Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
File: AlO5GdddwgTZyjjbeyihdINLOz0.mft (raw, json)
Hash identifier: +5YCIeOg4Qn9Di3MFN7BkVVptL+DtVU9id9eb6QdMSs=
Subject key identifier: 65:C0:45:9D:7C:8F:4A:B0:32:09:E8:DE:2A:CC:92:D2:A8:BB:79:D3
Authority key identifier: 02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
Certificate issuer: /CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Certificate serial: 019879AF1476422384B46ABC2A65D021ACAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
Manifest number: 063A
Signing time: Tue 05 Aug 2025 10:02:53 +0000
Manifest this update: Tue 05 Aug 2025 10:02:53 +0000
Manifest next update: Wed 06 Aug 2025 10:02:53 +0000
Files and hashes: 1: AlO5GdddwgTZyjjbeyihdINLOz0.crl (hash: cFQGNl2x8wyXyoURY0P5zDRITz9CcT5pZwSavc5xvqk=)
2: I1gkA5k4uMZob0hM5xQHdEl5cUo.roa (hash: EhH3dWMV5US/hFp8+LiY1Hpa7FxODhxAHT3s3CfUej8=)
3: V0uScWgIlxby8-atCI31gs7gIls.roa (hash: N1Pj+HryVhCS5We4uz7FXYt4pnqlzxV+cQWuG5ETX4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:14:76:42:23:84:b4:6a:bc:2a:65:d0:21:ac:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Validity
Not Before: Aug 5 10:02:53 2025 GMT
Not After : Aug 6 10:02:53 2025 GMT
Subject: CN=65c0459d7c8f4ab03209e8de2acc92d2a8bb79d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:ae:51:00:6f:b0:30:12:28:f8:4c:06:57:
37:8f:92:af:f9:f2:16:35:32:39:39:80:71:66:31:
55:83:90:89:18:3a:b6:6c:3f:f8:05:b5:c6:bc:8c:
a9:8f:93:70:41:c4:b4:18:db:16:27:b8:36:ca:fb:
b4:30:a6:5d:4d:a0:e6:a6:74:9f:ce:f2:f5:ce:9a:
56:9d:bb:4b:4e:b2:e9:90:cf:f7:89:82:e8:09:ab:
58:ae:89:20:ca:d2:05:7e:16:be:99:bd:89:f2:44:
1e:a9:2d:21:3e:76:2a:9a:3f:ef:19:d0:4e:66:57:
47:b3:e8:98:25:41:02:dc:01:ec:15:f5:e5:d5:44:
5b:48:49:81:1c:47:0b:8d:72:21:d2:e4:dd:cd:c2:
2f:2d:e1:2e:30:5b:f0:34:99:4a:6c:59:9f:aa:31:
c4:c7:8d:26:9d:66:59:ea:36:ab:0c:2d:04:76:a4:
39:bb:69:d6:3e:c1:d5:6c:52:94:6b:71:35:91:b2:
39:dd:db:1c:f9:c7:34:ad:5c:67:e3:dc:8f:7a:9b:
fa:39:86:5d:30:85:84:25:62:45:f0:ed:fe:ca:17:
e1:65:3a:d3:a7:57:56:8e:e1:c0:cd:da:92:51:9a:
d5:f6:31:7e:22:63:e6:3a:7c:2a:22:32:5c:b4:6a:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C0:45:9D:7C:8F:4A:B0:32:09:E8:DE:2A:CC:92:D2:A8:BB:79:D3
X509v3 Authority Key Identifier:
keyid:02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a8:f9:2d:e2:00:4b:c5:28:eb:63:5e:89:5a:76:c2:fc:6a:
75:4a:ad:61:5e:82:ae:ed:c1:72:52:68:46:a1:b0:88:8e:30:
9a:35:2d:28:3a:0c:95:0c:b0:eb:8b:25:1f:3e:6f:2c:ce:6e:
57:cb:5e:3f:e9:81:09:99:f0:af:78:7f:71:f1:c0:96:a3:be:
6f:7c:db:f4:4b:e3:58:fb:5a:15:e8:31:24:b6:8d:cb:fc:2b:
51:2e:8d:8f:f4:de:53:45:3a:d6:a5:70:fb:1f:46:df:a3:93:
37:25:44:d0:28:a2:16:74:ec:7b:4a:18:61:22:dc:35:0c:63:
d6:0b:8a:fb:d0:e4:47:e6:b4:5e:6f:99:c9:bb:aa:ef:5c:94:
1e:a9:cc:0f:f4:79:d0:49:46:b8:d7:cc:db:c2:26:9d:44:6c:
fe:41:22:e4:01:05:e3:b0:b6:36:94:fc:31:d4:28:54:c6:d7:
35:a4:35:04:44:85:c3:9a:23:83:a3:8f:8c:4d:08:63:d3:1a:
a6:66:a9:57:c7:ab:8d:7d:02:40:d6:54:02:62:f7:f1:a4:0f:
67:d9:3c:ed:20:ed:f6:72:00:5d:a8:9d:93:a4:6a:d4:9a:12:
b8:33:ff:7d:85:43:b8:6e:8d:47:d5:eb:48:c9:09:26:32:f8:
1a:b3:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:46:14 2025 by rpki-client