
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
File: 0aiWnX4yy_knZkstxDa5bnFJpis.mft (raw, json)
Hash identifier: ZrI0J25yyqR55VAu2QEpRapizrsWntMSPVLZdB2d4m8=
Subject key identifier: 49:F7:7F:67:E5:FA:3B:3A:CE:B7:B3:E3:70:BF:B1:69:08:BD:3E:90
Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Certificate issuer: /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Certificate serial: 01988BEA00F04158D89801F5AF2A906A8203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
Manifest number: 0F5A
Signing time: Fri 08 Aug 2025 23:00:25 +0000
Manifest this update: Fri 08 Aug 2025 23:00:25 +0000
Manifest next update: Sat 09 Aug 2025 23:00:25 +0000
Files and hashes: 1: 0aiWnX4yy_knZkstxDa5bnFJpis.crl (hash: DNyp11A7aPzmc16Pu2bRKIDXL9/bznEFxaQBSSUQ4HQ=)
2: p1fyn5poKGi3v6udklaZLK6DaPs.roa (hash: ksuBLRSUua1zFmd4JmcnhcAsP8MWyD8OR/dcK6d/pkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:00:f0:41:58:d8:98:01:f5:af:2a:90:6a:82:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Validity
Not Before: Aug 8 23:00:25 2025 GMT
Not After : Aug 9 23:00:25 2025 GMT
Subject: CN=49f77f67e5fa3b3aceb7b3e370bfb16908bd3e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:65:10:58:71:9f:8e:5c:17:4a:90:0a:10:
9c:07:5e:94:b1:0f:f1:b4:b0:c1:56:bd:8f:aa:92:
bf:6f:7b:c2:44:dd:83:60:85:df:52:2d:5d:90:d3:
ee:00:91:06:ef:8f:3e:48:a8:b3:87:5e:78:45:64:
98:68:db:55:6c:70:9b:1e:01:e5:25:dd:11:dd:22:
3a:7f:ed:8b:1d:86:0e:60:41:ad:20:1c:38:e5:0a:
3f:ed:94:4f:05:47:6c:5d:2f:6c:4f:ce:98:bb:ae:
6a:37:80:16:62:02:f0:e9:20:0e:c8:cf:94:5d:4a:
d8:46:e5:13:7b:36:7b:06:ae:6c:83:1b:b4:dd:0f:
20:e8:93:d3:4b:12:08:a9:a6:80:f7:06:6e:49:ec:
2c:df:eb:76:84:68:0d:f9:4c:44:13:c1:82:a0:72:
68:27:a1:b0:3c:14:3b:7a:fe:12:a7:c4:10:7d:50:
0b:72:fc:75:b1:0e:d2:3a:f8:e9:11:4c:3b:99:ad:
ec:75:70:9b:83:27:37:a5:4e:ae:3d:9e:a6:ac:ec:
d0:c9:ea:5b:7d:a4:20:09:9f:7a:91:aa:e8:2e:27:
e8:02:66:36:39:80:87:e2:6f:5b:6f:74:7d:d1:de:
0e:55:85:c8:1c:c6:73:b5:d5:4a:80:de:ce:15:b6:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:7F:67:E5:FA:3B:3A:CE:B7:B3:E3:70:BF:B1:69:08:BD:3E:90
X509v3 Authority Key Identifier:
keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:01:ab:97:f1:74:33:cc:4c:7c:3d:3c:fa:ca:4d:dd:62:e2:
7b:c3:0d:41:d0:4f:5a:d2:11:87:21:35:4c:ca:ba:97:ab:75:
2e:14:40:a2:d8:fc:38:a0:c7:90:a7:df:c0:b0:97:f4:36:91:
0b:de:24:e2:9f:5c:4a:bd:a7:af:ba:13:e7:51:df:2b:d7:c2:
d8:87:54:d2:a2:77:9e:c4:f4:6e:9c:af:cf:ac:09:01:1f:c9:
0d:64:74:7d:83:7a:19:6c:e7:f9:00:b9:bc:0c:24:fd:b0:e0:
9b:4a:d5:5c:2f:ae:ee:ee:51:59:c5:c0:0b:23:4f:60:1f:c0:
d9:37:55:bf:97:98:14:b2:44:36:82:1f:1d:87:7f:b8:1d:67:
3d:1e:fe:e9:7a:0a:ce:49:5a:ab:ac:2b:82:56:a4:0e:e2:32:
fe:b2:9a:d3:07:30:16:10:18:13:40:48:d6:d7:d4:97:a9:f1:
13:99:cf:08:3f:a8:37:20:f1:d2:cd:49:96:8d:3b:ca:84:62:
8c:93:fc:1f:2b:83:61:84:11:4a:be:3f:ca:df:b2:5d:23:16:
1b:bc:c5:db:2c:01:7f:d6:f5:c5:d7:3f:bf:c4:0f:d1:49:f4:
dd:d4:f8:ec:e6:22:19:3a:3e:1b:e4:e1:1b:04:4d:88:69:a9:
56:0e:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:42:48 2025 by rpki-client