Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
File: AahezixTn1hQ-nAfLUWiEn3IZ1U.mft (raw, json)
Hash identifier: nB+YmmBp6C2QZcSFMT3MQM7rOgV07bPzub2lyZbp5dY=
Subject key identifier: D2:03:80:BA:66:C8:5F:E2:90:1E:9A:5A:B9:40:B8:C0:2C:EF:3E:AB
Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Certificate issuer: /CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Certificate serial: 019877C08B7BEF7510E09B23BC04E8203F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
Manifest number: 08BE
Signing time: Tue 05 Aug 2025 01:02:43 +0000
Manifest this update: Tue 05 Aug 2025 01:02:43 +0000
Manifest next update: Wed 06 Aug 2025 01:02:43 +0000
Files and hashes: 1: 1YtqoFQLtfGDiVmHDelz4DRg3EU.roa (hash: IK9E4boh47Pzwtuw3Las8hTZNUl+rwA5t6hlkkr2bx4=)
2: AahezixTn1hQ-nAfLUWiEn3IZ1U.crl (hash: b2ZKn15NvzpRcid9wqkmTGdKzyfnanipO+0NtDygXEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:c0:8b:7b:ef:75:10:e0:9b:23:bc:04:e8:20:3f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Validity
Not Before: Aug 5 01:02:43 2025 GMT
Not After : Aug 6 01:02:43 2025 GMT
Subject: CN=d20380ba66c85fe2901e9a5ab940b8c02cef3eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:f2:dc:e6:ad:24:57:e3:a0:4f:da:36:94:
e5:bd:d4:c2:9d:9d:6b:22:83:67:83:26:f6:a9:fc:
23:86:38:79:d6:4b:cc:2d:b6:da:ac:42:09:f5:96:
45:5c:28:15:85:d4:66:d0:65:29:0f:2e:ab:e2:1b:
6a:5b:78:f2:0f:92:cd:bb:a1:e9:9a:08:b4:47:19:
b9:59:43:82:de:1f:21:f1:4b:ad:7b:c3:69:72:e6:
3f:0e:05:8f:86:54:6d:17:a2:64:3c:3c:21:91:78:
f9:60:cd:c5:59:d7:a2:21:a2:7e:99:34:55:5c:cd:
e0:14:3f:c3:dd:95:96:2a:bd:cc:29:6c:4a:fb:ac:
eb:ab:95:4b:54:6d:2d:b8:9f:ec:72:11:a9:2c:9d:
69:bc:4b:7c:ad:be:83:07:be:10:45:b4:f8:99:a6:
e1:0e:e7:c0:e3:7b:8b:3b:6a:22:9c:a8:74:28:70:
8d:0d:80:7c:3b:73:f2:6a:6f:41:58:b9:ed:d4:a2:
91:7e:d6:6a:b9:01:cb:4c:97:31:a9:8b:a6:75:9c:
29:01:a5:79:54:d5:20:e6:2d:99:8d:ad:54:80:ef:
48:e1:82:aa:ff:a5:f5:88:f7:46:cc:fa:d0:9a:16:
52:61:ca:1b:47:83:48:52:16:51:3b:4a:c0:66:c9:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:03:80:BA:66:C8:5F:E2:90:1E:9A:5A:B9:40:B8:C0:2C:EF:3E:AB
X509v3 Authority Key Identifier:
keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a2:ca:c1:21:e7:fb:0f:44:59:d9:a4:e4:d2:67:b7:ed:bc:
12:ab:c1:ba:51:52:0e:fc:e6:5c:5b:1f:b6:9c:5e:29:9c:13:
59:0e:02:5c:4c:39:97:91:5b:42:c2:63:d3:8d:57:d4:6c:39:
9e:41:b7:a7:9a:68:18:40:5a:23:81:03:68:10:0e:b6:1c:48:
94:0e:a1:9d:45:72:c7:be:5a:5b:8f:da:f0:fb:1d:93:fa:fc:
49:e6:65:40:7e:bf:e4:76:90:61:74:a5:ae:d1:64:5c:d4:e4:
af:28:c9:61:8c:d3:ad:c2:ed:ba:ef:ab:02:8b:56:39:1a:f4:
a1:18:df:60:04:ec:5e:87:0a:e0:9a:8c:50:3c:82:24:f5:fc:
cb:77:0c:93:4e:d6:19:27:4e:1d:cd:7c:87:33:8b:a1:6f:de:
34:24:26:88:95:d7:09:f0:ef:a2:8b:76:bd:db:b2:8e:04:da:
9c:e5:60:55:eb:c5:b1:f7:b1:d9:82:88:dd:46:58:ce:08:b5:
b2:79:39:eb:80:f1:f2:c2:2d:b5:c4:76:8b:9e:78:7d:ee:20:
24:56:44:21:42:a4:fc:1d:32:3d:5a:96:4c:bf:60:51:4a:0e:
6e:52:d1:da:c9:37:bb:e1:52:78:48:54:52:e4:5c:41:f1:33:
a9:3c:24:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:14:33 2025 by rpki-client