Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: WLVKnpLSG+SwWmON7MSHoJ+xTTUCgfriiF/RRMxaSyQ=
Subject key identifier: 53:0E:B0:34:2D:FD:4A:E8:A5:2A:7A:FE:C6:82:BA:4F:F8:C9:C3:25
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 019876AC9F617F0D86A36C38C3C0C0AE56DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 15AB
Signing time: Mon 04 Aug 2025 20:01:21 +0000
Manifest this update: Mon 04 Aug 2025 20:01:21 +0000
Manifest next update: Tue 05 Aug 2025 20:01:21 +0000
Files and hashes: 1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: RSkPBoBzjkNmAc9ZNcEH3XQvxAMEw5jYOUpF0WCX7qM=)
2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:ac:9f:61:7f:0d:86:a3:6c:38:c3:c0:c0:ae:56:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Aug 4 20:01:21 2025 GMT
Not After : Aug 5 20:01:21 2025 GMT
Subject: CN=530eb0342dfd4ae8a52a7afec682ba4ff8c9c325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:4a:96:92:3f:eb:67:3b:66:bf:52:8c:bd:
ff:cc:27:36:f8:ff:72:64:8b:cc:6e:1b:2d:7e:8f:
d8:11:93:5d:6d:3f:15:e5:f7:10:bf:99:89:68:66:
37:51:b8:78:1e:4e:e3:8d:07:fc:5d:dc:a5:0f:ba:
db:3a:88:09:29:b3:d1:31:bd:38:ee:53:2f:16:44:
fc:fc:31:d2:e3:67:3f:ab:03:13:0b:6d:24:9b:eb:
eb:35:89:1d:c9:6b:88:ae:ef:1e:83:ca:9e:da:13:
e7:9a:3d:5f:44:6b:7b:b8:74:ce:6d:ba:86:1f:58:
5c:52:e7:c8:bd:9b:81:19:7f:65:90:37:d6:2b:16:
ca:0e:26:77:5f:ed:da:4a:81:82:9d:90:7e:3d:db:
31:c4:55:af:9b:f3:ec:1a:98:4e:99:f3:f1:68:8e:
c8:d5:78:16:80:72:43:62:98:52:e8:f4:bd:84:99:
5a:aa:58:87:0f:61:f5:d7:87:3c:b1:de:6e:4b:1d:
92:4c:38:87:09:6f:13:63:ee:cb:b6:e7:80:d8:3b:
99:a1:8d:41:3f:72:05:30:57:67:22:44:8f:97:d3:
4e:28:04:0d:28:f7:3e:47:bb:df:0f:91:f9:a7:ac:
4a:9b:ef:42:c2:29:41:b6:d1:b6:74:58:82:42:36:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:B0:34:2D:FD:4A:E8:A5:2A:7A:FE:C6:82:BA:4F:F8:C9:C3:25
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1e:db:6c:22:d8:12:63:e9:fc:ad:c9:d0:da:3d:6d:3b:f5:
d1:c8:c5:01:9c:d5:90:c3:06:20:ae:b7:d0:a3:fc:b6:96:9d:
a4:0a:b5:d3:0c:6a:9a:e9:42:32:72:39:3f:1a:19:bf:bd:83:
5f:e8:98:a2:d8:c7:46:4b:84:98:51:58:f8:a9:66:1d:9f:1e:
5f:ba:21:e6:47:b8:7c:14:ee:3f:5f:91:c2:45:14:84:65:f2:
80:64:f9:b7:6d:00:64:7a:ee:eb:79:a6:10:b0:00:77:d7:79:
91:b2:25:7d:cf:d4:28:06:b9:29:f1:76:3a:4b:9c:65:4c:fd:
b8:84:32:55:6a:5f:e1:a3:38:7d:99:6d:e2:19:b4:63:60:b4:
33:1a:68:46:95:18:27:6b:bb:5a:0c:c7:c1:0c:2a:53:72:32:
cb:36:22:0d:96:1f:82:01:a0:00:ed:05:d2:59:f0:8a:36:23:
27:0e:41:6b:aa:85:0b:56:ef:94:ba:bb:10:81:ff:1f:e2:e3:
0c:bd:04:5c:10:2b:87:f9:dc:5c:52:e5:a7:58:49:2f:bd:89:
61:a2:5c:e5:11:00:8d:72:5f:9b:b9:5a:f6:f4:61:5b:9d:b2:
12:32:46:af:81:87:81:29:b4:2c:8d:e4:03:bb:f0:1c:42:67:
7a:16:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:34 2025 by rpki-client