Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: bA45HBhRkfBlaIQEMCwNpJmXCSKkaUi59EfyAUP4T4Y=
Subject key identifier: 89:53:48:93:88:56:70:CF:CA:66:D5:FB:A4:C8:EC:0C:E7:46:55:7C
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 01989034D857EB6C7207458BFAB90BB50F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 06EC
Signing time: Sat 09 Aug 2025 19:00:38 +0000
Manifest this update: Sat 09 Aug 2025 19:00:38 +0000
Manifest next update: Sun 10 Aug 2025 19:00:38 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: /Ra1gTMZkygCRzFc+vFZBdbSzq92qvelBqsdsF5eYms=)
2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:d8:57:eb:6c:72:07:45:8b:fa:b9:0b:b5:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Aug 9 19:00:38 2025 GMT
Not After : Aug 10 19:00:38 2025 GMT
Subject: CN=89534893885670cfca66d5fba4c8ec0ce746557c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:d6:57:3f:9b:f3:04:93:7b:0e:4f:d3:89:
96:72:f5:7d:a8:e3:94:15:1b:42:4c:d8:10:0e:31:
8d:4b:9d:88:02:ea:b9:1a:4f:2c:1d:6a:50:22:10:
7a:aa:84:7d:f5:cc:f3:d6:1d:a8:f3:2f:2a:d6:6e:
40:b5:5d:df:50:02:3c:9a:44:ca:8e:4e:88:cd:c1:
69:67:af:cb:34:a8:98:e7:ef:c1:d7:5e:9d:5f:ff:
30:fc:97:9b:75:f7:06:66:c9:98:5b:09:7b:8f:ce:
7d:f2:45:71:2a:c5:d7:93:c6:c9:a5:63:11:e1:08:
23:64:c0:e4:94:a1:c1:57:4b:23:b7:51:90:ee:65:
b2:c1:8a:e6:5d:f3:94:7a:7c:b3:cd:a9:52:d2:72:
a1:93:1a:f6:59:5d:90:2c:41:aa:9a:fa:1a:0e:17:
cb:c0:8d:56:75:f1:e3:3a:d9:f0:5e:dd:aa:60:61:
54:e3:ca:65:6c:32:77:69:25:97:b5:3f:fe:56:d1:
9b:b0:30:e9:5d:63:d2:6c:06:b6:f3:3d:8d:c6:94:
58:77:7c:2d:f5:b5:2e:81:85:1a:d0:ce:90:20:e2:
fe:dc:cd:0d:b8:89:64:ac:ac:01:d6:09:44:08:6e:
1c:c1:ae:0e:02:33:8a:d5:f4:3e:68:92:57:36:d3:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:48:93:88:56:70:CF:CA:66:D5:FB:A4:C8:EC:0C:E7:46:55:7C
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:75:8f:bc:e0:6d:12:2f:a8:6c:ba:03:dd:51:15:d1:e0:01:
da:9f:be:6f:77:e2:95:e2:6a:df:e3:b2:8e:ca:33:3a:cf:e7:
42:b3:68:35:0f:eb:35:39:37:55:18:c2:44:d5:53:10:e0:89:
9f:fc:b6:f2:46:0c:b6:11:8e:61:2a:a5:18:70:56:3a:29:d7:
09:c9:28:72:a4:a8:8b:bc:2b:ed:53:b6:fc:bd:65:ed:c7:b0:
f7:72:9d:9c:ef:05:9a:90:4d:45:8e:99:7a:50:b1:69:6e:0b:
59:58:15:32:f8:ff:c3:7e:80:4a:1e:9f:e6:49:22:1b:a1:3f:
e6:92:a7:1e:5d:93:66:ac:0c:21:a7:f3:a9:74:d0:8e:ed:84:
62:5f:b4:32:e1:60:cd:09:41:42:b9:75:2d:ee:da:cf:48:48:
bb:70:58:26:71:0a:df:59:94:11:db:8b:44:bb:69:80:76:c8:
03:c3:0e:bd:03:63:49:a6:c9:d4:1f:aa:1d:d9:a0:31:8d:9c:
46:a9:e7:a5:67:36:0a:1f:06:c8:da:e3:c7:1d:b4:11:0d:61:
e2:c6:83:cd:54:76:5a:3b:86:e0:2d:b3:87:c5:b3:7f:8d:69:
be:43:0e:9d:9c:0c:e6:70:97:82:f6:10:24:4c:74:c1:f2:f8:
28:40:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:11 2025 by rpki-client