Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
File: aomTYnatLRhxB9-3QAeTADrBSac.mft (raw, json)
Hash identifier: tUEAzoQPQ6STpQC4D+q1yE8Z6ybebwjF02woycw6vnQ=
Subject key identifier: EB:CF:E6:63:D9:71:8B:95:B7:9C:24:C6:20:89:60:0B:1B:63:18:32
Authority key identifier: 6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
Certificate issuer: /CN=6a89936276ad2d187107dfb7400793003ac149a7
Certificate serial: 019848C06BB0E22C09A9CE37BDAC39225071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
Manifest number: 158F
Signing time: Sat 26 Jul 2025 22:00:26 +0000
Manifest this update: Sat 26 Jul 2025 22:00:26 +0000
Manifest next update: Sun 27 Jul 2025 22:00:26 +0000
Files and hashes: 1: aomTYnatLRhxB9-3QAeTADrBSac.crl (hash: C9YCGue3TAQI7+VEWnBEHvrTVeFiEslvt72jqmXrL+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:6b:b0:e2:2c:09:a9:ce:37:bd:ac:39:22:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89936276ad2d187107dfb7400793003ac149a7
Validity
Not Before: Jul 26 22:00:26 2025 GMT
Not After : Jul 27 22:00:26 2025 GMT
Subject: CN=ebcfe663d9718b95b79c24c62089600b1b631832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:1f:32:4c:8f:dd:3e:b9:ef:c0:78:8d:6c:
e4:64:80:36:77:01:a8:fd:8d:83:ea:fe:cf:87:a7:
5c:53:59:0c:14:02:ab:19:69:2a:49:2d:6f:b4:d6:
54:81:5c:9d:35:cb:37:ef:7b:72:7e:79:6a:77:a0:
71:08:d4:d2:2a:b5:3c:26:5d:83:62:9c:70:d0:a4:
43:e2:a5:36:cc:bc:e8:1d:50:61:e2:87:a7:bc:d2:
a7:ff:6c:97:54:c4:47:b1:cc:8a:4f:c1:a6:c3:af:
af:05:99:a6:d6:7c:a2:77:1c:ae:9c:f8:c2:fa:fd:
a1:bd:0f:0c:24:da:35:28:f0:d1:66:f0:f5:24:2a:
3e:1b:c0:bc:0c:16:54:5d:b3:f3:5e:f0:43:4f:7e:
a0:ff:e0:04:29:91:c1:26:87:40:9c:8f:2f:05:5f:
6b:4f:78:80:25:e8:09:bd:bf:5d:66:6a:6a:3f:3a:
15:41:56:60:50:0b:ac:aa:0d:97:e1:27:a9:25:30:
d4:b8:25:b7:f9:3f:73:4f:ac:18:e0:4a:27:2c:6e:
5d:7e:d4:42:56:cb:bb:db:4d:05:17:ea:f2:4a:ae:
f4:1c:c9:d0:0d:fb:3b:bb:06:b0:d0:53:61:1a:86:
a3:cb:46:52:40:70:00:d0:01:1f:ef:7f:79:65:84:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:E6:63:D9:71:8B:95:B7:9C:24:C6:20:89:60:0B:1B:63:18:32
X509v3 Authority Key Identifier:
keyid:6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:22:3e:75:cc:d9:3d:6b:a3:a8:30:fe:b3:b3:bf:ec:fd:32:
e7:7a:c9:e4:07:51:8c:59:cf:07:fa:c5:1c:2a:26:f6:48:a5:
c3:b2:d4:e3:77:6e:36:1b:3b:cf:88:c5:bf:5f:05:bf:fc:19:
71:70:28:28:99:90:f5:28:f6:0c:a4:5e:ae:a1:8a:28:04:71:
8c:73:af:2d:67:a7:b5:54:3b:12:1c:ff:2e:25:29:4e:1e:f0:
22:f1:07:be:02:e3:a8:0c:59:79:14:d8:33:7c:9e:b7:cc:1a:
d4:6d:8a:e1:b7:cf:a2:dc:a6:95:84:b8:f0:b2:13:86:b1:2a:
d9:04:9b:87:38:74:cd:2c:fe:8e:b4:c5:be:3f:ae:cc:8c:bb:
1f:35:e7:de:9f:0f:9c:a5:4c:b5:13:6f:14:a1:b1:5d:c3:47:
de:12:4c:37:37:9f:36:8f:5d:68:90:fd:ee:e9:09:20:a5:80:
3a:98:c9:00:20:04:e4:11:78:f8:13:07:a8:58:54:42:8b:23:
12:4f:49:6f:27:12:30:b4:07:56:af:cb:27:25:de:61:f3:a3:
a2:cf:19:bb:74:02:f8:44:ec:58:95:46:89:e3:fe:d9:06:9d:
04:38:a9:14:0c:dc:ec:44:bc:92:d4:92:7d:da:70:10:1a:d8:
60:8a:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:13:10 2025 by rpki-client