Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
File: aBHhJcs1cHby-jE4yT6aJoGxeJM.mft (raw, json)
Hash identifier: eLVJtZ0l28YODBjLwZUx4ox0fLCRrDQR2/Tp6wp53+s=
Subject key identifier: 8F:56:AA:5D:E8:99:9E:1F:DD:21:AB:3B:23:83:16:18:9C:C5:20:B3
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial: 0199180A5E120F2400C6B847D1A6E9306646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 04:02:36 +0000
Manifest this update: Fri 05 Sep 2025 04:02:36 +0000
Manifest next update: Sat 06 Sep 2025 04:02:36 +0000
Files and hashes: 1: aBHhJcs1cHby-jE4yT6aJoGxeJM.crl (hash: ogvc2wRoeGNc2ZSSEWLdgk0Bd8+X3PyGwFDgrQkMsz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:5e:12:0f:24:00:c6:b8:47:d1:a6:e9:30:66:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Validity
Not Before: Sep 5 04:02:36 2025 GMT
Not After : Sep 6 04:02:36 2025 GMT
Subject: CN=8f56aa5de8999e1fdd21ab3b238316189cc520b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:1f:79:e6:05:5d:23:66:04:b7:c3:b9:53:
9b:2b:c3:5c:20:2a:ef:36:8e:c2:e2:7e:5d:f6:44:
3d:52:c3:cb:75:f0:a1:01:8d:ae:ad:cf:2d:2d:20:
fd:95:8d:a9:30:27:32:65:98:66:4a:75:75:32:76:
25:b4:21:f2:02:c8:6d:b7:71:d6:5a:96:c2:0b:a7:
b5:76:b3:35:f6:30:85:ab:69:46:28:c1:a4:47:ee:
84:00:ab:ce:a1:c4:33:ef:fc:e7:fb:84:c6:d4:58:
1e:51:86:65:c4:6b:5e:1e:aa:c2:b4:8a:5b:77:c1:
3f:71:88:42:7b:0c:12:dd:1e:45:12:e6:25:f4:58:
1e:93:64:cd:2c:7c:fd:d3:8d:1c:b1:de:e2:4b:33:
9a:06:81:8d:75:f7:e4:cb:94:21:64:ce:63:2c:f5:
c7:27:1f:11:ed:34:da:ba:ed:0e:ae:cc:da:ce:d4:
cb:66:23:42:56:54:a5:fe:f8:e9:05:d1:d1:ef:f4:
0a:bc:e3:82:3c:bc:f0:d9:29:8a:60:08:03:0a:4f:
b6:69:2b:31:55:41:70:dd:95:38:eb:f9:8b:f4:a0:
fd:55:de:d2:bd:57:2b:8b:02:23:c0:cd:39:9e:ad:
f1:00:b8:26:c2:68:a9:35:3c:40:cb:0a:b1:43:8b:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:56:AA:5D:E8:99:9E:1F:DD:21:AB:3B:23:83:16:18:9C:C5:20:B3
X509v3 Authority Key Identifier:
keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4a:f5:97:74:e1:56:15:2c:f3:b8:5d:7d:ed:85:8e:37:2d:
0f:ed:04:21:c0:a1:04:81:91:ee:0b:e4:60:54:2c:42:f2:21:
b7:b6:d6:fc:b5:74:60:f0:9c:7b:21:6b:58:99:bb:82:7f:3f:
ae:5a:bb:28:bb:03:72:9b:02:5f:01:37:0c:9c:00:15:8a:6c:
fd:8b:05:56:fb:f2:6e:a2:77:eb:9b:09:3d:f2:08:e2:e1:25:
7d:4e:7b:bd:81:de:b2:98:de:c8:5a:57:4c:17:0d:da:ca:17:
0b:20:51:bc:9a:84:7c:ff:03:b2:6c:2d:b5:3b:48:e6:97:d8:
54:01:65:c8:60:8d:63:07:c2:a9:62:df:f1:95:64:ae:3b:ef:
4b:49:86:0f:5b:15:7d:ee:98:d7:4f:e0:32:8f:6d:06:d0:c7:
38:29:64:fe:a9:d5:f5:47:db:65:1d:65:8c:cc:65:15:cd:85:
e8:4e:82:0d:23:78:e1:3f:9a:00:d4:3f:48:e1:46:54:c1:e0:
6a:63:ee:cd:64:dd:b1:12:c9:55:7c:60:63:6a:a2:48:97:e1:
a5:33:d5:cd:ba:5d:2b:4d:78:90:3d:b0:38:b9:32:0b:a9:ef:
7c:5a:62:8c:6d:4f:eb:9e:df:41:cb:ca:01:c2:40:81:b5:75:
78:21:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:54 2025 by rpki-client