Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
File: aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json)
Hash identifier: iozmJqIKnzjyL8MBoQb+Bu9WfQ7sIfMnthFX7/4OK8s=
Subject key identifier: 7B:2C:E5:F4:7A:35:AB:95:65:F8:D4:2E:92:86:E1:BD:2C:AF:8C:72
Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
Certificate issuer: /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Certificate serial: 019A71B7EA8661E69CE5FA6930F5CA84012C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: TnnWfZ8aYPaGfSCEQjm9ioj9ckxqbDP/WTzecpHLaBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ea:86:61:e6:9c:e5:fa:69:30:f5:ca:84:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=7b2ce5f47a35ab9565f8d42e9286e1bd2caf8c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:b0:74:38:11:c1:73:0f:c7:6f:2f:23:d6:
af:26:49:fd:ba:ee:7c:12:78:b3:84:f9:a3:f7:a6:
b3:4d:0a:75:49:66:2d:06:23:87:b7:d9:bf:ac:3e:
e3:14:89:56:a6:2e:1f:d5:07:98:f7:6d:40:1a:16:
f9:c4:e8:6e:ec:42:73:e3:f0:99:ae:e2:a1:9b:fe:
8e:64:86:84:68:d7:2c:d6:df:57:39:df:e8:19:02:
f4:d5:d2:07:c7:e3:93:4a:4a:b6:ff:3b:3d:b9:f9:
74:a2:2a:2e:ba:77:4a:f8:d6:9f:42:2d:12:ce:59:
f9:19:b8:90:c1:ec:d6:21:6d:51:80:b0:c2:c4:b1:
39:df:f3:09:d0:d5:27:40:5b:ec:c7:e2:6c:9d:43:
5a:2b:7e:3e:06:c7:cf:1c:06:be:64:1e:29:77:2b:
76:c1:a7:30:8a:17:1d:3d:1e:92:8a:2e:dd:5c:ff:
31:f2:19:60:82:8d:be:00:61:72:5f:ba:68:32:97:
97:74:c1:d4:4c:39:4a:c8:bc:4f:4a:74:b7:6e:e8:
f6:69:63:f1:cf:00:f8:38:ee:84:3e:aa:ed:d8:08:
f1:3e:42:50:e6:29:84:90:8a:06:64:e9:b8:3a:b5:
c7:f9:88:88:a7:cd:cd:a4:b0:a9:39:98:87:10:dd:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2C:E5:F4:7A:35:AB:95:65:F8:D4:2E:92:86:E1:BD:2C:AF:8C:72
X509v3 Authority Key Identifier:
keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cd:b9:7c:76:31:23:6c:5b:43:56:82:75:71:b7:ea:ed:dc:
b6:47:11:32:ca:e1:69:7f:98:0d:1a:c6:f7:58:28:fd:06:b0:
5f:76:e4:f7:16:a8:16:a6:0d:4c:22:e7:94:63:21:6e:dc:67:
3f:65:60:ea:9c:20:e5:92:ac:0b:32:99:73:b2:63:48:32:21:
fd:72:97:ab:07:b7:69:20:bc:b3:02:8c:9c:e3:36:00:6d:a3:
40:d4:0a:4e:e0:30:f9:f4:f6:ca:62:dd:4c:f9:0c:1f:ef:5d:
79:0c:ec:26:dd:1d:15:aa:13:3b:46:23:a3:30:a2:34:a7:91:
f5:12:32:74:00:4a:d0:cc:bd:cb:d7:cc:41:be:d4:da:f5:a5:
27:8c:9e:6c:2a:d5:3b:06:0f:9f:af:fd:1b:6a:1d:07:56:cb:
70:18:8b:a8:60:ef:78:b6:07:f9:6b:c2:b8:4e:a6:a5:23:d3:
2e:01:2c:6e:8e:c9:f6:1f:6c:96:3d:36:70:ff:8a:e5:1a:42:
c3:ce:73:d6:30:2c:45:20:80:ce:26:28:22:c2:e1:6d:e8:c7:
8e:16:0d:c2:c8:e0:1e:2b:9a:5f:89:a4:3f:3f:06:87:20:5b:
f1:66:0b:82:8a:fb:95:d3:f4:45:e2:a1:23:74:62:65:77:c0:
1c:d8:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:54 2025 by rpki-client