Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: UwzG/8NQZg9uFFzSQDGVZWicR+dFeELxCSeP5Yflf3w=
Subject key identifier: 49:45:9C:94:D0:B6:E5:A3:39:E4:59:C1:94:E4:83:0B:BE:E9:E2:51
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 01993236A01770813F85B294C4A9DBE7B375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 05C5
Signing time: Wed 10 Sep 2025 06:01:04 +0000
Manifest this update: Wed 10 Sep 2025 06:01:04 +0000
Manifest next update: Thu 11 Sep 2025 06:01:04 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: 9fEYQ76TrM3nk2H94FCRZf5AUcw+Or8M46qDpbBZr78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:a0:17:70:81:3f:85:b2:94:c4:a9:db:e7:b3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Sep 10 06:01:04 2025 GMT
Not After : Sep 11 06:01:04 2025 GMT
Subject: CN=49459c94d0b6e5a339e459c194e4830bbee9e251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:33:3d:65:c7:1c:c7:42:5d:d9:4f:ec:50:
ec:3e:a0:bb:9c:b4:c5:55:75:fb:72:7e:24:54:44:
05:fd:19:92:7e:89:8b:de:cc:4c:3f:75:8b:b8:ea:
cd:62:61:b5:a6:68:14:47:a4:98:95:7a:27:ae:9f:
19:a9:42:db:a8:a9:b3:51:92:51:67:16:1b:ee:4b:
93:85:3b:d3:39:04:39:fb:21:ce:2a:38:ef:55:39:
dc:4e:e0:9c:7f:59:e4:62:52:3a:7c:d3:af:f3:23:
5a:79:70:19:ed:50:01:96:72:28:77:ec:3d:a1:14:
2d:6a:2a:63:a4:e8:28:53:99:57:7d:c3:61:20:1c:
b9:42:a6:98:57:8c:76:0c:3b:0b:79:12:2d:8e:2a:
48:0a:1e:cb:f5:75:9f:01:cd:b5:da:73:33:39:be:
3a:6f:1a:4d:05:f2:72:b9:2c:ac:37:74:16:69:50:
91:8a:30:56:77:91:4b:da:2f:09:3d:cc:29:a3:1b:
eb:02:ec:5a:8e:61:61:36:d3:71:52:44:bb:85:46:
bb:47:a9:7e:ba:ee:b8:d5:3d:7e:f5:ff:a5:56:8a:
f2:b6:7d:ac:07:59:c6:40:0f:ff:8c:4f:d4:ce:99:
bb:ef:6d:d4:bc:db:f9:f3:41:dc:b9:ba:9c:55:2f:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:9C:94:D0:B6:E5:A3:39:E4:59:C1:94:E4:83:0B:BE:E9:E2:51
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:46:7c:35:cf:67:d2:01:fa:40:fa:22:88:b0:e6:30:13:17:
d4:14:d1:1c:b2:dc:1e:91:98:02:3a:2d:8d:2b:d4:a8:b3:2b:
1b:be:cf:26:ac:5f:80:ea:6a:4f:f4:44:79:6a:8e:31:88:01:
b2:f9:64:2e:93:47:e0:a3:6b:f0:89:1a:d1:46:b9:42:18:f1:
6f:9e:13:15:2d:6a:b9:9e:d2:5a:e6:ca:76:49:94:69:0e:19:
72:26:a0:7e:f5:29:6b:ba:ca:9c:24:c6:67:b0:1b:52:e5:ad:
67:e5:bf:75:fc:19:ba:1b:43:92:88:a6:27:b2:fc:cd:fc:12:
d6:40:05:21:22:55:46:3f:87:ac:8e:f8:82:13:36:2b:87:bd:
4d:d3:d3:2d:7e:29:1c:46:06:e7:b9:34:82:f8:d7:5b:4e:f9:
62:ec:61:37:ad:45:6e:b0:a6:d0:14:5b:5b:8f:44:97:02:9e:
a5:56:59:39:e1:89:89:b1:6a:93:44:97:27:a6:fc:32:cd:8a:
32:74:0f:06:34:fb:fc:d0:4f:34:03:13:60:b5:4a:66:e1:34:
ee:5a:91:07:0a:93:11:18:df:cc:fb:38:c8:71:02:b9:01:60:
63:aa:b2:2e:cd:8e:00:9e:ec:6c:01:08:18:13:16:67:94:9f:
b9:96:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:11:08 2025 by rpki-client