Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: qqxVbdLhZQQBvfMILh65a0bV/DkXz+5PxX0obDyIkw0=
Subject key identifier: 92:89:82:D7:83:7D:2F:EC:BE:EE:E6:A8:97:5F:BE:38:B4:B7:01:DA
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 019A70DC004BB414331BE5171A860ECD8810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 066A
Signing time: Tue 11 Nov 2025 03:00:57 +0000
Manifest this update: Tue 11 Nov 2025 03:00:57 +0000
Manifest next update: Wed 12 Nov 2025 03:00:57 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: W/ppxxSwN0fib27xRXhU8luGFm1980YJYmRGfDDisks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:00:4b:b4:14:33:1b:e5:17:1a:86:0e:cd:88:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Nov 11 03:00:57 2025 GMT
Not After : Nov 12 03:00:57 2025 GMT
Subject: CN=928982d7837d2fecbeeee6a8975fbe38b4b701da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:e3:82:c6:4b:73:fb:d8:31:a8:bf:9c:43:
d9:23:bf:00:28:ee:90:d2:70:e2:d6:14:f3:73:62:
d8:14:da:5e:1e:57:de:28:fa:60:16:05:47:d9:b5:
b4:d6:3c:c6:69:94:f9:71:fd:e9:30:d3:72:8d:85:
56:2c:0e:ef:68:c4:c6:64:53:c8:6d:52:20:61:cb:
45:44:02:aa:a3:d3:54:68:39:19:c9:8a:c6:a7:2b:
fd:1b:2e:9d:a6:2f:15:37:d9:e9:17:a9:91:e0:e6:
c7:a1:b1:62:c5:2e:75:0d:18:bc:73:b4:42:c5:87:
2f:7b:0f:3f:f4:db:79:43:8c:0f:b2:fb:cb:e9:a5:
a1:b0:d0:ec:5a:c7:ef:aa:2b:ae:95:08:48:a5:45:
19:85:d4:71:1e:45:e1:1a:22:67:01:4f:f3:cf:f5:
6b:6e:dc:75:ce:e6:be:e4:89:6e:8c:de:24:1e:3d:
6b:66:9b:74:71:ad:df:26:19:5d:31:57:38:a3:09:
6e:98:5f:7a:3b:a4:e3:3d:56:72:44:c5:26:51:03:
aa:7e:6c:61:56:0a:cd:4f:d1:48:c7:ce:ee:e2:88:
67:b2:7a:ae:36:b7:50:97:24:14:f9:57:74:e4:45:
9f:51:84:29:bb:69:a3:45:8e:1d:3c:55:d4:a0:59:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:82:D7:83:7D:2F:EC:BE:EE:E6:A8:97:5F:BE:38:B4:B7:01:DA
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b6:8e:b1:74:64:56:02:43:7a:cb:bf:66:c1:74:d9:1b:4e:
19:1e:6b:35:97:86:bf:23:4c:43:ab:77:ea:da:80:93:cf:84:
10:a8:15:52:b1:f7:50:18:bf:47:ca:3b:07:88:8a:74:b1:c0:
40:63:52:a7:ad:69:87:39:a5:7c:6c:15:b4:14:88:2e:cc:02:
71:61:0d:18:eb:3d:2f:bf:b8:de:47:7b:e5:d2:f9:a8:4a:15:
e0:29:71:32:be:01:58:00:d6:79:f4:66:e4:f0:57:de:28:8b:
bc:e1:9b:19:be:3b:d2:81:31:48:32:67:ab:ab:e4:a6:ae:c7:
c9:79:11:e5:92:2c:07:75:76:74:7a:9e:e1:bd:18:ff:b7:86:
99:3e:71:82:e9:4e:00:63:0d:a0:24:ca:4b:69:95:5f:25:55:
8f:a7:d9:0a:f6:97:94:c9:8a:f3:d1:7b:42:a2:3a:47:df:9b:
46:17:c0:0c:81:2f:25:7e:27:dc:a2:45:50:fc:65:1b:c5:e9:
64:c7:40:47:82:f3:95:e2:20:67:2e:d1:3f:25:4c:38:99:cb:
9b:ae:65:fb:fb:1d:75:13:3f:84:99:c0:69:04:ad:e7:d8:14:
8f:70:5e:e3:56:e9:be:ed:bf:4d:1c:e2:43:b4:f5:70:f9:55:
f7:6d:ea:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client