Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
File: aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json)
Hash identifier: BYdL5L9SUXBAmMYmg7qxu73kvS3ZpMt2h8emy47hzNw=
Subject key identifier: 08:66:5B:65:B1:4D:31:5B:B5:99:26:6F:EE:9A:01:60:D0:26:C9:4C
Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
Certificate issuer: /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Certificate serial: 019921B20EB0C84C2D99ECFE0E40492131C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:02:21 +0000
Manifest this update: Sun 07 Sep 2025 01:02:21 +0000
Manifest next update: Mon 08 Sep 2025 01:02:21 +0000
Files and hashes: 1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: eZMvekwjd9QldfNaotUIZNLJAkimEqHIDhLk9TfW11s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:0e:b0:c8:4c:2d:99:ec:fe:0e:40:49:21:31:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Validity
Not Before: Sep 7 01:02:21 2025 GMT
Not After : Sep 8 01:02:21 2025 GMT
Subject: CN=08665b65b14d315bb599266fee9a0160d026c94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:c0:02:6b:28:15:4a:1a:18:52:97:48:f3:
14:55:7a:4e:d4:58:2b:01:ed:11:5b:ec:b3:78:fc:
41:fe:a9:2e:1e:9a:b0:f1:07:ee:c2:49:9d:81:86:
dc:1e:c5:e1:aa:e0:23:fb:6d:67:f7:46:d2:5c:b5:
b8:e0:93:ad:9d:17:95:df:3e:6d:cf:7c:e2:5f:ff:
7b:d7:26:c9:ae:46:d3:0b:68:6d:1d:91:3b:72:65:
a3:a8:ad:2e:b9:71:1e:2e:6f:cd:78:29:be:4b:d1:
5a:97:09:91:c4:75:4d:e2:0d:d6:e6:2f:3c:a5:6b:
1e:17:32:e1:66:e1:52:0c:0f:b2:9a:c9:32:89:f9:
c5:9e:9c:8d:f4:97:ae:cb:8b:b8:4e:00:6a:34:6a:
46:a5:74:14:a1:df:e7:44:2e:db:26:4c:86:7f:b0:
51:9b:12:2d:c0:f0:89:3b:6a:e9:8b:a9:77:7a:6d:
4d:b5:d8:c9:00:6b:b8:fb:25:98:0e:64:91:6d:b8:
08:1e:f7:f4:b5:79:ce:a2:14:c3:30:72:6c:c5:8b:
58:4c:d5:a7:78:d0:e3:b5:c0:43:5e:53:45:1b:fd:
ad:df:e6:40:ce:62:da:c4:64:ac:ca:f1:a0:14:fd:
e1:9c:3e:64:06:d7:56:d0:01:93:63:02:99:ad:24:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:5B:65:B1:4D:31:5B:B5:99:26:6F:EE:9A:01:60:D0:26:C9:4C
X509v3 Authority Key Identifier:
keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:40:32:8d:7c:71:db:b0:44:cb:bf:1a:96:10:3c:92:bb:93:
a6:fd:fc:ab:6c:f9:7f:5b:22:fc:2e:4d:7c:54:65:17:39:f7:
f5:c1:4f:38:71:87:4c:4a:af:72:3c:a4:63:09:4b:7a:5e:c9:
61:af:18:51:d5:e9:4a:3b:63:c7:37:3e:72:f9:c6:87:be:0b:
4b:ff:1f:49:84:f1:3c:34:43:7f:63:34:e6:b6:f8:32:ef:ea:
8c:b3:57:7b:87:d2:bd:5e:f8:e2:e7:fd:49:99:be:a4:6c:60:
49:d7:54:c9:4e:ad:e9:68:48:b4:b2:84:98:30:04:02:c4:41:
ea:6a:df:5b:0d:18:09:61:ea:50:14:9e:a8:5a:2b:b2:69:57:
b6:8d:e4:82:3c:c9:ca:7f:ff:1a:f7:64:8f:eb:75:8a:ec:cd:
ae:be:fa:89:ba:d7:77:fd:6f:0b:4e:64:50:b8:22:bd:a5:3c:
2a:2a:fc:e7:44:cb:95:e2:8c:97:4e:62:74:fe:38:eb:13:25:
c6:66:90:81:22:2a:f2:96:99:38:cb:29:40:43:66:62:b4:00:
71:32:59:9e:db:06:40:94:42:00:37:34:40:8d:e7:34:18:7a:
d6:77:17:35:02:f4:10:70:37:b6:94:78:9b:36:df:72:19:5c:
71:02:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:50 2025 by rpki-client