Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: Uvm8AQTeIrKQXOJRmgoxinGGSZxCTi2bbG+E0BBADos=
Subject key identifier: B3:6C:59:F2:F4:27:45:9C:AA:D2:68:44:8A:01:74:AE:D8:BC:1E:B6
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01987306547025FCF560416E38A4B410A4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 015C
Signing time: Mon 04 Aug 2025 03:00:51 +0000
Manifest this update: Mon 04 Aug 2025 03:00:51 +0000
Manifest next update: Tue 05 Aug 2025 03:00:51 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: D0hyzChQQqVdBuzoZ9JNLWevzEfzARDPJlPmox+tGcg=)
2: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (hash: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:54:70:25:fc:f5:60:41:6e:38:a4:b4:10:a4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Aug 4 03:00:51 2025 GMT
Not After : Aug 5 03:00:51 2025 GMT
Subject: CN=b36c59f2f427459caad268448a0174aed8bc1eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:aa:ed:96:30:3a:c5:c3:dc:68:2f:e9:18:
b2:0d:3a:da:6a:d8:d0:de:dc:9d:87:c8:ec:11:67:
14:f7:da:85:ec:48:f8:4e:29:4e:6d:f5:cd:9d:62:
83:c1:36:94:bb:94:5f:8a:16:09:f6:1e:c1:77:60:
3f:90:9c:81:74:db:c1:8c:d2:dd:a4:00:19:d4:c3:
e4:79:85:a5:ae:cb:86:39:8f:77:ce:5f:aa:64:f5:
fe:d4:19:bb:9a:bf:4a:3a:a3:6f:e7:ee:3c:86:7d:
7f:36:7f:f9:7a:1e:d8:d6:55:f4:9b:23:13:cf:40:
22:17:67:62:31:55:37:b6:61:eb:51:1a:58:50:da:
43:cf:fe:69:28:f8:00:04:7b:07:3c:91:4b:8d:18:
89:28:41:0e:4d:5c:43:42:e4:0b:d6:59:12:fd:e1:
cb:bd:66:2e:ab:45:c5:88:65:d3:41:01:3a:36:2e:
84:13:2f:77:34:90:18:0c:f0:b3:59:dd:d7:af:71:
41:be:80:c8:39:0c:48:80:ee:b7:99:df:6b:a7:97:
5e:50:e1:7e:6f:b1:07:fe:0c:92:f8:93:b5:de:57:
43:10:e9:7a:0f:6c:a6:fc:b8:1a:9d:15:7a:8a:f6:
3f:cf:91:48:69:e5:f6:27:65:5f:7c:8c:71:3b:68:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6C:59:F2:F4:27:45:9C:AA:D2:68:44:8A:01:74:AE:D8:BC:1E:B6
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7f:d6:94:68:50:6a:2b:0d:54:14:0b:35:ad:bc:35:99:34:
52:81:74:d6:38:1e:31:38:17:c9:3c:03:a9:65:7b:5f:61:50:
a4:cf:1d:56:a2:7b:21:99:7c:5e:1f:0a:a5:ba:e8:80:29:2f:
68:82:a1:78:6d:ec:d6:a3:eb:40:98:bd:d1:c3:08:1c:4b:40:
c6:91:4d:00:72:c4:60:07:11:30:b5:42:9d:db:e4:e2:a4:6a:
e1:4d:36:84:79:7e:e6:27:45:18:60:75:de:9c:88:43:6b:3a:
9f:37:8a:d0:48:e1:b0:9a:7c:24:44:02:e2:86:34:32:7d:fb:
ab:8a:91:09:0c:78:8b:dd:df:f2:b0:fe:ef:02:7a:35:36:96:
05:75:9c:c5:03:48:48:30:75:d2:59:cd:d0:ad:7d:97:24:76:
5d:d5:4f:da:47:6d:6c:40:2f:ad:cb:74:5f:f4:8a:1f:49:91:
f4:48:1a:ac:c4:f4:d2:a5:d5:2f:db:35:e0:61:cc:91:52:77:
cd:13:61:8e:2d:c1:67:90:6a:66:27:7a:0f:2b:69:8f:62:41:
5b:54:0c:6b:0c:f9:35:3c:27:57:ad:22:c3:af:be:e8:04:c3:
2a:34:b5:6e:33:46:f4:d3:a7:c9:95:2f:66:7c:e5:e3:46:70:
20:f5:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:26 2025 by rpki-client