Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: JoSSWrjK5tKNVCr0oQ/G8q5SfDDSaffysYAYCe1jvx0=
Subject key identifier: 59:AF:9D:E6:5A:59:48:4E:EF:8F:B5:06:75:A1:2C:6C:7B:CC:F8:8F
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 019881D5BE211C9F686530F652D088FE04E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 00:02:05 +0000
Manifest this update: Thu 07 Aug 2025 00:02:05 +0000
Manifest next update: Fri 08 Aug 2025 00:02:05 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: P+BAlhnUoZiq8v400Uv5yuShuVSeG/uT4UCKH0xUekE=)
2: MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa (hash: R8z9BxbXd7Dke2ejYNt/dzLTxcDWFrg7+4k/8QPKV/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:be:21:1c:9f:68:65:30:f6:52:d0:88:fe:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Aug 7 00:02:05 2025 GMT
Not After : Aug 8 00:02:05 2025 GMT
Subject: CN=59af9de65a59484eef8fb50675a12c6c7bccf88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:71:23:fe:2a:d7:fd:aa:e1:70:6d:2e:c3:
35:13:f9:02:e8:f3:34:e2:44:66:bc:c3:ba:51:fe:
c6:3b:bf:dc:b2:47:ef:b5:db:53:5e:84:65:2b:0f:
76:7f:a3:70:30:8a:33:61:1f:9a:50:0b:1c:cc:d2:
e7:ca:ec:76:8d:6b:61:4d:be:20:73:79:b4:4a:fa:
6f:09:95:64:03:71:28:53:98:da:96:c5:91:c2:29:
64:ec:1a:4f:f0:be:e8:b4:9b:a5:8d:d8:c9:93:2d:
bf:cf:da:fa:cc:ca:a2:83:4b:25:d1:44:86:f8:3f:
85:46:be:79:2a:e3:04:49:4a:66:3c:c7:b5:28:e7:
eb:49:92:fd:a1:23:b2:55:49:80:2b:1d:c4:95:20:
03:42:9c:a1:7e:03:ba:37:02:8b:bd:a8:da:62:fa:
a5:20:ff:5b:9d:87:1c:dc:ca:6c:b0:82:ef:a5:62:
db:01:b4:d1:e6:f5:7b:b2:b9:38:c2:f9:b4:9c:e2:
7c:70:03:c5:94:48:bc:67:d9:66:80:32:a9:d3:c3:
fa:e6:5b:8b:50:1d:e8:c4:ac:51:95:64:75:8d:97:
98:e0:6d:38:af:89:11:f6:1e:0d:7c:9f:e9:b5:cb:
fb:61:7b:59:2b:95:06:f1:b2:93:af:8f:c9:7e:70:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AF:9D:E6:5A:59:48:4E:EF:8F:B5:06:75:A1:2C:6C:7B:CC:F8:8F
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:89:d2:17:11:42:9f:8a:3a:06:2b:4d:c7:55:82:d7:42:99:
1b:5f:33:7c:a4:4a:1a:3d:84:eb:0e:6a:a5:61:fe:a7:e2:1d:
71:48:5a:4b:09:c6:ee:d3:3e:60:aa:e1:01:bd:99:0b:6c:1a:
f6:bd:9d:cd:ca:a0:52:95:41:d6:90:fe:47:59:75:c3:c6:2f:
2d:13:ad:b5:b7:07:a2:72:2a:90:36:cb:6a:62:8c:46:84:d7:
8a:50:47:24:40:42:37:c6:f8:6c:23:9e:ee:bb:62:2b:33:d9:
15:77:95:8a:e4:91:7f:d3:f8:0c:c4:cc:86:99:bb:43:c8:46:
75:58:4b:f2:50:aa:cf:85:be:c4:9c:2e:45:42:28:8c:f5:c9:
45:cf:d6:37:dc:01:14:71:af:c6:2d:d9:4f:86:c1:f3:a3:9b:
5c:60:83:e0:77:d5:a0:a2:68:72:fc:fa:a7:a1:34:5d:71:7a:
4f:f6:e0:0e:59:82:9c:1d:5e:91:00:2d:aa:93:49:5b:50:1d:
79:af:84:6f:42:33:48:d9:dc:1f:f7:b0:3c:96:88:47:4e:57:
20:1f:58:af:c7:dc:b1:62:28:cb:6c:a2:11:88:d2:1e:db:91:
78:50:4d:9d:27:e7:2b:7f:ce:ae:20:ef:d2:47:fb:bf:df:e8:
4d:9c:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:05 2025 by rpki-client