Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
File: rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft (raw, json)
Hash identifier: W4F0bga55CANy8LPAeis8YYZpBE8lhypQzZUxdyFwqw=
Subject key identifier: 6A:2F:94:0F:2F:5D:C3:65:DA:44:2B:10:99:B6:6A:D3:33:96:69:EB
Authority key identifier: AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
Certificate issuer: /CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Certificate serial: 01989336C1F4F2BA116F4E4BF837674ED0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
Manifest number: 0A36
Signing time: Sun 10 Aug 2025 09:01:35 +0000
Manifest this update: Sun 10 Aug 2025 09:01:35 +0000
Manifest next update: Mon 11 Aug 2025 09:01:35 +0000
Files and hashes: 1: QsrgGtjjVfYUdnjVBy3FKVxOReM.roa (hash: /bct/glFTr5+fLpXRU1WLa/LnjLyQigL1zGVjyxrPQI=)
2: rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl (hash: OA8MLw8BJIv/A+vF9H8zdL3X6Tuipwln8dNd7gcMWmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:c1:f4:f2:ba:11:6f:4e:4b:f8:37:67:4e:d0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Validity
Not Before: Aug 10 09:01:35 2025 GMT
Not After : Aug 11 09:01:35 2025 GMT
Subject: CN=6a2f940f2f5dc365da442b1099b66ad3339669eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:d0:52:57:85:66:fa:94:53:df:ef:6a:a7:
22:2d:84:6f:68:60:ba:db:f0:a9:4b:fc:a9:65:65:
be:f6:00:19:aa:6e:c3:2d:36:28:ec:a5:51:58:9d:
3c:40:e4:2a:4f:46:e7:bc:97:d7:2e:86:d1:41:67:
d4:7b:35:36:8f:c1:8b:52:a2:bb:7a:d6:ca:f8:30:
8f:30:11:d2:79:f4:4c:a9:88:19:c1:5b:2a:a2:f0:
1c:45:41:9f:48:11:3a:71:1c:e2:9f:a6:c7:93:6b:
dd:30:af:bd:3c:63:2f:6b:26:27:67:ac:98:91:b6:
c8:27:ef:cf:ee:76:ac:cb:ec:1c:da:da:94:b8:4f:
de:72:9a:fe:de:da:70:11:00:08:9a:dd:f4:ee:55:
16:82:5f:a2:dd:d3:75:b5:4e:63:eb:fe:9d:a0:0c:
45:8f:7e:3a:3e:2b:ed:a4:57:8e:b0:e2:89:47:00:
bd:fc:32:a3:7e:3e:0a:d9:9c:d7:09:7b:39:c8:4e:
25:f3:0c:47:a7:ed:5d:36:da:0a:ea:58:ad:46:1f:
ed:9a:db:0b:46:f6:ed:83:25:66:cc:59:9a:9d:6b:
5b:19:6a:6f:52:12:86:34:39:e6:1c:5c:02:36:37:
d2:90:51:fa:1f:a4:21:63:9c:03:44:7d:6b:54:d0:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:94:0F:2F:5D:C3:65:DA:44:2B:10:99:B6:6A:D3:33:96:69:EB
X509v3 Authority Key Identifier:
keyid:AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:61:65:24:fa:00:f5:c0:e4:33:29:75:8b:f4:51:f9:98:d3:
37:cb:7a:c5:6d:26:54:da:0d:4e:d8:58:d2:f4:df:4b:54:38:
09:95:4c:97:7f:29:cc:01:5b:02:c6:0e:d0:e0:6d:16:62:a2:
ed:8d:fe:4d:50:e8:59:db:7f:3a:17:45:c5:0a:0d:4e:16:3c:
1c:57:6e:3d:56:e9:79:f4:22:9f:3e:bd:75:0d:64:27:3b:bb:
b1:d6:13:94:c4:3b:52:a6:58:02:65:b7:20:50:9f:e5:21:cf:
6d:b5:68:22:ae:61:06:8c:e9:a8:44:bc:7d:9d:4e:5d:7a:18:
b0:d4:a3:d8:cc:d8:df:51:70:f2:d3:46:f0:13:ca:79:8c:8f:
f8:a5:76:67:49:c8:3d:93:31:f5:e1:4c:44:d2:bb:7f:6d:c7:
f9:b1:28:3b:35:7c:55:30:79:4a:3a:ab:e0:9c:55:bc:69:5d:
75:ed:c0:f8:5d:3a:16:b0:08:e8:24:54:5b:2f:e1:35:a8:e4:
09:31:07:b6:77:cc:e3:bc:6a:4d:9c:09:f4:fb:26:9d:b7:12:
e8:c5:89:de:01:d9:38:37:35:f2:b1:db:f0:2c:ae:57:d4:0c:
61:6a:57:02:9c:37:54:3a:6b:79:dd:ca:17:a8:c6:18:38:c8:
ed:9d:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:32 2025 by rpki-client