Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: /Gk98xIlkY1KfAoD1T5E5s3IZMP2oiKJqHUgnBCNchg=
Subject key identifier: C6:D5:8B:44:17:E4:73:6D:2F:6A:B5:BF:C3:AD:86:60:2D:34:88:15
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 0198857AE90F027C34A7373DFB86D3D945E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 0DE5
Signing time: Thu 07 Aug 2025 17:01:21 +0000
Manifest this update: Thu 07 Aug 2025 17:01:21 +0000
Manifest next update: Fri 08 Aug 2025 17:01:21 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: jAFuqKcPNMaNxuKDDMpIL7Qa8q4Rr4vqm4cLT0e7G3o=)
2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:e9:0f:02:7c:34:a7:37:3d:fb:86:d3:d9:45:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Aug 7 17:01:21 2025 GMT
Not After : Aug 8 17:01:21 2025 GMT
Subject: CN=c6d58b4417e4736d2f6ab5bfc3ad86602d348815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:1b:6c:27:ae:8c:7f:8a:fe:df:db:73:2e:
00:8f:df:f2:3a:e5:c5:95:d2:e4:8e:b8:d8:1a:ec:
a6:68:8e:7a:d6:df:d6:f7:3f:58:a7:18:f7:42:c2:
82:83:12:1f:1a:45:11:ba:de:7b:aa:4f:49:0b:23:
26:29:69:10:a0:69:b2:80:d6:73:93:d3:4a:31:16:
08:77:a4:b9:da:c2:cd:b0:7e:4c:72:e3:cb:02:b1:
11:22:a3:ab:87:67:9c:9f:d2:86:ba:d0:f5:62:61:
ce:ac:f3:0b:4e:2a:60:d0:21:9d:f8:f1:05:d7:3a:
c4:3e:42:da:3d:d6:53:ae:f3:a9:8c:7e:e8:3d:b8:
5a:ab:87:57:8a:75:be:ba:3f:1f:84:b1:73:90:1d:
6f:4e:e1:84:98:52:a5:f3:a6:61:bc:25:4f:81:c5:
8a:96:84:d6:e6:6c:b9:3d:c8:aa:39:85:b1:8f:4b:
04:d2:db:78:00:c8:ed:33:2b:9c:74:d5:6e:3c:67:
ef:9f:14:aa:a1:d9:5e:b8:b8:2d:99:2a:39:cc:39:
0e:57:d9:b1:50:fe:4b:bb:32:e2:fc:85:85:43:10:
71:ad:42:9c:03:67:39:72:51:e0:26:8c:94:38:4b:
6d:13:d3:c5:01:5d:c1:e9:3d:c2:fe:a3:78:86:33:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:8B:44:17:E4:73:6D:2F:6A:B5:BF:C3:AD:86:60:2D:34:88:15
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:65:fc:9e:11:53:2e:ca:43:b8:5d:9a:1b:fa:fb:18:8b:
5e:dd:fd:54:80:34:18:1f:a6:cf:d3:39:88:ff:ac:8e:9d:04:
57:06:25:49:bb:16:61:f1:b6:8e:b4:9f:1a:02:4c:48:b8:22:
1d:8a:88:1c:1d:5e:6b:f4:ce:e6:48:02:cf:d0:0a:65:83:7e:
91:c9:3b:28:c4:95:c7:8c:59:48:d8:4f:80:49:ed:4b:65:55:
4d:f3:15:86:ca:bb:81:8e:4f:7e:9e:a3:03:96:6b:e2:99:7c:
dc:df:fe:e4:37:e9:66:04:d0:b6:17:51:aa:95:fb:9d:10:71:
59:90:ec:4b:18:2b:d8:01:39:bd:ed:ab:a5:81:f6:a1:60:47:
a5:9e:0d:2a:a3:5a:76:d5:9a:95:ad:0f:49:f5:0d:bd:bd:e2:
42:83:11:50:ac:b3:16:9a:26:fb:d8:c2:b4:fe:d6:36:04:55:
8b:61:9b:e4:12:2c:a7:84:20:07:6d:0c:a3:ba:61:34:93:c8:
1f:3b:ad:54:8d:2a:1a:d7:33:21:72:93:77:84:fb:1e:9f:d2:
ec:5a:5d:64:9f:ef:e5:bb:eb:54:ec:f3:dd:30:b8:34:23:bc:
f4:d6:93:c6:59:8c:cc:8f:48:fc:56:51:53:ae:6a:68:15:64:
75:20:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:37:57 2025 by rpki-client