Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: 7zU/+NnmCFFrLmSgVEbHr5tErO1nKEE6pn6ll6D2vRo=
Subject key identifier: 35:57:7C:93:A1:44:FC:E2:36:3F:CE:20:01:87:7D:CB:E8:D1:D2:15
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 01989D827CFE6F35AECA889107F17B96AFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0CCD
Signing time: Tue 12 Aug 2025 09:00:31 +0000
Manifest this update: Tue 12 Aug 2025 09:00:31 +0000
Manifest next update: Wed 13 Aug 2025 09:00:31 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: ZGbNLTOSWvUt7mP9LswIIPBbhuh8rFj8sdyglELhG3k=)
2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:82:7c:fe:6f:35:ae:ca:88:91:07:f1:7b:96:af:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Aug 12 09:00:31 2025 GMT
Not After : Aug 13 09:00:31 2025 GMT
Subject: CN=35577c93a144fce2363fce2001877dcbe8d1d215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:bb:8c:9f:1f:66:39:e3:5b:23:91:cc:6e:
75:24:cb:a4:a3:9d:5b:6b:ac:a9:68:88:52:48:2a:
1f:45:1d:b8:41:f7:db:a6:9b:98:7f:e3:b7:f8:7e:
45:5c:92:a2:62:e6:42:60:0d:30:06:57:10:35:d6:
a2:f8:51:f4:a5:e4:1a:3b:f7:e8:23:ed:51:92:14:
18:b6:66:08:c4:a5:98:c5:c4:84:b5:5a:06:ba:65:
e6:3c:93:b4:40:01:32:eb:41:1d:64:14:31:54:1c:
5e:31:af:f1:7a:ae:89:90:0c:e8:dc:e5:a7:f9:c9:
66:28:6b:2c:4c:b1:99:42:e1:3a:af:4e:0b:1d:dd:
21:9b:d0:8d:81:58:73:9a:48:1b:ef:66:ed:a3:ec:
98:cd:9a:15:b9:81:48:4d:ae:38:d4:b0:f0:84:83:
29:88:ed:11:61:32:89:53:72:f5:84:26:64:b8:4a:
cf:4b:43:d8:92:82:8e:9b:06:3b:a9:2c:76:1d:f4:
56:69:4d:f7:02:3f:50:27:0b:3b:a6:61:15:9d:8b:
b2:97:18:6a:f8:00:aa:61:cd:66:1c:e8:0f:4d:c9:
a5:d1:e6:66:e9:be:9d:16:0b:06:ea:78:75:e4:09:
76:2d:bf:da:80:3c:13:30:eb:5c:12:08:3d:e6:1d:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:7C:93:A1:44:FC:E2:36:3F:CE:20:01:87:7D:CB:E8:D1:D2:15
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8a:54:34:08:5c:c6:12:6d:b8:79:18:a0:d9:0f:ee:ab:7d:
e2:24:0d:ef:8d:d5:28:a6:f7:17:e6:64:fc:d4:24:0e:35:94:
e3:4f:1b:62:b7:5c:02:1e:18:24:c6:57:f3:4c:c4:e6:f7:b4:
72:77:04:9f:c3:d8:aa:92:c8:e4:1e:56:c0:d1:cd:ab:c1:51:
cf:80:2a:dd:06:35:55:9a:f7:77:6b:74:5c:28:e9:67:aa:60:
6b:f8:db:cd:a5:c0:7a:5a:d0:72:fc:03:31:bd:88:8f:14:2f:
00:27:47:01:08:83:e8:eb:a3:ca:8c:e1:f3:01:c5:77:64:7b:
ed:20:f1:b5:09:bb:86:39:59:23:7f:cf:0e:02:39:a2:03:84:
7b:03:ed:db:4d:fe:9a:21:25:9d:5e:bf:92:ef:87:2f:ee:80:
55:2d:57:13:a4:98:91:0f:a0:a5:b0:84:3a:aa:42:9c:09:b4:
6d:47:31:33:52:da:08:f5:1a:b1:89:15:42:e6:74:b2:71:8e:
8a:bf:bf:4d:01:60:36:b4:20:f6:a6:4c:5d:26:62:f8:c9:bd:
6e:5e:92:66:85:6e:f9:0c:36:51:60:d3:17:59:3c:ff:b3:90:
79:a1:4d:3c:06:27:cd:f6:80:07:56:84:de:ca:f4:00:c3:db:
78:02:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:24:38 2025 by rpki-client