Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier: Vubw55oVyxd0zwYRHa5IP2jVZGCXB3QgZYJ4/jJcv/c=
Subject key identifier: EB:FC:83:4D:CC:3B:03:94:72:D6:6F:8D:FF:C8:8F:E9:00:04:7A:F7
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 01987418BFEE7611212D58FAF8A650A363E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number: DA
Signing time: Mon 04 Aug 2025 08:00:35 +0000
Manifest this update: Mon 04 Aug 2025 08:00:35 +0000
Manifest next update: Tue 05 Aug 2025 08:00:35 +0000
Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: flYTeEBuAGU2ZKk/zSSOVhpqIDnsMNHptP7w2/ha0Bo=)
2: tFY_1oU9xNxzF5JnlbdrLi4cQ9A.roa (hash: Sxl+M0Cfp0KqUWFjQhEzTtXSwHwXwN4AdOusnlZXPTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:bf:ee:76:11:21:2d:58:fa:f8:a6:50:a3:63:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Aug 4 08:00:35 2025 GMT
Not After : Aug 5 08:00:35 2025 GMT
Subject: CN=ebfc834dcc3b039472d66f8dffc88fe900047af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:27:a5:62:a6:b9:80:db:5c:f9:0f:2c:f2:
2b:21:1e:a7:de:98:68:cf:27:03:df:26:89:7a:4a:
04:54:9d:0e:54:ba:bd:ae:a0:54:8d:55:2a:b6:74:
a3:52:da:4b:fb:3e:b8:09:c3:44:ea:14:80:f2:34:
bc:c0:fb:61:f9:b8:2c:a4:bc:04:d7:2c:71:e2:37:
31:96:42:11:8e:83:d3:6f:77:72:94:3a:2c:54:92:
da:a0:1c:b1:59:08:cc:08:9c:30:71:9f:9d:2b:26:
16:0b:38:c4:48:5f:a3:0e:78:a0:b7:0a:7c:50:20:
67:1e:17:23:f8:b3:0c:d7:a8:f2:fb:56:dd:01:82:
51:a3:02:9f:2d:ea:b3:4e:45:90:ba:00:48:cf:e4:
a9:70:3f:b5:0d:f5:c8:df:6f:45:ef:99:ac:b4:09:
bf:e1:79:43:4f:71:38:9f:07:c4:2f:2a:e0:09:9b:
d3:0f:6e:6d:fd:cd:c7:4f:0f:0f:01:22:0e:86:17:
9d:e1:51:fe:38:54:24:0f:77:be:ad:45:2e:8b:0a:
3c:71:73:1c:ea:f1:07:54:43:e5:ea:e3:b2:67:39:
79:a3:a8:f7:4d:65:48:f6:15:b9:46:07:e9:e8:ce:
6a:83:f8:c8:55:e1:16:0f:d4:44:81:1b:28:ad:c0:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FC:83:4D:CC:3B:03:94:72:D6:6F:8D:FF:C8:8F:E9:00:04:7A:F7
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f3:5d:d2:23:a3:9c:c1:2a:08:29:d9:07:c5:52:54:96:4a:
84:4d:0b:5a:c9:0e:63:31:82:4e:3b:ae:4f:1f:76:55:11:28:
19:16:10:a1:d1:80:77:b2:f0:d9:f9:2f:4d:56:39:70:66:34:
07:c5:fd:e0:d1:c1:2d:a8:3e:8e:03:76:d1:1c:85:ba:69:84:
87:94:ce:0d:51:46:4d:1d:8a:d4:fb:f5:de:41:bf:d1:d8:d4:
29:ea:84:f9:66:ff:06:c6:40:5b:bc:e9:ee:7c:e4:b0:51:7a:
22:59:28:c1:eb:c1:8d:d6:9b:50:04:83:b8:4a:0f:d6:b0:c8:
40:8c:ac:57:f1:07:9d:76:86:c8:79:44:54:f9:51:63:15:da:
31:c4:1f:95:6e:8f:33:50:80:4a:8f:87:a2:c1:70:6d:ee:50:
97:c2:19:27:f0:38:8b:fc:43:26:ad:96:76:67:50:b1:21:c4:
74:b7:cd:b2:7a:80:4e:8a:a6:06:ec:63:db:50:0a:4f:fd:bc:
f3:e3:c6:bd:aa:bd:78:0d:99:4d:4f:47:45:b0:9c:db:2d:35:
31:ca:86:ac:4c:3e:e4:27:75:51:f3:13:e1:b4:f3:c5:1c:92:
38:cb:52:a1:08:1e:44:dd:df:c9:9a:df:70:7c:b5:75:00:fb:
6a:7c:0c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:26:29 2025 by rpki-client