Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: d/U1U+C1PX80mKBbVnjxHoolawfPfgBpHv/Ew6WopwA=
Subject key identifier: 72:95:B5:89:86:B4:6F:EB:C4:22:60:25:F1:E4:1B:5B:5D:9B:CE:C0
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 019921B0E1F9CC2A7E4902FE963F93899A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0D2A
Signing time: Sun 07 Sep 2025 01:01:04 +0000
Manifest this update: Sun 07 Sep 2025 01:01:04 +0000
Manifest next update: Mon 08 Sep 2025 01:01:04 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: WxNj7iQt30AnVcCvuTPfrtNzRYSDS++cY9bs7FzoNpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:e1:f9:cc:2a:7e:49:02:fe:96:3f:93:89:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Sep 7 01:01:04 2025 GMT
Not After : Sep 8 01:01:04 2025 GMT
Subject: CN=7295b58986b46febc4226025f1e41b5b5d9bcec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:09:26:80:ff:79:ec:59:a7:2c:93:f0:28:
83:55:e6:57:9a:45:c1:a3:3d:b0:8e:19:2d:8b:d7:
60:2a:b3:7b:e3:6d:0a:55:7d:e2:1a:4d:0c:b0:34:
f4:6a:ee:e0:4b:07:ce:59:02:83:a4:ae:6d:63:59:
ee:22:80:83:f1:49:3f:b5:9f:e1:84:c7:9a:c2:99:
ed:0b:a3:05:b6:34:d5:86:68:b8:84:ba:e3:53:32:
a8:9b:17:19:48:0d:38:f8:a9:9f:4e:f4:e6:af:52:
e7:64:04:f4:00:5c:c4:ed:a9:fb:1f:67:6e:f2:24:
f6:37:b4:a5:ac:77:b0:0e:07:6d:e8:e6:a6:f2:6f:
12:5e:36:f9:70:75:e6:51:e9:d5:f2:c7:98:5d:ad:
fe:8f:07:b9:d1:34:11:49:75:0f:ab:07:33:b6:d3:
80:02:fa:cb:47:26:da:bb:f5:2d:64:4e:04:98:a1:
a4:93:76:7c:14:a7:16:7c:35:4a:6e:8f:7d:ae:25:
e8:b2:cf:c7:e4:a5:83:ac:88:40:ee:6e:69:7b:3c:
f1:57:35:7c:d3:30:07:f0:2e:57:25:2c:07:cf:97:
70:24:d3:ba:5a:54:67:0a:2d:87:70:50:2d:b0:c5:
d8:1b:13:ef:6c:74:88:87:1c:cf:33:42:4c:a5:92:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:95:B5:89:86:B4:6F:EB:C4:22:60:25:F1:E4:1B:5B:5D:9B:CE:C0
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bb:b3:f2:e1:06:79:1e:85:ff:94:d2:b3:9c:2c:52:fe:19:
d5:e8:b7:bb:7b:82:33:86:91:c2:00:aa:74:3f:9f:30:35:90:
e3:3c:9e:26:67:5c:a2:d3:46:c5:cf:12:2f:42:8a:b1:eb:48:
96:88:50:04:41:9b:57:b2:4c:ab:22:11:ea:4c:94:81:5e:76:
74:5e:ab:3a:6a:1f:95:53:db:91:c9:26:97:d6:79:75:53:7f:
d8:d7:3c:d1:47:e2:28:bd:3d:ca:33:31:c2:fa:2a:b5:6b:34:
69:25:e2:d6:4d:f2:31:a2:81:9a:3d:3e:78:ca:4c:67:b8:39:
af:2a:4e:09:74:22:bb:4b:1d:bd:f4:ae:1d:7f:30:9b:f2:e9:
18:34:21:52:8c:35:55:16:c6:b1:7a:2d:af:af:a8:1f:99:df:
64:8a:70:89:e2:a7:4a:11:2e:18:fa:98:28:d2:df:e9:d2:a7:
d9:26:47:49:23:b0:66:34:3c:7c:60:51:77:1b:32:eb:14:4a:
44:bb:85:9b:b9:2a:f8:b2:ef:75:1b:81:43:78:dd:3f:40:ea:
4b:d7:1d:4c:87:b2:ac:8f:49:d9:0c:f3:68:95:30:48:25:a0:
d3:bb:4c:54:30:57:d0:f0:eb:bc:d1:b8:05:bf:b6:56:86:1a:
e0:07:2b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsOH5zCp+SQL+lj+TiZqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjJiYjNlOWQzNWI1YWY5ZGNhMDhlYTdjY2VmZjQzNTE5
YTRhNmEwHhcNMjUwOTA3MDEwMTA0WhcNMjUwOTA4MDEwMTA0WjAzMTEwLwYDVQQD
Eyg3Mjk1YjU4OTg2YjQ2ZmViYzQyMjYwMjVmMWU0MWI1YjVkOWJjZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHUJJoD/eexZpyyT8CiDVeZXmkXB
oz2wjhkti9dgKrN7420KVX3iGk0MsDT0au7gSwfOWQKDpK5tY1nuIoCD8Uk/tZ/h
hMeawpntC6MFtjTVhmi4hLrjUzKomxcZSA04+KmfTvTmr1LnZAT0AFzE7an7H2du
8iT2N7SlrHewDgdt6Oam8m8SXjb5cHXmUenV8seYXa3+jwe50TQRSXUPqwczttOA
AvrLRybau/UtZE4EmKGkk3Z8FKcWfDVKbo99riXoss/H5KWDrIhA7m5pezzxVzV8
0zAH8C5XJSwHz5dwJNO6WlRnCi2HcFAtsMXYGxPvbHSIhxzPM0JMpZJaBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKVtYmGtG/rxCJgJfHkG1tdm87AMB8GA1UdIwQY
MBaAFGliuz6dNbWvncoI6nzO/0NRmkpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYt
NTEzNmYyNjIyNjQxLzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYtNTEzNmYyNjIyNjQx
LzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABruz8uEG
eR6F/5TSs5wsUv4Z1ei3u3uCM4aRwgCqdD+fMDWQ4zyeJmdcotNGxc8SL0KKsetI
lohQBEGbV7JMqyIR6kyUgV52dF6rOmoflVPbkckml9Z5dVN/2Nc80UfiKL09yjMx
wvoqtWs0aSXi1k3yMaKBmj0+eMpMZ7g5rypOCXQiu0sdvfSuHX8wm/LpGDQhUow1
VRbGsXotr6+oH5nfZIpwieKnShEuGPqYKNLf6dKn2SZHSSOwZjQ8fGBRdxsy6xRK
RLuFm7kq+LLvdRuBQ3jdP0DqS9cdTIeyrI9J2QzzaJUwSCWg07tMVDBX0PDrvNG4
Bb+2VoYa4Acrug==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:05 2025 by rpki-client