Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: XsXRo3lwTfuvDEG+eO8KvG3aP2pWwbrG8VJFdgXSrac=
Subject key identifier: CE:49:9A:47:AE:83:E8:CD:0B:A3:EE:91:A4:0C:CC:F5:9E:2B:AB:B1
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 019889574E9B4142BADEDC2A0C52D479DEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 07FB
Signing time: Fri 08 Aug 2025 11:00:56 +0000
Manifest this update: Fri 08 Aug 2025 11:00:56 +0000
Manifest next update: Sat 09 Aug 2025 11:00:56 +0000
Files and hashes: 1: aHJU3TtGM9M9L2c33hiqaeAD6-M.roa (hash: Jnk6c3GJ5E4y6b+inckEyRoPVADxMl1TsyYlid/Y0Y0=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: WMllLsgORXda1Ov2OPjlTCeUlIGjCBm3KrW4be6rcmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:4e:9b:41:42:ba:de:dc:2a:0c:52:d4:79:de:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Aug 8 11:00:56 2025 GMT
Not After : Aug 9 11:00:56 2025 GMT
Subject: CN=ce499a47ae83e8cd0ba3ee91a40cccf59e2babb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:a5:bb:ed:9c:31:1d:1b:2c:68:cc:47:6a:
3d:31:6f:df:34:05:ee:98:70:73:60:26:9e:4d:74:
0c:ba:f3:6d:52:e9:51:81:05:ea:9e:8e:f1:c4:31:
23:92:36:3c:3c:62:fd:33:57:f0:76:8e:64:c1:70:
fd:13:7d:5b:91:0d:86:09:2a:81:64:f0:35:be:54:
83:c4:eb:9e:12:7c:a9:d8:17:95:1e:bd:35:df:1a:
7f:9d:43:ef:03:39:91:97:09:cb:6a:45:87:a1:29:
7d:82:30:06:81:ac:3d:36:de:34:44:df:77:4b:a1:
20:94:b9:a4:ee:f2:f4:95:1b:80:e4:5c:b9:c1:95:
e3:e9:5b:16:23:c4:61:65:05:3c:d0:f5:73:40:76:
45:be:c0:56:ea:5c:d3:1d:9f:24:27:fe:da:d3:8a:
95:bb:ca:32:6d:18:7b:74:6d:b6:a6:cf:57:06:27:
2a:a2:bf:63:9f:2d:c9:8a:33:0e:4b:0c:47:ea:0d:
91:49:a2:f9:d5:ce:3f:df:04:d8:d7:26:f5:bd:1d:
d4:c7:8e:9e:b7:2c:89:3a:c8:41:44:9e:df:29:52:
59:f4:bb:71:13:06:e9:92:26:c6:eb:cd:84:33:01:
ef:7d:0d:a5:fc:14:24:f4:ba:a2:d5:11:49:dc:11:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:49:9A:47:AE:83:E8:CD:0B:A3:EE:91:A4:0C:CC:F5:9E:2B:AB:B1
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:49:f1:cd:a8:44:1f:f7:52:11:85:ad:50:bd:8e:0e:86:6a:
09:d9:7d:ff:f0:e8:42:d2:1e:2a:9a:69:c8:29:7e:a2:2e:25:
f6:0f:5d:92:04:1a:14:c3:bf:c3:d0:29:5f:c6:94:fa:f0:8c:
60:80:7c:67:a0:33:e7:4d:5f:5a:13:d7:f2:45:fc:f2:be:cc:
c7:d9:af:44:5d:cd:d0:1a:27:30:44:53:6c:03:f6:9d:82:f5:
8d:59:df:d9:81:17:6e:86:03:74:fa:e5:ec:44:9c:1e:1e:7d:
d6:36:77:25:8f:63:7a:de:cc:a0:ea:85:12:2f:6b:1e:e1:ef:
5d:e9:ba:c4:0d:8c:44:49:03:f2:67:af:d6:ef:37:52:e1:ee:
ab:23:8d:e5:bb:71:cf:b8:64:6d:6a:96:3d:07:a8:71:5b:48:
d1:27:68:02:26:56:11:1e:e4:94:ad:fd:33:57:fd:37:2a:b4:
cd:7a:f2:9e:07:03:dd:02:c6:a1:da:b8:68:1c:9f:96:fe:c7:
13:a7:e6:dd:7f:50:b6:a1:11:76:d7:e3:c9:ba:a8:77:25:bb:
12:8a:c4:a2:a8:43:47:86:55:ea:92:89:93:22:9a:7e:68:5f:
27:8c:ba:9c:02:54:f9:31:41:36:ae:f1:43:5d:de:82:88:fe:
ee:bd:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:07 2025 by rpki-client