Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: xXU5OiAkjraqU+jCdF6PZyICWFzDzMV2OAqQK6HnnMo=
Subject key identifier: D3:66:D5:2C:AE:B4:C0:0D:ED:70:7A:C4:1A:FC:88:C8:8C:A0:73:76
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 01984966AEABF8657E1B83BC93E64A31AD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 0128
Signing time: Sun 27 Jul 2025 01:02:02 +0000
Manifest this update: Sun 27 Jul 2025 01:02:02 +0000
Manifest next update: Mon 28 Jul 2025 01:02:02 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: tfmWEqJ1Vw/6d+MfFnzVEdPXgobzbFzGXy7XgUcodZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:ae:ab:f8:65:7e:1b:83:bc:93:e6:4a:31:ad:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Jul 27 01:02:02 2025 GMT
Not After : Jul 28 01:02:02 2025 GMT
Subject: CN=d366d52caeb4c00ded707ac41afc88c88ca07376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:20:86:94:e2:f6:aa:82:66:b5:cb:5f:0c:
36:77:81:01:aa:ce:db:4f:ff:81:bf:8a:b5:f2:ce:
a6:47:41:c6:04:17:40:2f:59:19:f6:ca:be:33:7f:
e8:18:83:41:39:25:f7:e9:e3:54:b0:72:da:77:ab:
b5:c2:2c:f2:09:07:92:b5:40:d6:b7:b6:3e:38:16:
8b:73:39:af:0b:cd:8e:ad:36:36:f0:dd:82:b9:a1:
a2:96:2a:f8:aa:4f:0c:d5:c3:f8:b4:b5:f7:11:cc:
b4:ad:ad:e9:ad:11:8b:54:7a:a0:ec:3f:38:00:f9:
9b:df:e3:72:37:b8:27:e4:8b:b0:70:63:7e:7d:bb:
a2:af:0f:62:26:d7:75:e5:dd:79:e3:a5:a1:29:40:
92:27:09:3e:6a:19:49:12:cc:7f:19:00:9d:7e:27:
f7:37:86:d3:eb:46:0a:59:a8:a3:c6:a7:2a:c8:17:
44:21:30:b2:96:c8:23:89:14:66:f1:02:48:aa:92:
53:65:e1:66:db:c6:6d:59:4e:8c:01:10:48:f0:49:
55:c4:a9:cd:cd:dc:05:4a:05:a9:64:c7:c5:5e:93:
8b:9a:b3:ea:e9:99:63:50:93:47:c3:91:f2:d0:49:
33:ac:9b:ec:03:b5:27:0b:f0:0c:2b:7d:3e:e4:e2:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:66:D5:2C:AE:B4:C0:0D:ED:70:7A:C4:1A:FC:88:C8:8C:A0:73:76
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:83:9c:05:66:f5:c8:f5:39:92:4d:e0:71:0a:54:2a:96:52:
b4:c7:da:d0:23:1e:1c:35:db:82:d7:9d:ad:4e:e9:d9:b2:c1:
52:49:ba:dd:bb:db:db:22:31:13:8c:36:44:0d:51:f5:07:96:
ba:1c:65:d8:b0:0c:33:fe:ad:8d:94:1e:c2:8e:c5:08:fc:5a:
fe:b9:9c:2a:0f:0d:aa:d2:d0:c1:c8:e5:84:32:8b:8e:fb:a6:
04:27:cf:51:00:43:0a:a1:51:9f:59:1b:28:71:a7:10:e1:b1:
00:e4:59:17:76:66:c6:9c:91:a1:c5:4c:2a:d3:4f:98:63:df:
42:54:4f:28:85:ab:49:12:b9:28:35:ad:d7:6b:a4:4b:5c:b0:
aa:f5:f5:f4:76:96:8b:96:43:4a:14:cc:0a:d4:22:0b:65:44:
91:28:16:bf:d6:f2:b1:cf:93:52:0a:97:ad:ca:d0:72:cc:43:
8a:c5:ee:51:68:7d:27:16:d0:56:a8:ec:a3:a0:ca:6c:06:58:
60:06:c6:e4:74:d8:4b:35:9b:b1:ce:7f:b3:5b:d1:67:1e:41:
c3:cc:eb:d1:3c:2b:4c:2d:f3:55:42:30:60:97:77:37:da:46:
67:2f:aa:22:fd:98:90:d7:6a:90:b7:b1:e1:e6:5a:8a:90:e8:
94:d3:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:29 2025 by rpki-client