Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File: 70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier: Y0r+a6kaXS1wDKXN1A33LNy9aF5FZTURUleHkRp3gwo=
Subject key identifier: AA:8F:C9:BA:39:F3:6C:C3:43:B7:F6:15:00:D6:1F:82:E0:EF:7E:51
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 01988B0F2959E949A8C575A58575B17FC1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number: 0D8E
Signing time: Fri 08 Aug 2025 19:01:23 +0000
Manifest this update: Fri 08 Aug 2025 19:01:23 +0000
Manifest next update: Sat 09 Aug 2025 19:01:23 +0000
Files and hashes: 1: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: 5csPPbAg+8/6g9iQrYXuicd1zzabIe++u0sQgzFEaZo=)
2: S4KhO_-8xzMvt1B6k_-GK_XNTGs.roa (hash: 298ot3rN9ux+k96S6A3kz+LkCwnTR/d/qtOX4jSeeqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:29:59:e9:49:a8:c5:75:a5:85:75:b1:7f:c1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Aug 8 19:01:23 2025 GMT
Not After : Aug 9 19:01:23 2025 GMT
Subject: CN=aa8fc9ba39f36cc343b7f61500d61f82e0ef7e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4e:0e:c5:3d:2c:4c:e0:8e:b1:2c:aa:b0:4e:
b0:10:ce:c9:86:a3:9d:fa:ed:f5:25:63:4a:12:b8:
2f:3d:d0:ce:3c:cc:91:29:7a:75:5a:35:fc:6c:e4:
c8:d4:7e:8d:a2:d7:5f:f8:10:e0:ba:fb:82:61:45:
b3:10:cf:95:08:29:55:02:8d:91:7c:a4:d9:0e:93:
33:78:6c:ea:30:d6:a8:5f:9d:ed:18:f3:a9:9a:79:
c9:61:6c:ce:43:40:c2:02:39:62:4c:5f:11:ef:e8:
4b:eb:0d:f7:0a:04:0a:5a:73:98:83:c0:55:4d:6e:
de:51:7d:43:b3:34:b5:d9:da:59:45:5b:54:60:5c:
6d:5e:f9:9d:90:fe:66:81:43:1b:1b:35:54:34:cb:
be:c5:56:56:da:ce:e4:70:7b:f5:fe:b2:a2:07:04:
a7:46:4b:b6:8f:91:80:25:20:ff:a3:34:e5:1a:f3:
db:b5:cf:ba:c2:2a:96:2c:7b:a8:37:9e:21:fb:d4:
e6:49:ad:f6:b2:e9:3f:d2:c9:5f:88:55:35:65:47:
0f:24:c0:c4:ad:e7:ef:d5:5f:ed:4b:9e:a2:3c:6b:
32:a0:cb:da:64:73:7d:c3:92:9b:10:92:1d:17:4a:
2f:4d:7e:6a:14:f7:3e:17:fd:d1:6e:28:5e:c6:70:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8F:C9:BA:39:F3:6C:C3:43:B7:F6:15:00:D6:1F:82:E0:EF:7E:51
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:97:b9:84:15:16:10:76:56:21:66:8e:94:c7:61:c9:89:f3:
fb:24:a8:9e:81:6e:a5:2e:3c:24:e2:4d:8a:b3:92:e5:13:58:
f8:46:39:20:ee:42:97:03:7e:c0:37:03:ea:1a:76:16:e6:e3:
c8:a4:07:70:c5:82:33:20:13:ee:f9:2c:ca:c4:6d:58:ea:6c:
de:4a:ac:c8:8d:d9:9c:c2:a8:2c:20:a3:38:ca:a6:d4:08:85:
3d:62:2a:a6:7c:50:b6:2c:db:ef:ce:23:a9:9f:40:df:db:bf:
2c:ba:09:0a:cf:6a:90:42:0b:d7:00:ea:d3:83:db:a3:3a:41:
d7:b5:f7:6d:41:ae:d5:da:05:14:76:71:79:e4:5d:2f:3f:ab:
67:c9:ef:77:f3:ac:5b:f5:ff:ea:92:ea:5c:f0:b9:34:3e:34:
db:5d:53:c2:26:2e:8b:04:2a:37:4e:ba:92:48:63:84:13:f0:
e8:db:50:6c:e9:46:8f:ed:85:ef:61:15:05:f5:9d:3c:ee:c1:
cb:c7:37:54:ce:47:52:c0:24:6f:b5:4e:ba:7c:ff:f3:ce:93:
01:fb:09:76:46:af:81:da:88:08:90:18:37:a8:ab:72:c7:fc:
09:85:ba:18:d4:bf:96:3e:f4:fc:f7:3f:57:d8:a1:66:81:93:
6c:81:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:37 2025 by rpki-client