Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: NXVhIYeIS/N4Yf9AHyHwuT67Nk1ShzsVjCPFIiq7bUE=
Subject key identifier: 59:4D:2A:2E:1A:D4:77:13:47:4C:FB:84:CB:51:40:76:95:82:D7:5A
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019872CF68CDBE6E33548B338968F3B546B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0837
Signing time: Mon 04 Aug 2025 02:00:52 +0000
Manifest this update: Mon 04 Aug 2025 02:00:52 +0000
Manifest next update: Tue 05 Aug 2025 02:00:52 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: v3jXdnBqCuodzDt+0TXPVgckppvPQusxsR8XFPNhUA0=)
2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:68:cd:be:6e:33:54:8b:33:89:68:f3:b5:46:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Aug 4 02:00:52 2025 GMT
Not After : Aug 5 02:00:52 2025 GMT
Subject: CN=594d2a2e1ad47713474cfb84cb5140769582d75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:30:73:19:ef:cb:f9:95:69:2b:74:d8:a1:
13:60:92:b1:77:e8:d7:ec:6d:fa:36:85:0b:d4:9e:
95:66:bf:7e:1f:92:e5:5c:e5:75:8d:76:06:b3:5f:
c2:fc:3b:a8:f3:f8:50:dc:6a:30:8e:0c:33:46:c9:
eb:4d:c0:dd:ea:f3:7e:4f:b1:fa:cb:91:0e:ff:56:
02:95:3c:e6:88:04:ef:86:e5:1c:86:44:57:ea:4b:
79:9b:2b:f1:b9:59:d3:88:21:97:d0:3a:e7:39:8c:
0d:f2:82:19:ec:5c:10:09:b2:f8:c6:9c:3a:95:9e:
c7:3a:bf:f2:5f:27:6d:e0:f2:02:e3:11:c0:a6:c5:
12:9b:32:91:52:56:f4:ae:ef:1e:3c:91:d2:63:99:
6a:19:9c:8c:02:ee:55:bb:9d:b0:df:d2:de:fa:75:
b8:d1:29:36:a6:0a:8d:fd:79:44:ea:76:05:7b:67:
55:d9:e5:a5:18:23:6d:a3:11:a5:56:2a:90:69:c8:
7c:84:a7:1b:66:a0:50:71:c4:65:83:72:13:77:49:
aa:d1:ca:54:1f:c1:16:82:27:07:10:48:7a:bc:ec:
d3:cc:ed:66:a3:45:52:c7:1b:4b:33:b2:34:d8:45:
29:79:bc:e5:39:fc:7c:62:bc:b8:13:0d:ba:66:c4:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4D:2A:2E:1A:D4:77:13:47:4C:FB:84:CB:51:40:76:95:82:D7:5A
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3d:ba:3b:45:39:5b:b5:97:d8:11:c5:e5:70:90:a9:75:ee:
09:29:a5:54:71:42:f0:c8:bf:65:62:2f:5a:35:28:e5:8d:ce:
b4:9f:b3:48:48:81:3e:b0:43:f7:b4:a1:88:21:89:96:e1:bb:
2f:25:86:18:12:85:40:75:b2:51:88:ac:84:96:d7:7c:1d:11:
52:18:55:e7:6d:e2:6e:38:8f:79:8a:22:df:10:25:db:b7:c9:
49:c7:35:46:fc:cc:8b:9d:6f:95:f5:f3:05:ab:09:69:ee:85:
3a:24:df:73:01:1a:03:72:47:68:bc:9e:65:8e:85:e5:ac:95:
11:e9:0b:89:ae:05:d0:13:d5:85:36:dc:92:84:a6:17:86:c6:
d9:c2:ca:f0:77:92:15:cb:c1:12:35:98:ce:ba:0a:f1:d1:df:
4e:60:00:f9:a0:1b:4d:01:f2:ab:39:42:58:23:b7:7c:9a:24:
96:7c:96:f7:80:e8:9a:f2:af:70:cf:83:2c:fc:26:c9:8b:67:
7c:6e:24:a1:92:72:46:d3:ba:b6:e6:6d:bf:3d:18:4d:5f:15:
9d:46:fc:0e:c2:e0:a4:71:83:4a:1a:b3:ef:a7:f6:0c:13:67:
36:5d:21:6a:eb:3a:ba:6c:19:2b:5a:92:b8:47:a3:3e:ad:83:
85:a9:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:59 2025 by rpki-client