Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
File: aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json)
Hash identifier: Y0FxL/9TmGOPoN3dAcUN+jfLj6o2sCipcJ1vjDzQUWo=
Subject key identifier: 86:D0:CB:84:7E:3D:10:6A:C8:82:AA:D4:09:F0:7F:BF:51:11:A3:A1
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 019874500208CBE6DB52581BB9246223C58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
Manifest number: 1624
Signing time: Mon 04 Aug 2025 09:00:57 +0000
Manifest this update: Mon 04 Aug 2025 09:00:57 +0000
Manifest next update: Tue 05 Aug 2025 09:00:57 +0000
Files and hashes: 1: NUwDMl0uceCiZ1NG2N5fFGq-BY0.roa (hash: W5ChUYN7fI8J46aNSrBpqKGe97TpyG1Z0u4eXPpkx48=)
2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: nS+yeAUwEQeX6M3v2N00YSPTlOj9/qzi8LKXcWwvTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:02:08:cb:e6:db:52:58:1b:b9:24:62:23:c5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Aug 4 09:00:57 2025 GMT
Not After : Aug 5 09:00:57 2025 GMT
Subject: CN=86d0cb847e3d106ac882aad409f07fbf5111a3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:88:96:7c:96:08:69:b9:7f:71:41:61:af:
d1:97:4c:91:9e:6d:3a:6a:1a:4c:dd:ee:a0:f4:22:
0f:45:b5:2d:60:7d:56:13:16:8a:71:94:85:e0:f7:
ce:28:f6:1f:8f:12:d5:1a:9f:d4:08:b5:9a:e3:84:
b9:c5:2d:b2:e8:c1:73:86:af:81:13:6f:05:73:a0:
af:cb:e7:4e:b3:7e:77:48:f2:26:47:f5:b2:19:cf:
41:d9:f6:23:1e:e5:5c:8f:73:07:0a:0f:08:88:55:
92:fb:ab:31:a4:a2:be:49:63:a4:5d:f3:a5:59:7b:
3a:ad:7b:74:90:a4:52:36:14:ea:49:86:fc:cf:22:
e7:51:67:89:95:50:4f:cc:5f:1b:40:dc:d5:2b:2f:
04:64:4e:51:78:46:18:93:a0:15:19:85:8f:f5:95:
90:ba:e4:37:d4:15:b9:a7:bb:3e:ac:59:4d:50:61:
df:89:4b:c0:e1:f6:63:36:29:d2:9c:e0:e0:3b:14:
29:00:e7:9f:1a:e1:ed:c1:12:db:b2:f2:1d:d7:c0:
fd:53:78:16:e1:e6:ae:70:1a:af:bc:af:8d:82:ed:
52:35:ba:37:9c:65:c9:10:c9:ae:f7:cf:48:97:ae:
09:b5:e5:37:08:b4:01:34:9b:d4:b1:d1:b1:d4:0c:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:CB:84:7E:3D:10:6A:C8:82:AA:D4:09:F0:7F:BF:51:11:A3:A1
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:cc:12:2a:e0:63:3c:e6:ae:b9:08:ab:81:df:59:2e:4a:
e6:6e:18:84:a5:8f:f1:a0:4b:c3:58:2b:e4:e3:fa:92:89:db:
36:fe:3a:47:9e:e1:39:12:85:70:c7:5e:0b:17:c3:a1:54:6b:
17:69:9a:dd:83:90:1f:e3:aa:99:95:a5:09:39:23:4a:2d:58:
b3:81:60:8f:e5:72:82:e3:19:51:98:30:28:19:0a:9d:b5:e1:
a9:3b:7e:8d:7f:17:be:9b:5e:f6:66:4d:f9:33:58:6b:74:a0:
e2:a7:63:e1:3d:11:68:2d:67:15:f8:d7:ad:d7:63:1d:4a:3e:
b3:04:89:bf:a8:7a:23:9c:b1:07:cc:50:0c:5d:6f:85:90:46:
49:55:4e:88:55:a5:d6:74:61:96:f2:a6:36:ab:44:98:b5:51:
fa:44:7d:dd:2b:7e:c0:e6:3f:48:3a:fb:41:f6:06:0e:37:0e:
f4:0a:96:38:a8:0b:dc:b1:b5:66:02:bf:bb:d9:fa:a5:1c:e3:
e6:85:61:31:4d:1c:86:94:ef:d8:6a:15:72:58:2f:67:ad:1e:
ee:bd:36:2c:c6:3d:00:ce:cd:83:69:a2:f3:27:b8:31:e4:9d:
af:8f:02:62:2e:b7:d5:de:e4:15:be:37:15:0f:9f:1e:97:f5:
42:2f:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:23 2025 by rpki-client