Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
File: aXE7HKgNhb8WGCF_qS29R6NcW44.mft (raw, json)
Hash identifier: iUAkDhv8aU+DOrvq3iOOKLak+479z3ZNjuFLYUeg4YM=
Subject key identifier: CA:30:EF:1C:9D:9C:05:59:72:99:DB:87:C4:75:9E:F3:4A:66:89:57
Authority key identifier: 69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
Certificate issuer: /CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Certificate serial: 019923A0CC96507C012E0A44EEB69DACAFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
Manifest number: 012B
Signing time: Sun 07 Sep 2025 10:02:44 +0000
Manifest this update: Sun 07 Sep 2025 10:02:44 +0000
Manifest next update: Mon 08 Sep 2025 10:02:44 +0000
Files and hashes: 1: aXE7HKgNhb8WGCF_qS29R6NcW44.crl (hash: vrDpCuF2pf3zunpsKvdaT/l5oyP7X806w+04Goag5KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:cc:96:50:7c:01:2e:0a:44:ee:b6:9d:ac:af:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Validity
Not Before: Sep 7 10:02:44 2025 GMT
Not After : Sep 8 10:02:44 2025 GMT
Subject: CN=ca30ef1c9d9c05597299db87c4759ef34a668957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:df:cd:98:fa:f6:d1:58:34:c2:b6:2f:38:
94:63:39:1d:a2:15:ff:cb:16:3e:59:9e:02:e7:3a:
7e:04:35:30:aa:81:50:37:b3:47:12:61:70:4c:0f:
70:89:7c:62:27:a6:eb:28:be:08:c8:23:1f:52:76:
a0:ef:6b:b0:22:ac:b6:ea:c9:01:f7:30:c0:ac:b3:
52:4a:b2:23:5e:61:d6:5e:d6:55:1d:3d:1b:05:df:
bb:30:cb:b7:fb:a6:a8:c2:aa:fe:f2:82:1e:cb:26:
1b:9d:43:eb:32:94:5a:08:fe:ec:82:af:63:1c:b1:
4b:a7:6b:34:22:94:63:71:7f:99:95:51:d2:83:c6:
8c:5b:00:ff:a4:70:23:64:e0:ea:bb:45:b6:18:1c:
3a:2d:cf:8d:77:38:bc:66:7f:c1:d0:ec:e7:c9:f9:
3f:80:50:14:51:8a:51:dd:e8:42:09:6e:6d:e5:9e:
99:99:23:a6:92:f1:c2:2d:0d:0d:7f:bc:72:3c:e2:
35:9c:a2:47:81:cc:16:25:67:18:29:64:94:72:24:
82:d6:cb:6d:ff:b5:08:3d:02:6e:c2:85:3c:25:66:
2c:0a:79:19:0c:f6:69:1a:42:02:94:30:91:f0:dc:
4b:21:04:96:e3:c5:2c:39:b3:41:8f:49:fe:0d:84:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:30:EF:1C:9D:9C:05:59:72:99:DB:87:C4:75:9E:F3:4A:66:89:57
X509v3 Authority Key Identifier:
keyid:69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:93:e2:56:25:d1:6a:1b:98:e7:b2:59:70:a4:c8:53:84:f4:
59:09:6d:9e:e9:34:ce:4d:bc:5c:1d:a6:dd:29:a9:f7:9e:a9:
ab:de:24:6f:b0:af:7e:f5:10:ab:29:93:f4:c1:22:3c:21:eb:
f8:ce:15:0c:bc:7b:82:d6:26:53:b8:87:f1:c7:54:16:d9:c4:
8a:30:8b:4f:89:ff:4d:dd:f9:16:32:0d:6b:a6:47:1a:9c:13:
40:b6:cb:39:31:48:e9:26:49:a8:27:e0:e8:4a:12:c9:75:ab:
58:62:5c:7b:dc:50:03:49:7c:ac:b6:67:5a:cc:ec:01:5c:bf:
5a:ec:3e:85:09:d0:ee:7a:49:52:52:65:0f:74:9e:56:4a:4c:
51:e7:69:c6:01:f3:e2:d5:a0:8e:d7:0c:8b:a6:42:8a:a1:f2:
40:28:84:52:8d:e7:6b:d6:47:e6:68:81:91:44:8a:12:c6:fe:
36:8a:6e:a5:3a:db:4a:c6:ee:e2:72:f9:0e:7e:49:88:8a:a6:
ff:22:8d:25:c6:96:3f:a4:36:a0:bc:19:de:49:b3:4d:7e:8b:
0d:6f:aa:cb:0e:3e:5e:97:cf:86:61:a0:68:4e:96:79:f9:81:
b4:6d:c1:30:e0:14:5c:7e:be:14:13:72:a6:28:05:fc:5b:e4:
65:7d:15:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:31 2025 by rpki-client