Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: EPHqu268jS7KjQFeh/xtjvdNilev2Uh64fCm35DrhRU=
Subject key identifier: 35:A8:4E:DB:F4:5D:70:6E:19:5E:FF:F8:F8:38:4D:67:92:E3:C8:DD
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 019893DB0B3DABE971DC7241C1D898C5E6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 12:01:02 +0000
Manifest this update: Sun 10 Aug 2025 12:01:02 +0000
Manifest next update: Mon 11 Aug 2025 12:01:02 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: 9khbBrBXEY9+id8gzRNtAcWmz+RL+eWR8Cjid1jNX2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:0b:3d:ab:e9:71:dc:72:41:c1:d8:98:c5:e6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Aug 10 12:01:02 2025 GMT
Not After : Aug 11 12:01:02 2025 GMT
Subject: CN=35a84edbf45d706e195efff8f8384d6792e3c8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:ef:77:ba:38:90:05:8a:a5:32:ca:c1:14:
e8:38:46:ae:b9:f0:7a:21:1f:b0:5b:8e:b9:f2:f5:
d1:35:8e:63:86:83:64:05:4f:53:5a:9e:63:4b:2f:
8e:58:ad:18:92:c7:75:3e:04:4d:eb:a5:8a:fc:23:
23:85:78:d1:0a:59:f1:68:91:10:3b:a3:d0:d6:a3:
29:a3:b1:08:ba:33:52:97:52:d7:9f:f3:f7:c9:1e:
6c:7a:3c:ab:5b:61:48:9a:26:d3:cf:2c:e7:73:44:
0b:e6:3e:60:a4:89:5c:ae:6a:e1:46:02:86:9b:91:
92:5d:31:a8:28:d2:c6:9b:c9:3f:5f:0c:87:27:77:
9f:90:1c:e6:f7:f8:8e:98:d8:37:68:07:f5:d7:23:
f0:c1:d2:c2:23:70:bc:94:4c:b5:17:79:4a:3d:a7:
fd:71:ae:0c:29:29:d1:d0:24:70:58:0d:9c:91:c9:
70:a3:7d:96:1d:44:e5:e9:b7:98:21:ba:45:b0:3d:
08:de:e2:c7:53:c4:ca:1a:9b:4a:34:20:3d:fc:10:
57:33:22:2b:38:3e:2b:11:be:ad:c9:bd:31:ea:bf:
3a:6d:9c:36:40:14:32:40:5a:14:28:ce:15:f4:ff:
78:13:b7:c1:4c:da:cc:9c:7f:cf:74:c2:70:d6:12:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A8:4E:DB:F4:5D:70:6E:19:5E:FF:F8:F8:38:4D:67:92:E3:C8:DD
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:72:69:2e:bf:46:01:39:8f:b0:33:db:6b:d1:56:15:c7:b5:
ba:92:3b:bf:80:0c:34:3e:b9:12:51:61:78:1c:7b:90:72:4f:
36:1a:b8:a9:98:73:63:6b:d4:af:4f:e6:bf:fc:98:a0:ca:be:
ca:2a:5d:73:0c:94:5f:8c:a8:b4:80:bf:7b:15:4c:99:99:ca:
ed:49:b9:50:ee:77:a2:3d:1d:f4:ae:9e:3a:40:5b:3d:26:fb:
70:31:91:a5:93:54:74:cb:78:7f:da:99:f3:9f:8e:1a:fc:43:
4a:4e:b1:11:89:26:22:38:7d:0e:04:cf:61:4b:21:a8:29:ee:
b7:85:6d:ef:28:12:3c:9a:da:9d:ad:f2:51:58:68:92:b8:d1:
26:56:93:54:10:c6:4e:51:14:6b:59:d4:fd:00:77:cf:73:0e:
56:f7:78:75:5f:4e:73:f9:c2:1c:ac:56:3c:a6:7e:4b:3a:15:
d6:bb:76:86:bb:ed:4f:84:59:d5:a7:f1:4c:e4:7c:f8:12:0f:
4f:96:4b:11:d9:99:18:d9:2b:50:84:bf:11:b5:c4:10:3e:bc:
7f:5d:81:ed:48:0e:90:7e:a7:65:29:c1:4d:e9:25:a9:b3:83:
8b:b1:17:e3:40:f1:3a:a3:04:61:63:60:24:43:29:14:b1:db:
63:c0:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:39 2025 by rpki-client