Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File: aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier: fVy1oGSH8bXBvxmWVHoObYkV8RDN1j40xER9Uo/HtWk=
Subject key identifier: 89:23:8E:E0:8B:7C:06:C5:AC:85:1A:0B:01:00:FE:68:DA:BA:97:12
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial: 01989FDEBED93679CFACB017E9A4E675C008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 20:00:31 +0000
Manifest this update: Tue 12 Aug 2025 20:00:31 +0000
Manifest next update: Wed 13 Aug 2025 20:00:31 +0000
Files and hashes: 1: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: ayvKmcarevZA3j7l5O1zXBkBzm3DJ9zwOs6GZvGSTVY=)
2: k8TvgiNHhv0gMh1GPOWO0OlVTqY.roa (hash: NYQN/yytkqzN4XlRmytmTH29q1AoSwj6G4FODHWQARM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:be:d9:36:79:cf:ac:b0:17:e9:a4:e6:75:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
Validity
Not Before: Aug 12 20:00:31 2025 GMT
Not After : Aug 13 20:00:31 2025 GMT
Subject: CN=89238ee08b7c06c5ac851a0b0100fe68daba9712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:ab:f7:5f:a1:b5:04:d8:5c:9c:1f:92:83:
01:e9:aa:d0:b1:9e:7a:b6:6d:f6:83:0a:0d:4a:4c:
8c:b2:8e:8f:aa:67:16:8c:01:5a:3a:37:8d:a9:f3:
ec:22:3c:cd:c0:8d:2b:a1:ea:8a:16:d7:74:06:23:
58:62:fa:5e:da:f9:4a:de:97:71:ed:57:0f:2c:92:
5b:6a:a3:f6:c7:5e:f6:87:2d:87:fc:d5:eb:45:2f:
c1:b4:78:46:77:3e:9a:dc:46:9e:61:76:5d:f0:6e:
38:3f:48:98:2d:d0:9d:da:0b:ea:3c:07:6b:45:ea:
b5:06:50:5a:26:fb:4a:dd:b4:50:34:bb:82:71:ac:
5f:be:cf:fe:1e:e4:0b:63:cd:05:df:e5:3f:c5:72:
af:0f:2d:53:52:e2:56:ac:0b:27:fd:e1:4e:04:36:
6d:8b:d0:d3:59:be:da:aa:1b:7f:00:d5:ef:0e:45:
f9:20:af:ae:86:ab:5c:5c:88:51:ff:b8:35:c4:95:
25:3e:05:16:10:1d:13:a8:f6:77:24:ed:53:8e:c0:
80:20:e2:8b:f5:07:7f:4a:b1:8f:6e:45:2b:1f:7d:
b4:b1:ff:9b:ff:3e:57:ed:4a:b1:a4:09:72:0d:84:
a7:61:6b:06:a5:4e:78:72:ea:1d:84:9d:4f:80:19:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:23:8E:E0:8B:7C:06:C5:AC:85:1A:0B:01:00:FE:68:DA:BA:97:12
X509v3 Authority Key Identifier:
keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8c:eb:f9:4a:38:d1:69:cc:12:cc:42:3e:c5:49:dc:4d:3e:
d5:2b:e5:5b:d4:79:ab:12:65:f7:44:b4:f7:f6:26:f5:ca:a7:
4c:82:18:ff:9f:d5:21:b9:a2:87:e3:0f:f3:7d:c1:42:32:e5:
dc:cd:af:61:24:8b:ae:cf:89:46:c3:5f:28:59:99:42:2a:2b:
20:b4:27:43:3d:20:f9:08:86:59:62:34:54:7e:2a:95:b6:4c:
20:ab:14:6d:af:f1:d7:e9:f8:e8:67:b1:6d:a5:9d:90:ff:6e:
98:e0:8d:2a:d9:a0:61:e7:a1:8f:55:9b:2d:8a:8b:19:c8:dc:
d9:4c:32:72:5f:26:74:f8:e1:ce:5d:d0:c1:f2:b3:04:fc:67:
f1:14:8f:4b:b9:af:ec:70:25:f2:44:86:2e:2f:16:d3:e2:d3:
34:10:e1:d2:63:60:65:ea:27:fb:2e:f2:34:cc:51:d3:95:5f:
77:9b:5c:d1:e9:61:e7:62:87:5c:f1:aa:78:67:b7:84:ea:3f:
f4:44:b7:ed:f2:6e:94:97:bf:e0:46:ac:f5:2b:b2:37:2c:0f:
47:08:1a:65:ef:b1:ca:6c:5d:0a:d4:87:bc:ca:7a:4d:61:cb:
d6:b1:82:72:4e:a0:49:d7:05:18:d7:16:56:60:04:21:e6:81:
5f:1d:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:01 2025 by rpki-client