Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier: WHPs7b0UKrcnH4s4RoXSJKppMf1F5mtRDctFt0XD5Uo=
Subject key identifier: FD:E2:00:FA:32:33:36:2C:48:4D:82:4E:43:B3:00:E0:DE:FA:B1:E9
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 0198960065866472633ECDA2D56A0AD179F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number: 0201
Signing time: Sun 10 Aug 2025 22:01:04 +0000
Manifest this update: Sun 10 Aug 2025 22:01:04 +0000
Manifest next update: Mon 11 Aug 2025 22:01:04 +0000
Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: b8GpjQhX7CHSFu2fa12wTL+1obg0H66+MEgg0ws5IR4=)
2: uFe0wHxAH2UJDFtywnXN56bE3x8.roa (hash: 9rxLZS+5H9kGmYpmtTMn6ZZUIBXYa1LvDlimXlk6PXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:65:86:64:72:63:3e:cd:a2:d5:6a:0a:d1:79:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Aug 10 22:01:04 2025 GMT
Not After : Aug 11 22:01:04 2025 GMT
Subject: CN=fde200fa3233362c484d824e43b300e0defab1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:b4:b5:21:00:f9:9b:47:d2:cc:4c:8f:6a:
5e:0c:46:d9:7f:01:4c:f9:ae:6f:cc:1c:94:9c:c9:
71:e1:a6:1c:85:ce:e9:0c:40:3f:97:68:00:4a:b0:
71:39:cd:62:a6:3f:fb:9e:9e:9c:76:e7:1f:d1:c8:
9f:8e:e7:ac:7c:f1:8a:1b:e7:8b:56:67:00:f8:0b:
f5:7c:c5:de:b4:0e:89:c7:0c:aa:69:e4:5b:2d:d2:
56:f1:a2:39:65:77:4e:b9:12:ba:a4:4d:1e:1f:e3:
38:39:38:41:42:2e:61:cc:39:73:98:ec:74:36:ae:
7c:38:df:c2:c7:7d:d2:94:fb:53:d2:59:7b:00:6b:
9e:52:2c:f8:e7:c7:eb:93:6a:55:e2:73:65:3f:66:
50:7f:c7:d6:b8:9a:8c:86:5c:9a:d0:9f:8b:4b:40:
44:05:ac:d6:f6:d7:02:1f:02:30:0c:29:01:37:57:
3c:0e:67:43:a6:e4:37:f4:c3:64:c1:4a:a4:92:1f:
e4:f9:40:92:74:da:1d:2e:d1:06:8e:43:34:56:95:
4a:0c:95:18:3c:b5:2f:ed:8c:9b:f9:de:d8:58:08:
62:33:86:96:43:6b:3c:53:ea:1f:b7:a7:af:85:76:
ff:31:78:a6:f8:70:44:2f:b7:95:7d:12:72:8d:65:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E2:00:FA:32:33:36:2C:48:4D:82:4E:43:B3:00:E0:DE:FA:B1:E9
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:66:c5:4b:38:aa:47:18:70:d5:d1:ef:b1:b0:95:40:8b:60:
18:ee:0c:72:db:5c:d4:6e:31:6e:01:43:f7:9e:32:83:b8:6d:
99:fd:be:fe:a2:47:3a:cd:30:03:31:7d:b1:cb:a2:7a:55:7f:
cf:ca:b7:bc:1d:bc:f4:2a:74:4b:d9:cc:66:09:66:5a:41:66:
27:32:d0:74:5e:8e:9c:50:f9:50:62:30:bb:90:1a:f0:65:68:
72:ce:28:80:9c:6b:97:e1:fb:83:9f:37:8c:4f:90:19:8c:bb:
48:ab:ea:ab:4d:94:2b:2c:17:fe:31:18:2e:28:4a:79:59:45:
00:28:c0:73:30:e0:33:f3:ea:7f:f5:f5:a9:27:20:5c:f9:8c:
b9:5b:b1:35:78:c4:6f:a4:4d:db:d2:0e:f4:d4:33:da:a0:0e:
7d:78:39:12:73:5b:ff:83:d7:1c:aa:d2:d0:05:b4:c7:cc:9c:
f0:8c:47:56:ea:ad:1e:e3:c4:00:de:54:7c:80:2d:60:a6:49:
74:69:39:c3:b9:5b:bb:cd:73:66:16:00:2a:4a:bd:24:bd:a1:
ac:33:da:f7:8a:82:80:a3:0d:97:2c:6e:8c:8f:f1:83:8f:d5:
d8:6d:07:c7:56:3b:60:7f:b0:d9:e1:87:c2:4b:8d:25:ea:db:
05:04:1b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:36 2025 by rpki-client