Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
File: AsSROCOjGf66InDhuiygnkNb1Vs.mft (raw, json)
Hash identifier: P8FcR8wJmcD+0s1juhnz6riG/aEZZ7b43KLeELpgwTk=
Subject key identifier: F8:E7:47:8E:36:F5:CE:5D:3A:F8:36:83:AC:95:34:03:6B:15:B8:2E
Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
Certificate issuer: /CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Certificate serial: 019873066D7FCC85DF78CE09C2E7F3A5D7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
Manifest number: 12CD
Signing time: Mon 04 Aug 2025 03:00:57 +0000
Manifest this update: Mon 04 Aug 2025 03:00:57 +0000
Manifest next update: Tue 05 Aug 2025 03:00:57 +0000
Files and hashes: 1: AsSROCOjGf66InDhuiygnkNb1Vs.crl (hash: edNjaZvLCwUC10xcd3MeByt2XXXhlXMcGWKnidk4ntM=)
2: zqiwP0xb8bytzAumv2YPA_fNwb4.roa (hash: zCaLlPBZ2WB2CsOiMiyWuvWQI6GwLJcAhYLvd/2+eA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:6d:7f:cc:85:df:78:ce:09:c2:e7:f3:a5:d7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Validity
Not Before: Aug 4 03:00:57 2025 GMT
Not After : Aug 5 03:00:57 2025 GMT
Subject: CN=f8e7478e36f5ce5d3af83683ac9534036b15b82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:48:78:3a:da:7a:64:a1:65:1d:3e:5d:19:a6:
49:62:d5:4f:28:0e:33:dd:6d:58:a6:56:9a:ac:76:
c2:26:e8:60:4a:70:6b:e9:ee:bd:09:e1:ef:aa:73:
38:35:ca:b9:58:95:9d:dd:4a:40:34:a2:1c:f7:65:
f1:dd:a4:36:7c:b7:66:18:3b:7f:45:a8:60:72:cb:
bf:cf:a1:93:9a:09:d4:65:8b:4f:27:5b:02:22:1a:
b2:f3:68:98:1d:1a:37:3c:75:fc:ae:63:21:bc:d4:
fe:5f:50:0d:76:55:15:a4:c4:f5:be:c6:fe:77:36:
b2:24:b9:0e:89:df:61:08:f0:63:0e:29:ac:8f:c2:
54:16:1a:04:2d:fb:97:4a:54:64:64:5c:b1:b5:3e:
74:2e:13:ea:37:05:ee:1a:05:63:50:20:be:cd:f2:
75:e0:e2:9f:ab:58:ee:eb:94:5e:c2:e2:a5:cc:82:
0b:3a:a6:79:a0:d7:5f:01:fb:b3:22:d6:a3:99:ee:
48:c8:8c:e3:f1:16:66:7b:03:d5:4e:09:68:70:ce:
28:f0:a1:f0:c2:32:02:a8:65:6e:fe:15:a2:2c:2a:
b9:ae:fd:69:bd:c5:45:6b:ed:55:32:de:dd:9d:7b:
f2:2d:eb:0f:04:62:14:9c:eb:62:db:a9:4b:9c:47:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E7:47:8E:36:F5:CE:5D:3A:F8:36:83:AC:95:34:03:6B:15:B8:2E
X509v3 Authority Key Identifier:
keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:42:5d:4c:b4:f8:69:c6:fc:b9:a7:9b:9d:ea:51:94:22:b5:
12:f4:b0:52:5d:44:be:5e:c5:39:49:2d:08:4d:da:b6:21:41:
19:39:c4:1f:c9:4f:f4:26:de:8d:82:df:9d:55:52:9a:1d:d1:
08:44:8b:00:ad:9c:bc:6c:12:45:cc:62:1e:0a:89:76:8e:4d:
15:9c:d1:d4:28:39:7c:6d:87:4c:10:d9:fb:c1:1f:3a:43:6e:
c9:f1:fa:2c:6a:e5:4d:99:a1:7c:f2:0c:14:26:2d:f9:14:74:
14:95:aa:55:ca:00:3e:f0:81:84:55:2e:39:0d:ea:77:7b:91:
c3:f9:b9:e5:46:6d:4e:ab:f2:19:84:f4:bd:07:b6:06:76:f0:
38:85:51:5e:97:bb:e1:7d:6a:e5:ed:fc:85:56:bd:c1:d0:64:
30:ab:9d:27:6c:21:9a:28:cc:b2:a6:1b:52:0f:34:c2:aa:1f:
f1:36:07:2f:a6:d0:c5:f9:b9:d7:84:98:6d:09:21:0c:48:97:
bf:21:86:60:6a:ad:f4:9a:c5:ca:81:9a:27:6d:a7:09:e6:8d:
2f:e0:63:43:1a:b3:50:8b:a8:ce:d3:1c:9e:c3:98:d7:58:13:
36:2e:ed:f0:ed:c0:f9:08:df:dc:c6:c1:f7:28:09:d1:69:64:
18:f5:56:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:05 2025 by rpki-client