Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: 6tXbEPT6UZeoFfhwEq3ybPmqKX80XP2S6FUpm0sjIbM=
Subject key identifier: 25:72:82:BF:AF:C3:3A:08:96:02:5B:7C:AA:D2:93:5D:55:31:9B:7A
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 01987E9D0CF74C7E8478E8D743CBBDA5DBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 09:01:18 +0000
Manifest this update: Wed 06 Aug 2025 09:01:18 +0000
Manifest next update: Thu 07 Aug 2025 09:01:18 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: VmCJhXpBqkLEnlSDe499YdH5RQ7zud/y0UCc0I1d0KI=)
2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9d:0c:f7:4c:7e:84:78:e8:d7:43:cb:bd:a5:db:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Aug 6 09:01:18 2025 GMT
Not After : Aug 7 09:01:18 2025 GMT
Subject: CN=257282bfafc33a0896025b7caad2935d55319b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:64:61:35:0e:d8:dc:62:e8:c6:87:de:96:
79:9c:ac:02:a9:6a:ec:44:8e:a6:95:3d:63:92:6f:
b5:83:c0:18:97:c3:6c:f9:6e:1c:f3:09:87:96:1c:
30:02:66:4d:88:84:04:c0:fb:81:bf:6e:e9:64:d2:
83:e0:2a:d2:93:1f:1e:63:44:bd:d6:c3:bf:29:62:
55:6e:e6:64:76:8f:b9:cf:f5:c1:55:96:1b:46:fd:
56:37:a5:f2:38:7b:f2:58:b3:eb:32:9d:d6:42:52:
b9:13:11:96:3d:56:ae:30:32:06:9b:b9:a8:81:b7:
29:58:27:ac:16:f5:b0:23:2b:16:80:78:ed:dd:68:
a9:7f:5e:d8:0d:d7:5e:31:9c:13:6c:fb:a6:dd:f7:
80:9f:b9:63:ed:f9:cb:99:29:4e:a4:ce:bd:f3:59:
b4:73:fa:0b:71:94:ec:24:72:89:b3:d5:e9:bf:b8:
ec:b1:59:93:67:35:ca:bf:4b:3d:60:c7:81:df:17:
65:24:97:9b:d6:14:ef:b8:a2:72:a5:af:98:97:95:
49:1c:2f:c8:f5:fb:18:30:83:0c:42:12:1c:ea:a3:
50:16:65:7b:a4:5e:c0:a7:88:42:39:3c:69:fa:17:
05:b5:c9:2c:b6:ca:05:c8:5f:ac:8c:b6:27:19:a5:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:72:82:BF:AF:C3:3A:08:96:02:5B:7C:AA:D2:93:5D:55:31:9B:7A
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:dd:22:f0:2e:da:e0:62:d7:c2:a9:e6:54:9d:6b:5c:1c:9a:
cc:76:6a:64:39:87:b7:3a:15:9a:1e:6d:96:fe:22:4d:06:54:
85:ae:b4:f1:65:3b:b8:28:d6:41:95:9f:1a:02:1a:55:ee:db:
c8:37:3d:6b:4a:3e:b7:a7:a3:b5:0d:f4:2f:50:8a:2e:d1:5b:
39:fa:4a:34:11:ba:87:6e:03:f4:1d:9a:ee:0e:2b:fd:78:76:
4f:df:1c:ff:19:df:ba:d2:93:c3:15:0f:20:c2:1b:a7:41:78:
0c:76:71:8f:f1:32:f4:2b:e5:76:37:2d:2c:33:5a:27:2d:e8:
fb:da:fc:24:5b:d4:48:4a:38:34:dd:61:fc:4b:e3:f1:40:6c:
f4:94:e7:f6:4f:7c:d9:14:20:6e:aa:b5:82:8f:52:29:26:34:
3c:a9:12:e2:15:7b:67:5e:e3:5d:c7:92:49:ca:21:3f:69:96:
64:61:0c:f5:34:57:4f:48:a3:48:a8:1e:e5:2e:f2:46:46:08:
40:ba:2d:8c:6f:3e:2b:69:e6:ed:1a:64:61:0e:d4:aa:c7:87:
13:01:5b:52:7d:da:c3:da:fc:43:67:ef:61:2f:a9:48:bd:a4:
0a:0a:ba:b2:dc:09:61:34:04:c8:44:32:59:41:66:34:7b:6d:
73:8f:44:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:18 2025 by rpki-client