
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier: vFbw39tWlgvJMhzQVwt8je//hRdADGgJkJJey8FTcdw=
Subject key identifier: 8C:11:4B:12:10:AF:02:79:89:8D:4C:D3:50:2A:9C:D5:93:19:6C:AA
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 019872CFB3BA73580B27841EB176BC1C7605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number: 0BE1
Signing time: Mon 04 Aug 2025 02:01:11 +0000
Manifest this update: Mon 04 Aug 2025 02:01:11 +0000
Manifest next update: Tue 05 Aug 2025 02:01:11 +0000
Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: b3FeF6dmtqG5cLsifJZ9JB/LXpuea5jwP7rVkJTym6I=)
2: c2eVtCtVjsi6i3vPHgLATuNVfoM.roa (hash: tozwRqmwgoJZSoOdc4bKHZ1xB9xQYRcf64jJhmtl4S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:b3:ba:73:58:0b:27:84:1e:b1:76:bc:1c:76:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: Aug 4 02:01:11 2025 GMT
Not After : Aug 5 02:01:11 2025 GMT
Subject: CN=8c114b1210af0279898d4cd3502a9cd593196caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:d8:79:02:f1:8d:52:0b:e6:35:7a:f1:c1:
7f:da:18:e8:d4:3f:c1:50:ee:47:eb:ac:a4:2a:6a:
c1:9c:5a:a0:18:72:41:14:bf:22:fd:d5:17:04:9e:
79:0d:4d:b2:0c:d8:98:3c:4b:93:d2:ae:53:c4:85:
41:e4:5b:53:4f:92:1f:c7:0c:be:3f:27:70:41:b7:
81:02:ec:43:8d:6f:0f:74:20:7d:f5:40:7d:fd:d9:
3b:b6:58:01:93:c3:a9:02:12:e4:a8:bb:1e:80:94:
52:b8:3e:e9:31:ac:36:7a:36:62:1a:c4:4d:44:c1:
5c:ec:2c:9d:d0:27:0d:86:18:05:57:30:6c:b7:66:
2b:e6:cb:be:7e:28:72:92:a4:0b:bf:8d:d3:72:96:
91:ef:35:35:b1:d7:d1:37:ec:a2:4d:8e:34:21:f3:
3d:6f:7a:61:79:8d:56:19:bf:83:49:73:d9:5f:e4:
5d:86:d9:56:ba:35:d5:d1:0b:bc:3d:f2:9b:36:26:
e1:6c:0c:9c:6e:6f:8d:2c:73:ad:37:b5:7a:b0:05:
23:b3:f8:12:15:4b:2a:f6:81:01:c1:3d:f1:ef:a9:
63:27:da:ca:04:2f:c2:72:5f:81:4f:e1:1b:ee:f1:
a8:e2:34:f1:0d:45:53:dc:0e:2a:1b:05:e5:35:a7:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:11:4B:12:10:AF:02:79:89:8D:4C:D3:50:2A:9C:D5:93:19:6C:AA
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b1:ea:7e:75:04:ca:e5:4a:25:1a:53:18:69:d6:35:b4:68:
08:2e:24:74:85:85:39:98:b2:fc:85:2c:af:94:76:52:bf:c8:
4f:52:95:4e:1f:72:a6:c7:d5:f6:f3:b3:86:d3:ff:94:8b:17:
b2:6e:e1:b1:4d:be:76:ed:47:a8:85:ae:a8:bb:8d:c2:53:6e:
29:d2:71:e5:d9:36:55:90:f2:0b:6e:2e:65:d2:ba:5a:ba:26:
6f:d9:dd:a7:36:e9:cd:c0:3b:93:5a:86:ca:f5:2d:3d:54:09:
84:0e:57:06:d1:fd:7c:0c:ee:f1:1a:06:c0:ef:f6:bb:d3:a5:
78:76:8d:79:45:90:b0:ba:a4:b8:6a:98:b5:a8:58:0d:6b:0a:
9d:97:c6:d6:97:3f:ad:29:53:07:e1:61:e0:39:70:58:f0:38:
3d:cf:a7:51:cb:e6:73:98:62:7a:9c:20:8f:b2:4e:be:91:4f:
57:d5:bc:0d:7a:6e:b0:41:ba:f2:14:c3:c1:db:89:49:21:b0:
58:cd:8c:9f:04:21:63:27:f2:ff:af:8b:28:da:be:0f:ed:ad:
11:76:a2:e2:f1:44:ff:1d:31:3b:73:46:77:ec:2b:37:7d:a6:
57:93:e5:08:32:74:f0:fa:4b:b1:6f:1d:a0:18:09:6a:f1:68:
aa:53:f5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:27 2025 by rpki-client