Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json)
Hash identifier: CW8vgnt93sMe/NjDmTdnORMF/XNlbHPN3C0bjv2GanQ=
Subject key identifier: 8B:1E:B6:87:0E:DC:5F:00:9E:65:20:F3:C9:FD:4A:2C:17:52:7C:D5
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 019873E269DA5F1AC06D0283DDEF1B550E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
Manifest number: 09B8
Signing time: Mon 04 Aug 2025 07:01:14 +0000
Manifest this update: Mon 04 Aug 2025 07:01:14 +0000
Manifest next update: Tue 05 Aug 2025 07:01:14 +0000
Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: AO32bPLCoClugeBca8BoUzYt7brXLhc9PSnOyCHfVDo=)
2: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (hash: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:69:da:5f:1a:c0:6d:02:83:dd:ef:1b:55:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: Aug 4 07:01:14 2025 GMT
Not After : Aug 5 07:01:14 2025 GMT
Subject: CN=8b1eb6870edc5f009e6520f3c9fd4a2c17527cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:73:da:95:cc:ca:6b:0f:3a:52:bd:02:a4:
72:cf:47:d9:8d:51:7d:79:81:fc:bc:81:3b:79:a7:
eb:a9:06:16:9a:5d:3d:a6:cb:b4:e4:c1:b4:e4:c1:
77:d5:59:f0:76:f7:cb:43:8d:d7:61:04:b0:68:65:
c4:74:55:52:05:bf:27:86:2f:17:4a:28:37:fe:80:
ad:21:18:a3:39:fa:63:5c:ff:80:1b:97:93:55:c5:
c8:c7:e4:25:52:c8:80:8a:bc:42:48:59:b7:49:0b:
8a:69:f4:f6:24:fc:92:fa:8b:26:92:2e:34:1f:1d:
5a:98:30:56:04:90:02:f6:14:e7:ae:cb:0f:b1:b8:
c1:39:ed:72:75:7c:2f:1e:c1:50:3f:9f:0c:f6:c1:
6a:8e:35:1a:e6:f4:82:cf:6b:72:37:11:2c:7e:6f:
30:59:ea:2a:75:0a:79:eb:41:5e:b7:76:d4:39:07:
87:d4:2c:13:6f:f3:5c:50:f6:87:86:b7:0f:1a:4a:
76:3d:42:83:c5:5d:d9:db:2a:f7:c0:9a:55:a9:e9:
40:b9:51:a9:b3:c8:4d:37:88:17:f1:6b:41:fe:74:
1e:6f:43:6b:f1:81:3a:e4:3b:d2:86:25:09:15:03:
70:17:b9:d3:43:03:21:df:26:12:d0:a9:15:34:03:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1E:B6:87:0E:DC:5F:00:9E:65:20:F3:C9:FD:4A:2C:17:52:7C:D5
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:90:eb:64:03:09:81:e4:53:3c:6a:be:90:e2:c0:fc:f3:
8f:3b:71:64:9f:a2:cf:13:72:5b:17:70:d2:6c:63:97:2c:15:
ff:a3:4e:1d:2e:f5:77:ec:fb:69:6d:c0:35:46:0e:a8:69:81:
1b:b8:23:81:df:74:87:e3:88:08:09:3d:1c:de:da:8d:b1:3b:
79:b6:cc:09:88:70:b0:53:f4:d1:bb:d1:3a:f1:8c:62:a2:1c:
dc:c2:b5:fb:43:42:3f:45:cc:f7:b0:36:54:e7:4b:26:32:8c:
5c:d1:59:af:b9:28:4d:ca:45:1d:2d:87:a8:4f:5d:97:41:1e:
23:f4:22:c5:ba:35:99:ca:5c:19:c6:0c:8c:13:d3:5d:a5:fc:
78:ea:b6:02:41:5b:14:c0:55:e5:96:b5:13:2d:de:79:33:76:
5c:cf:03:ef:61:74:60:86:4d:8f:26:f1:2c:0a:4d:c7:0e:7f:
91:28:ea:62:ec:34:f0:fa:a8:29:e1:53:e4:8b:65:df:4f:4d:
d6:b5:95:a8:e5:4d:0e:e3:af:73:14:b9:16:c3:3f:f6:e2:e1:
12:d7:37:d3:30:05:4a:e5:d7:66:8d:b0:4e:2c:44:32:db:09:
a3:09:dd:6d:c7:96:fb:85:ff:c3:0e:89:45:dc:60:79:31:45:
8f:6b:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:58 2025 by rpki-client