Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: r1N1erfhTxa1ZuK8lMRAvYOswkb1NWxlArUJBx4JsYg=
Subject key identifier: 4A:2B:59:45:71:00:13:10:3B:E4:21:00:E5:4F:50:7A:CA:58:AD:3B
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 01988DA1A61B5A066DF9E6CA750FA12B2132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 133D
Signing time: Sat 09 Aug 2025 07:00:37 +0000
Manifest this update: Sat 09 Aug 2025 07:00:37 +0000
Manifest next update: Sun 10 Aug 2025 07:00:37 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: h1yf85hZ160utIvGMxofDoK6XeU4/zeOtVWknEyNv9U=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:a6:1b:5a:06:6d:f9:e6:ca:75:0f:a1:2b:21:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Aug 9 07:00:37 2025 GMT
Not After : Aug 10 07:00:37 2025 GMT
Subject: CN=4a2b5945710013103be42100e54f507aca58ad3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:94:e4:ad:5e:50:78:1b:70:29:61:b1:98:
e7:b1:6c:33:33:52:cd:89:48:a8:cb:ee:b1:ee:06:
2c:81:43:b7:1b:3e:fb:0e:c2:aa:d9:ab:f7:61:be:
5f:60:ff:a2:78:a9:d6:eb:fc:52:b0:f4:98:0d:bf:
58:e7:2a:ce:b8:44:fd:7f:13:1d:50:91:7d:1c:7a:
6f:58:f0:18:68:ce:e3:59:f5:1e:db:28:e5:6c:d6:
29:0c:75:56:11:4f:49:b3:27:9a:60:e4:35:57:9f:
94:bf:45:73:f3:9f:53:ee:e2:e9:d8:50:c4:92:8b:
fe:2d:fd:8e:3f:bb:b0:35:77:b3:9d:07:01:d4:4e:
7d:3e:bd:d0:9f:13:51:3a:cb:24:46:d2:47:63:6a:
6a:0e:20:02:30:e5:49:d2:b4:9c:74:a2:2d:24:5c:
e3:0b:ac:2d:0b:95:84:dd:f6:01:c4:0a:8b:3e:38:
f3:d4:8a:68:94:a5:f4:eb:b1:29:1b:93:90:3b:a3:
ce:bf:19:4b:84:05:42:5a:f4:ab:50:b4:76:70:27:
ca:90:82:96:7d:86:27:ee:70:a6:51:52:1f:53:a2:
8e:37:25:8c:52:77:00:25:3a:b1:a1:2c:f0:6f:90:
43:0f:65:35:6b:e5:b3:97:a5:09:71:91:93:6e:aa:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:59:45:71:00:13:10:3B:E4:21:00:E5:4F:50:7A:CA:58:AD:3B
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:72:26:9b:7b:4b:67:a1:3e:60:fc:af:01:d6:58:70:16:7b:
73:59:a7:5b:2c:90:76:b6:0f:a5:c5:30:0c:af:fe:e0:96:ed:
51:68:95:87:0a:c6:1b:28:50:f2:28:09:8f:f7:99:b7:a0:bc:
ec:d1:50:8a:7d:73:95:b3:25:54:31:f8:71:71:8d:e8:fd:29:
ed:25:d7:e6:9b:f0:61:b7:97:15:60:9c:43:a2:f7:40:f0:59:
f5:31:48:b2:25:df:77:6c:73:a5:ef:34:a9:3f:07:60:63:35:
bf:4a:2e:61:82:c7:1f:ea:eb:ea:92:64:8b:3d:26:b6:d6:d5:
10:70:bb:45:d6:5f:70:91:dd:a6:55:c1:34:dd:9a:93:db:f6:
47:72:01:9d:ad:60:87:81:fe:62:82:21:a7:37:c9:c6:13:e0:
93:57:bf:b8:5f:aa:e4:fa:82:32:2b:87:5f:16:57:be:d6:aa:
98:ed:0f:9a:88:ce:d7:95:27:ed:9c:3b:16:b3:74:bf:51:e2:
4c:a2:9c:eb:f3:87:5c:e6:16:7d:21:9b:5f:4a:55:f8:97:44:
89:42:7e:07:8a:75:68:50:ce:26:3d:63:79:13:5a:4e:eb:54:
8a:df:4c:6f:ea:6c:a7:0c:80:4b:df:bd:35:5b:4f:f7:28:44:
7a:3f:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:29 2025 by rpki-client