Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: +fLx4dEEt1niKRQGqGOiK2A7MG4zlzbnTKK9ev7EQWU=
Subject key identifier: B9:BB:21:A3:42:7C:A2:E3:3F:95:91:94:BC:BB:1B:27:92:E4:1C:8A
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 019894485568687C86AE1AAF5A6DF5A1E1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0B9C
Signing time: Sun 10 Aug 2025 14:00:24 +0000
Manifest this update: Sun 10 Aug 2025 14:00:24 +0000
Manifest next update: Mon 11 Aug 2025 14:00:24 +0000
Files and hashes: 1: 7TO4e8lijWMlxMa1DByMrXD5jOw.roa (hash: cDwhkc8bh/DTSiy1V4KBQ3fFakHZ/iT/sbs5LQBmNws=)
2: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: umQko9fM3W6uFZHjaCa1VG9JM4i9Msq+rxVDZWlhtTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:55:68:68:7c:86:ae:1a:af:5a:6d:f5:a1:e1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: Aug 10 14:00:24 2025 GMT
Not After : Aug 11 14:00:24 2025 GMT
Subject: CN=b9bb21a3427ca2e33f959194bcbb1b2792e41c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:25:5c:e1:8b:ac:5b:75:07:2f:33:e6:a0:
95:9a:b5:2b:e4:24:84:83:fc:6b:9b:7e:b8:e3:20:
e8:b6:7e:55:00:98:f3:ee:08:d8:ba:35:58:22:76:
18:b4:1d:9f:e2:ab:e8:c4:86:ac:b7:5d:43:60:45:
c0:65:66:ba:8f:33:1e:9f:72:f2:79:0d:b8:52:31:
f3:6f:06:50:45:19:07:7f:bd:3b:dc:28:09:38:59:
c5:ce:cd:80:0a:d6:05:61:dc:28:ed:f8:99:39:63:
08:4d:23:d0:da:55:86:10:b1:d2:c4:1b:f1:6e:00:
c6:22:ad:65:82:55:67:f2:ca:31:a8:8d:71:e4:4b:
36:f0:50:1d:c2:c6:68:99:d8:e8:e5:e7:24:e4:e8:
8f:c3:59:00:09:a8:f3:ca:f1:74:1a:89:96:bb:1c:
e1:ef:69:9d:8f:ec:58:03:dc:a7:ac:bc:49:8f:d3:
c4:b8:91:ed:4c:ed:8a:57:fe:d4:b4:79:e1:30:cb:
ac:2d:0d:64:99:06:e0:cb:8e:07:ee:eb:94:6e:a8:
f0:0d:7a:ca:7f:90:a2:13:48:be:12:61:5e:4a:3b:
99:d6:2b:bf:62:60:4b:0e:07:24:27:41:8a:e2:bc:
91:16:fc:7e:65:70:eb:d0:68:d0:26:e4:a1:3b:6d:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:21:A3:42:7C:A2:E3:3F:95:91:94:BC:BB:1B:27:92:E4:1C:8A
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d8:8d:54:b6:52:bd:52:ca:54:d2:a3:fb:d1:ca:32:67:28:
ff:54:8d:c1:12:49:1b:45:36:5c:8f:03:56:78:ee:12:48:c0:
56:f9:ae:fc:fb:40:6f:38:82:f7:82:19:41:07:1f:ee:71:c0:
c3:bc:1f:6f:e7:bc:d0:ce:fe:1e:fd:34:78:cb:9c:6a:46:64:
6e:35:94:8d:f2:1f:5d:75:91:f5:47:a9:57:d3:2e:35:d8:88:
3f:dc:06:d4:78:ea:85:82:1a:03:f8:58:29:1a:1c:0e:2f:57:
e5:e2:65:d8:53:9a:e0:69:16:34:68:70:b7:ec:a6:86:dc:5f:
c3:37:08:98:88:d7:31:d0:41:d2:02:6c:12:93:46:8c:f8:4d:
fc:d3:cb:e4:d9:e1:d2:25:75:3e:c6:97:23:59:60:c6:f9:9b:
2f:34:ef:09:18:f0:b6:fd:a8:7c:99:1d:76:55:f3:e6:eb:39:
34:51:d1:7e:73:bf:69:19:e7:ab:ed:e9:07:f0:61:4c:65:30:
ed:8f:9b:c8:c0:d0:ae:7a:75:70:4e:62:dd:56:21:06:b1:fa:
25:ed:1c:85:7e:5c:be:28:b6:f4:6d:88:16:66:64:5a:90:38:
dd:1a:8e:0c:d2:13:aa:ee:76:75:bf:32:3d:a6:c2:33:92:28:
dd:a7:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:59 2025 by rpki-client