Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: OMfOf2t8jVdG+ivgZR/TVgzvwGwq4hqw6xZeT3qixrA=
Subject key identifier: D1:03:05:38:BF:36:77:4D:F3:91:CA:F0:5A:06:EB:65:28:46:B9:5C
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 019923A02CE929E90A0DABA2FD5BB5F50CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 0A13
Signing time: Sun 07 Sep 2025 10:02:03 +0000
Manifest this update: Sun 07 Sep 2025 10:02:03 +0000
Manifest next update: Mon 08 Sep 2025 10:02:03 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: aYo7sSRYQJG5gUjKQyFzOhdTOjP4QmbywCCP8T6HZLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:2c:e9:29:e9:0a:0d:ab:a2:fd:5b:b5:f5:0c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Sep 7 10:02:03 2025 GMT
Not After : Sep 8 10:02:03 2025 GMT
Subject: CN=d1030538bf36774df391caf05a06eb652846b95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:51:52:34:ba:5a:a3:60:e8:a0:72:90:d5:
e2:62:d8:13:c4:d3:10:e0:58:8c:c8:87:29:7b:58:
1b:7a:06:1f:e8:a3:2c:fa:12:26:60:0b:da:4a:14:
22:b6:28:ee:e8:46:5c:75:84:c3:bc:7c:58:90:5b:
5a:b8:8d:a3:d4:0f:7d:26:4e:4d:71:17:63:34:bf:
90:06:1f:47:f9:e6:0a:20:86:3c:d5:77:e7:14:6a:
21:fb:17:d4:db:fe:eb:6c:bc:3d:3d:ff:8c:c3:c5:
9d:b3:76:15:51:f1:5c:51:a1:ab:61:ad:aa:37:ed:
d2:90:a0:4c:3c:91:96:29:28:b6:ac:1e:ef:1a:1e:
36:8e:d4:1c:ea:a4:c0:ad:c6:bb:79:c4:62:cf:3f:
f3:5e:27:c4:24:cd:ef:7e:05:20:60:a9:af:5c:42:
a1:bd:cf:f1:a3:82:9c:c0:37:9f:82:29:40:10:cc:
ef:a2:f4:1c:a5:73:a0:3d:74:54:d1:78:86:fb:f8:
70:2a:1a:15:cd:8e:cd:58:85:29:f7:62:32:e0:2d:
74:56:5e:18:5c:b6:9d:3c:81:b9:43:9a:bc:04:fd:
90:ce:db:75:ea:3f:62:90:c0:37:31:61:b1:b2:c7:
4d:d6:39:80:01:ac:2c:59:e6:8e:c9:b9:f1:f1:ef:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:05:38:BF:36:77:4D:F3:91:CA:F0:5A:06:EB:65:28:46:B9:5C
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fb:00:cc:e4:81:c6:58:8f:1f:3c:ca:3a:22:13:91:9e:57:
0e:59:bf:40:c5:b4:09:bd:bf:c7:11:19:b0:fa:e4:2b:45:a8:
43:1b:6b:bf:73:58:2a:4c:a7:a2:29:dc:b1:e3:51:1f:51:3b:
9a:0c:54:6c:f4:cf:77:28:8f:9c:39:73:7d:f7:13:be:57:d4:
4c:18:85:e2:e9:85:c2:4b:d3:fe:98:d7:9c:95:d4:41:9d:d4:
8e:f4:07:00:f6:0f:99:44:76:78:a2:b2:c9:df:39:05:f6:6d:
4c:c1:fb:cb:6d:5e:2c:3c:95:71:77:80:57:51:82:eb:68:b5:
43:4b:bc:cf:e3:da:3d:3b:1f:f7:71:c8:5f:f4:93:8a:a8:5d:
0d:2b:94:0c:58:5e:fc:79:42:12:f8:1d:85:03:f7:af:27:99:
b6:28:9b:cf:03:01:85:33:b8:4e:a7:a9:a1:ff:7a:9c:b9:1e:
fc:09:8c:7a:cd:5f:15:2c:27:c1:34:f6:cc:82:da:06:0e:b1:
6e:bf:00:f1:4e:39:c9:5d:01:14:ae:d7:2b:f1:8c:e5:3c:a9:
5f:97:9e:95:8f:f2:d7:b0:80:dc:93:d1:a4:63:d2:c4:55:83:
78:e6:5b:54:27:c9:fa:33:62:88:c3:c2:42:6e:b3:43:dc:ee:
46:b3:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:16 2025 by rpki-client