Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: ZfLcP/ljSyQM3RG991/bPGcHSHHeaZhUlnT6VgdWjQc=
Subject key identifier: 0D:E3:63:03:10:5B:86:BC:A4:49:64:20:47:29:35:8E:65:E5:2F:E3
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 01989749A040FD04A18A24F76D7A46598A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 1425
Signing time: Mon 11 Aug 2025 04:00:41 +0000
Manifest this update: Mon 11 Aug 2025 04:00:41 +0000
Manifest next update: Tue 12 Aug 2025 04:00:41 +0000
Files and hashes: 1: aYzSzZFLqdVEPKpQk5EWoehSNEw.roa (hash: AM/5zmNZPmTunUEdZ9JbOQ5FfrgajVTJL4TG99J5meg=)
2: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: FMN0G2Oq5570yYjzQaC4JcU7VD6cghtap1sZXGGAi64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:a0:40:fd:04:a1:8a:24:f7:6d:7a:46:59:8a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Aug 11 04:00:41 2025 GMT
Not After : Aug 12 04:00:41 2025 GMT
Subject: CN=0de36303105b86bca44964204729358e65e52fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:9a:ca:65:59:ec:06:69:ed:d4:08:d2:3c:
a0:1c:c8:9c:ba:75:06:3e:fe:bf:f8:24:84:fb:f2:
18:ba:26:28:ee:81:eb:05:c4:fd:7a:c8:dd:1f:d9:
ff:6d:9e:d2:39:28:a7:e9:d9:0f:39:70:a5:fe:5f:
d2:22:db:d9:59:e3:89:4b:49:44:95:a2:93:c6:71:
ec:e2:90:2a:23:72:d1:9a:96:ac:ba:a4:08:73:db:
12:be:ed:13:a3:da:8e:ad:72:e9:72:06:39:50:1b:
c1:7a:77:6d:70:70:2d:c7:3b:64:d6:79:19:6d:c2:
e3:7d:14:f1:4e:4c:4e:4a:34:3a:b6:32:c5:9d:49:
38:b5:41:d2:74:a4:9f:a3:41:e1:b2:d4:d8:04:23:
bd:5b:26:c7:f9:46:f7:08:b3:ec:2a:5e:ba:68:bc:
b7:5c:4e:4c:41:1c:5b:45:1d:07:a3:a6:d8:11:fb:
cf:02:99:ae:6b:71:09:56:90:cc:b6:60:ae:ea:78:
52:3e:87:83:4c:81:00:13:3b:bb:1d:76:0a:a6:05:
80:e5:4a:c9:d4:96:19:81:5c:26:b8:be:25:1f:aa:
3a:c8:78:7e:de:d8:83:73:a8:8e:83:4b:5e:4f:a4:
71:5c:2c:7f:58:d8:0f:50:67:90:27:79:aa:d9:36:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E3:63:03:10:5B:86:BC:A4:49:64:20:47:29:35:8E:65:E5:2F:E3
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b3:f8:34:0e:6a:70:3a:a5:ee:a5:80:60:33:47:b6:ff:8b:
29:19:32:27:ed:86:e2:82:95:f3:13:8a:4a:e7:6d:cc:1e:7f:
dc:52:35:ca:20:89:da:96:69:2d:0d:00:5c:6e:fa:36:bc:dc:
bd:71:60:1b:7e:02:1b:ae:ae:b0:34:11:bc:91:e8:12:63:68:
50:45:fa:6e:17:b9:bd:0c:3b:e5:07:cc:a4:9e:3c:f7:68:93:
3e:c4:c9:74:cb:2b:cf:c3:ef:23:9c:de:15:85:b9:2f:b9:f1:
63:74:29:f2:24:55:3d:e7:9b:8c:7a:66:e8:bd:cd:ea:81:a7:
3f:64:a2:22:80:ba:04:c0:b2:5c:f7:28:e3:9c:52:47:8b:e0:
74:59:1a:a2:ff:dd:bc:be:bf:6e:c5:0c:4a:22:1b:82:2b:5b:
0e:4b:74:2e:70:80:ea:0a:ef:fd:8a:35:a4:19:19:b3:a2:94:
95:20:67:25:9e:6c:7f:58:c8:42:77:dd:d9:26:91:6d:83:b6:
8c:8e:7e:42:97:fe:a7:77:38:43:7d:1b:9f:67:ec:f3:9d:16:
c3:ef:c8:6c:c2:22:8b:3c:09:dd:5f:8a:42:42:dc:05:26:a4:
ec:54:35:42:19:ec:f4:61:4f:73:0c:82:6a:46:3d:1d:ef:ba:
7f:67:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:26:55 2025 by rpki-client