Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
File: ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft (raw, json)
Hash identifier: eOwa15gR91h1ezG5qdN8Q0zClr3CpaNm7bhMk3cwxME=
Subject key identifier: 57:CB:EB:42:F2:D9:76:D0:72:70:35:6C:4F:2F:C5:D6:35:A7:FA:3B
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 01987298F138A1ABC45FC1CDA35AC83139C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 01:01:22 +0000
Manifest this update: Mon 04 Aug 2025 01:01:22 +0000
Manifest next update: Tue 05 Aug 2025 01:01:22 +0000
Files and hashes: 1: ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl (hash: TqsiPKwPpTN6L78fDtB5vJfpvzmEihQnLvpuldUvWaw=)
2: o_9E0nw7QGxoWCZk4QqgNmZyf9E.roa (hash: 1PmMo5WtlImsrpdUj9rWhTyVCZubOTGK5D/YW7g4Mss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f1:38:a1:ab:c4:5f:c1:cd:a3:5a:c8:31:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Aug 4 01:01:22 2025 GMT
Not After : Aug 5 01:01:22 2025 GMT
Subject: CN=57cbeb42f2d976d07270356c4f2fc5d635a7fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:b6:25:45:5e:a2:2a:bb:85:9f:b1:51:cd:
77:cf:3e:10:23:54:41:5c:2a:a3:56:a6:ec:8c:ff:
c8:16:c0:35:0b:c2:2a:0d:b1:71:ad:33:73:e6:23:
21:42:7b:f6:0a:e2:4e:73:de:9a:f1:53:5f:cb:45:
ce:bd:63:99:a2:24:2e:d1:a3:ad:4c:c5:ed:53:2f:
bc:10:32:d9:e6:eb:c9:fd:8e:f0:20:60:9d:a8:52:
48:dc:0b:a1:bd:57:5e:11:ac:cd:ff:aa:82:0b:5c:
ef:37:f4:1c:fd:ec:61:84:ce:7e:bd:2c:76:a1:37:
01:3a:d2:e1:8b:c6:b7:c3:45:0e:95:be:f5:d1:21:
4c:a9:dc:75:47:76:de:0d:2f:21:49:a1:51:48:d6:
80:3c:53:05:77:94:1b:3d:78:b0:e9:c4:0b:36:0a:
9d:65:af:e4:87:36:e6:ad:39:f3:ba:0c:42:97:b2:
ea:a3:af:c3:28:24:c1:66:a9:33:aa:2c:e6:d1:d6:
09:d8:68:36:bf:99:51:34:cb:77:ef:15:24:04:24:
38:e0:d3:65:e4:7e:36:39:06:1d:e1:78:98:a5:a6:
83:c3:3a:8a:d0:6b:b4:d2:a3:eb:ad:8d:ee:fd:01:
60:6b:24:e9:38:8c:95:62:c3:39:37:a5:47:c1:d6:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CB:EB:42:F2:D9:76:D0:72:70:35:6C:4F:2F:C5:D6:35:A7:FA:3B
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:96:0b:5e:9e:11:e0:e1:6e:ee:e6:16:c1:b2:de:9a:bc:2e:
fe:81:71:75:ad:de:8b:b8:84:70:bc:3a:d3:ad:5e:0c:18:40:
d8:69:8e:7d:5e:2c:3b:b6:3e:6a:cc:e6:03:fc:3f:70:45:27:
8f:58:07:ed:fa:8e:b1:bc:3e:05:2d:a0:4e:0e:a0:38:9d:8a:
6e:3e:96:64:3d:a3:e2:b5:82:02:46:a4:cb:2a:33:b8:17:a3:
4f:68:a2:1e:02:a7:f6:d3:15:4e:ad:34:6a:b9:47:7e:19:e7:
27:1f:5f:f0:1e:3d:c6:50:e9:4a:1d:78:1f:92:2b:ff:a0:73:
50:8b:71:8f:70:a0:d6:c9:82:ee:53:1e:30:9a:97:f5:78:54:
a2:a0:1a:c2:6f:88:c7:e5:a1:83:95:bf:89:ba:24:89:00:64:
aa:f1:a6:73:ee:34:92:34:fc:43:fe:5d:47:27:58:a5:62:a6:
4b:55:23:c5:18:6c:96:9a:3e:c8:89:8b:a8:43:61:d4:29:8c:
e2:78:7e:62:89:82:23:6c:bd:3e:2a:2f:d4:72:c4:93:9e:e8:
b7:2b:9b:8a:fa:3b:ac:00:83:8f:72:38:79:2e:51:3a:8d:f1:
71:5f:9d:c6:57:b4:8b:64:24:cb:0f:5a:c5:7d:0e:4a:93:04:
bf:3e:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:51 2025 by rpki-client