Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: MszZMLdtNiTs2o2YS3HJ5G9KMlwfZ1iJeLc/8mx76Bg=
Subject key identifier: 5B:0B:59:F5:86:89:07:AE:31:4B:C3:92:AD:23:07:6D:3E:D1:6A:A1
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 0198733D0F102187E7B6FFE49E63F1B14D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 128A
Signing time: Mon 04 Aug 2025 04:00:37 +0000
Manifest this update: Mon 04 Aug 2025 04:00:37 +0000
Manifest next update: Tue 05 Aug 2025 04:00:37 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: ZG1aN0onXqFcWnjia/3dN8+NsFsxhCvn7Y9sjZTvjRw=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:0f:10:21:87:e7:b6:ff:e4:9e:63:f1:b1:4d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Aug 4 04:00:37 2025 GMT
Not After : Aug 5 04:00:37 2025 GMT
Subject: CN=5b0b59f5868907ae314bc392ad23076d3ed16aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:45:72:ae:c8:89:82:83:06:0a:ac:05:4e:
66:44:c0:74:50:4f:f3:e4:1e:4f:ed:b9:19:9d:3f:
c4:40:47:36:05:82:ab:7f:be:a7:a7:32:80:a2:05:
e4:b7:93:88:2a:92:a6:5e:b8:6e:33:e2:1c:47:ca:
85:34:94:85:61:4e:4a:af:e3:90:f2:40:0f:2d:9a:
99:24:9c:b2:0d:90:93:ce:66:75:89:5d:ba:ae:cb:
d7:73:c4:c7:0e:0d:18:28:13:ae:a5:59:95:8a:cc:
d2:53:0f:ee:e7:cf:8b:a0:c6:b8:c6:28:9d:68:4d:
96:ff:e3:99:42:53:33:90:1d:37:0f:6d:f4:ad:e3:
ce:b4:62:52:26:87:96:ab:04:fc:3b:a7:6a:de:c6:
63:64:02:a8:fc:d0:38:63:e4:2e:ba:38:55:5d:87:
b4:cd:3a:81:5f:91:fe:c9:45:53:69:0c:13:62:48:
50:8d:64:a0:93:74:f4:1b:aa:61:6b:55:2a:b5:92:
4a:cf:38:1b:a7:2f:dd:28:7b:63:51:e5:9d:36:6b:
e1:06:92:7a:97:47:82:f4:8c:9a:cb:ce:1a:60:6b:
c3:f4:6f:73:24:ff:46:ba:87:01:ab:d8:4f:c5:48:
3f:3c:ba:74:1e:95:dd:0d:4b:9f:45:62:55:92:b2:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:59:F5:86:89:07:AE:31:4B:C3:92:AD:23:07:6D:3E:D1:6A:A1
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:47:74:8a:7b:58:c7:54:8d:da:5f:84:fc:c7:c3:69:75:
16:f9:7e:64:02:25:85:ec:ef:60:a8:b2:2c:c9:88:60:1e:c7:
87:0c:83:11:e2:df:a0:9a:75:ef:b5:79:94:23:1c:7b:cd:1d:
74:df:5a:75:78:f0:c0:90:17:de:15:2e:b9:0d:51:19:4d:65:
ae:c7:94:55:68:cb:16:0b:a8:cf:bf:0c:a1:f7:93:e4:4c:f3:
e4:44:70:7e:2c:e6:95:e2:5b:1b:ae:2d:07:81:df:1d:30:ff:
d0:b6:8c:99:46:da:f9:f6:e5:d7:9e:34:4d:a6:08:15:c4:fc:
7e:a1:cc:a9:19:11:79:ec:07:af:3b:63:97:76:51:4e:3a:44:
04:73:95:1c:d6:56:e1:d5:eb:ac:40:a4:f2:05:4b:bf:0e:46:
da:48:fb:48:a5:50:3e:a5:53:df:d4:b0:ae:2b:ea:90:73:19:
16:fc:2b:98:d2:e7:0d:64:87:87:92:50:a7:15:b2:e3:70:6e:
9c:48:f1:12:6c:6b:fc:dc:61:7d:14:6f:c9:1a:27:41:2c:98:
13:61:99:e9:dd:6d:eb:f0:df:68:0e:7c:16:cd:05:07:9f:75:
fe:bf:1e:9a:80:7c:6a:c0:7f:62:8d:c2:fb:ce:8c:4d:d0:5d:
fd:01:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:25 2025 by rpki-client