Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json)
Hash identifier: zk0yh/Hnu1ZvbKRJEyirpmWNdMH3zoBkNYEsb17jC9E=
Subject key identifier: C4:89:53:FF:EF:D4:4A:52:68:1E:8C:DF:F4:3E:C3:56:3E:E7:07:85
Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084
Certificate serial: 0199356EDEB4723ABDCEB50A16F7CF380EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
Manifest number: 04FD
Signing time: Wed 10 Sep 2025 21:01:22 +0000
Manifest this update: Wed 10 Sep 2025 21:01:22 +0000
Manifest next update: Thu 11 Sep 2025 21:01:22 +0000
Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: k18BJkQx4SOXbR9kumnKfxBOYPMZxkuLN3ffju7S7T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:de:b4:72:3a:bd:ce:b5:0a:16:f7:cf:38:0e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084
Validity
Not Before: Sep 10 21:01:22 2025 GMT
Not After : Sep 11 21:01:22 2025 GMT
Subject: CN=c48953ffefd44a52681e8cdff43ec3563ee70785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:75:de:21:c0:de:60:c9:a0:f9:7a:9d:d6:
ef:d2:a0:70:26:59:33:13:76:bb:88:aa:15:f3:96:
76:d1:6f:5c:20:5a:a5:8a:a9:dd:d5:d1:75:52:b7:
f2:f2:6e:cd:bb:5f:09:c8:e7:a1:5f:76:b9:82:5f:
43:03:d4:78:74:cb:90:65:da:04:2f:fa:dd:86:f4:
24:ca:75:ec:66:e7:b7:74:8a:41:6c:c2:07:34:6d:
ad:8f:dc:eb:b0:19:07:c3:60:69:d5:a3:19:52:4f:
6d:ea:5f:ba:33:b7:56:9e:4a:50:15:c1:cf:ef:69:
62:bf:4e:f6:fb:2b:ab:40:77:95:b7:ec:fe:50:dd:
5b:19:90:dc:be:0c:61:a3:e0:f9:d2:83:db:2e:92:
00:b8:18:2a:a3:bf:1c:ee:8b:fa:f6:24:31:b0:01:
4e:c2:69:f9:87:ba:85:16:aa:f6:b1:99:15:d3:56:
03:9a:3a:9a:25:9c:fa:95:9b:98:d0:dd:95:97:0f:
c1:02:a7:dd:93:b6:8f:ef:0c:89:b5:9e:f5:d8:8c:
74:4b:57:de:f0:e8:36:65:1a:7a:62:ae:c5:c6:13:
f9:1a:6c:ec:f0:0f:fe:b5:86:8d:6f:bf:67:27:f4:
49:34:54:7b:ae:0c:2d:b7:5e:4c:49:7e:49:31:f3:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:53:FF:EF:D4:4A:52:68:1E:8C:DF:F4:3E:C3:56:3E:E7:07:85
X509v3 Authority Key Identifier:
keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:51:b8:cc:81:88:3d:9a:8a:45:65:7e:96:bc:c9:e6:85:dc:
74:13:5f:d2:6b:15:e0:dd:80:20:90:71:19:52:92:66:d6:2d:
e8:01:95:75:75:d4:50:2f:63:b6:69:13:aa:85:ec:f2:a5:67:
a0:bd:73:bf:e9:1e:ec:d9:9c:ca:8b:a5:19:a0:61:cb:a5:2f:
da:da:bc:89:fa:27:d1:bb:2b:d2:1c:3b:24:f3:13:e5:b0:21:
d3:e3:38:ac:bc:71:a1:5f:36:67:f5:65:77:52:c9:e3:ed:b5:
3e:e3:6a:a3:4a:f3:c1:48:59:cc:9a:ed:25:02:fa:26:43:84:
c2:4c:12:f6:82:ac:f9:4e:76:a7:34:9d:cf:97:87:51:f0:f6:
92:c5:ba:3e:85:d5:b7:7f:8e:7d:66:01:4c:35:8c:d1:c5:73:
5e:94:02:e1:81:f5:ba:41:64:2a:64:2d:e2:05:fa:e5:fe:27:
db:be:69:67:10:07:49:21:d6:b6:98:d0:8a:18:b9:e6:f7:56:
fb:1f:0a:ca:95:13:2e:a8:5e:6a:54:83:d8:8a:a0:5e:9c:98:
eb:7f:a3:85:b1:00:5f:6a:d1:78:24:6e:85:d0:90:1b:e6:43:
1b:d5:77:e2:d6:cc:01:0f:98:cb:52:56:a5:10:85:80:d1:15:
6e:06:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:24:14 2025 by rpki-client