Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
File: aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft (raw, json)
Hash identifier: Q15nmU1WdAv5MEw9tjr6RrkZ+bnyrRHFJX1+GGEXCOo=
Subject key identifier: F6:D0:8D:91:C9:06:79:6E:9C:29:BC:E4:61:89:D7:40:2B:74:3E:2C
Authority key identifier: 69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
Certificate issuer: /CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Certificate serial: 0198974963058835F38E20E6DE6FE4AC36D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
Manifest number: 0662
Signing time: Mon 11 Aug 2025 04:00:25 +0000
Manifest this update: Mon 11 Aug 2025 04:00:25 +0000
Manifest next update: Tue 12 Aug 2025 04:00:25 +0000
Files and hashes: 1: WhLENsO2y4UEzkuswA1wx41c4K4.roa (hash: qqWz2hpUFCfdOvnndjkfI9tgPQ2D7KLxkWgnxyi1reI=)
2: aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl (hash: Rq5Z//N/8Tgo28aGztfZ7EG3mUTH2rd5CsBFm8crkpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:63:05:88:35:f3:8e:20:e6:de:6f:e4:ac:36:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Validity
Not Before: Aug 11 04:00:25 2025 GMT
Not After : Aug 12 04:00:25 2025 GMT
Subject: CN=f6d08d91c906796e9c29bce46189d7402b743e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:a0:9d:04:4d:c8:15:fa:d5:50:6e:18:88:
cd:6c:d3:60:67:d2:3a:25:63:26:29:82:2c:9c:a6:
1a:f5:bd:5c:d5:6b:5b:f1:15:e6:f0:3e:fb:27:df:
95:65:d2:2c:22:35:e4:ef:ab:27:77:d7:8f:9a:8b:
3b:95:8d:ca:36:a8:d0:55:c5:5b:4e:0f:26:20:30:
1f:c4:9c:b5:cc:4d:f6:72:d5:12:02:47:ad:c2:ca:
93:53:1e:f6:e4:f5:32:76:a1:e9:4f:a4:d8:7b:73:
92:b4:2b:b0:ca:c8:5d:3e:48:3c:19:e6:de:1e:24:
e3:3f:3c:73:42:3f:ac:85:f5:9a:a2:33:a8:c5:ed:
6f:c8:60:67:25:d6:40:da:9a:2c:f8:68:76:52:1a:
2d:c0:b9:b5:51:29:b2:f2:b8:59:81:b5:10:0c:a4:
00:bc:69:61:e3:95:c1:d6:45:5a:cd:26:23:01:ce:
65:83:70:25:91:14:a0:f6:dd:d0:19:76:af:bb:6f:
8f:25:f5:6e:04:3e:ee:d8:e3:55:cb:4b:03:33:4b:
83:04:a9:1a:36:4f:c7:24:a3:48:e6:77:12:45:b9:
d6:a0:ba:88:b8:5e:a7:6a:20:56:02:14:33:77:df:
3a:8b:7e:9a:52:32:61:d7:70:54:ce:1b:44:67:a7:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:8D:91:C9:06:79:6E:9C:29:BC:E4:61:89:D7:40:2B:74:3E:2C
X509v3 Authority Key Identifier:
keyid:69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:45:7e:0a:27:3f:1b:14:ed:8a:4f:5e:e2:32:6a:85:fc:ee:
e3:27:8e:eb:1c:5c:97:22:48:01:e2:b0:b6:b6:b1:50:78:9e:
20:66:49:1b:4f:22:b4:14:71:7e:ff:d0:26:5b:71:57:e0:09:
80:a0:36:84:58:d7:a1:e7:64:1a:2f:20:59:69:77:e0:89:99:
45:88:d9:40:ec:e4:c9:61:e4:a0:5f:75:59:7f:08:fa:77:03:
3f:68:68:df:fc:c3:ed:46:bf:1f:b4:c3:5b:09:87:fa:0a:26:
ae:4b:5d:a0:d6:5c:e4:d9:08:d2:95:90:86:9e:6c:f8:22:95:
ea:2d:e9:82:ca:0a:06:a6:6b:9d:7a:cb:bd:d5:2c:c2:99:0b:
ef:0f:3e:a2:cf:28:23:87:a9:99:9e:c6:dc:c7:c5:0d:85:d6:
8e:41:6b:90:c5:29:5e:f7:e7:c2:d4:12:da:22:e4:99:fd:0d:
38:7e:23:16:9b:6d:a5:a1:00:52:45:ba:e2:58:6d:46:68:34:
87:e1:36:f2:39:9a:36:0d:14:f5:34:9c:df:8a:68:2a:ff:fe:
cf:4b:2d:7a:e1:5f:fe:27:1b:30:a6:76:01:09:e6:3c:45:e5:
c7:e6:cb:07:04:eb:99:b1:ab:90:12:ee:ef:81:af:4e:0c:dd:
51:e5:7f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:06:52 2025 by rpki-client