5d:20:db:22:ee:bf:b5:59:ac:86:2b:c3:23:
90:93:1c:84:e2:71:30:6e:0f:e2:1b:2b:2b:d2:f9:0a:44:39:
01:cc:74:03:9d:4a:8c:1b:91:80:d2:92:b4:1e:6b:c0:95:bd:
b0:11:76:3b:85:ab:6b:d8:e2:80:38:1c:b2:bf:f1:d2:3b:58:
80:cb:7b:50:bc:d3:49:6f:34:ce:0b:5c:51:21:09:0c:90:f3:
9f:fe:6d:5c:1b:b3:28:d7:59:46:26:ce:a2:99:c9:dd:15:0a:
31:f3:56:bd:41:cc:2c:04:7d:65:c6:a1:68:35:26:6a:35:db:
97:e2:43:7c:cc:3e:fd:fa:c7:0c:07:3f:89:05:2b:27:e7:14:
0b:74:e3:c5:c5:93:25:2a:c6:d8:99:78:d2:29:c0:a1:b3:3e:
a0:f0:d0:92:27:24:d1:83:1d:50:18:11:63:a9:d3:ad:9e:ad:
e6:08:f8:ab:5e:0b:63:4b:a7:aa:75:55:0e:53:a5:cb:c7:38:
f0:ec:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:51:08 2025 by rpki-client