Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: E828sNCfejJKt1+JkzvexJujjN4whWNxYhTbynEa9H0=
Subject key identifier: 4A:A4:61:15:C4:E6:D6:F3:B7:67:7A:AE:E8:42:65:48:91:B8:71:5A
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 019A71B8174FBA5FF52C5AE9CFD3C1EE19A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0DD8
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: +LlKIKGUvi4Ah1BPiNJo+FRp2ad3v74GfyVmObitLIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:17:4f:ba:5f:f5:2c:5a:e9:cf:d3:c1:ee:19:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=4aa46115c4e6d6f3b7677aaee842654891b8715a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:d8:66:10:45:34:e8:e3:97:c3:a4:dd:cf:
f7:e8:97:6d:23:4d:b5:ca:9e:9d:68:70:c8:97:be:
be:81:d9:d6:fc:76:f7:b3:d3:78:22:f1:79:cd:8b:
3d:6a:e9:2f:0d:15:8d:7c:b4:ea:aa:ef:0a:f1:cb:
7d:3d:64:61:71:fc:39:e0:e6:37:33:fc:3d:57:6a:
38:5b:b0:6c:87:c1:f8:29:59:60:f3:f2:32:b4:b7:
49:88:f3:58:27:0d:95:ef:0f:aa:e1:66:80:b9:46:
c7:9f:c3:46:3a:19:2b:f3:6a:a6:fc:dc:ac:a8:56:
8a:93:e2:45:7e:85:89:d9:16:3b:33:dd:4e:f7:f8:
56:a5:77:58:ca:6e:27:0f:9c:2b:b9:59:2d:6b:a8:
a5:59:b8:eb:cf:d8:81:6d:19:24:10:df:df:75:1b:
c2:54:89:5c:4a:33:48:30:83:99:32:0d:85:37:dc:
13:66:cc:e5:b6:c8:49:2b:0f:e9:e8:92:03:1a:5b:
d0:65:cf:9a:fe:37:42:53:f5:a7:43:39:6e:de:d1:
96:21:13:c6:bf:39:70:ae:ab:ef:cb:1c:2d:a9:a7:
7a:4e:80:3d:91:f4:8e:24:6d:9c:a5:06:ed:3f:17:
65:9c:49:a9:e6:4a:04:bf:de:c4:b0:0e:2a:30:e6:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:61:15:C4:E6:D6:F3:B7:67:7A:AE:E8:42:65:48:91:B8:71:5A
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d6:f7:07:bf:84:de:5d:e4:3b:df:b1:4d:de:fa:94:1d:af:
27:8f:5b:4c:e1:a1:f1:c1:35:86:38:ad:38:96:20:02:64:66:
fc:23:57:ab:94:6e:59:37:2d:1b:aa:12:b3:ff:c6:1f:6c:ca:
49:ae:4e:7a:7b:e5:f7:d3:bb:44:2e:d0:18:95:0b:67:39:89:
36:26:d1:38:f9:58:d3:b9:50:0f:16:dd:a4:ef:ef:8d:bf:05:
41:4c:0f:d3:ea:df:fe:7f:81:28:6a:63:5d:c6:97:0b:9a:3a:
c2:ef:c9:4a:bc:87:68:66:d6:60:ba:0f:4c:17:6e:7f:0e:30:
a5:26:af:7c:d5:70:b3:48:8f:e1:cc:03:a0:73:97:bf:98:00:
06:67:fa:98:fd:4c:f7:3f:42:a0:23:df:15:a7:28:19:fb:56:
73:21:85:2d:5d:ed:5a:b0:1d:eb:5b:15:d4:26:84:5e:c2:80:
28:03:04:27:89:0e:9f:05:e9:02:cb:71:fd:ce:4f:96:1f:29:
3b:44:de:79:91:8c:6f:ad:3d:ea:c8:cf:1e:ed:d8:85:9a:5d:
6b:fb:7f:9d:d7:7d:09:1e:00:85:f7:09:bc:38:10:75:4e:37:
49:59:bc:31:b1:b0:e3:17:4c:b7:db:b0:95:9a:85:c5:b8:97:
d8:a6:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:02 2025 by rpki-client