Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: fIyH68Dyci5BXWdmuukQUzcoX+c1mMbRIfoKDOY9Pxc=
Subject key identifier: 90:AB:52:55:82:01:AB:5A:16:C0:9A:6F:C8:E3:78:04:A6:38:19:56
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 01988EEB81A3866BDBB6B2B1104FCF9427D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0AEF
Signing time: Sat 09 Aug 2025 13:00:55 +0000
Manifest this update: Sat 09 Aug 2025 13:00:55 +0000
Manifest next update: Sun 10 Aug 2025 13:00:55 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: FfpPniU8p38pFqGoB0u/biglEaudwNrclyU1oqK8v7U=)
2: GESlc56i4-gdhOlM9uZOfgy8aCc.roa (hash: 9R3PoH4Q7y5D2LVnthi2TWzvIx4vLCuEUl/il2GVgqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:81:a3:86:6b:db:b6:b2:b1:10:4f:cf:94:27:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Aug 9 13:00:55 2025 GMT
Not After : Aug 10 13:00:55 2025 GMT
Subject: CN=90ab52558201ab5a16c09a6fc8e37804a6381956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:75:12:92:0a:fe:f1:09:ad:10:85:9e:ea:
e2:d7:e4:98:df:3f:84:9f:ec:57:bd:26:db:79:7a:
87:5b:d2:16:d2:80:de:8f:52:45:10:27:de:af:41:
0c:ae:4d:41:2c:43:f7:cb:e9:d6:79:9f:ae:9b:7d:
97:c7:cf:74:9c:0d:19:0e:ef:50:73:89:e1:2b:47:
dc:8e:0c:e1:0e:e9:94:34:c4:64:33:15:f6:1e:8b:
9e:10:15:49:f3:6f:a9:84:8f:f1:cf:69:8b:3b:79:
ef:b9:b5:85:1f:9a:d9:2a:ed:97:1d:e5:49:c6:d7:
95:0a:e5:c6:79:8d:83:f0:15:4d:fd:7c:8c:d4:b4:
ce:7a:f7:df:fd:d5:23:c6:df:e1:40:48:4f:1b:ca:
a6:e2:87:e1:09:15:04:55:70:da:9c:2b:82:65:8e:
6e:90:7e:b7:c9:bd:3e:b4:6e:95:7d:09:55:61:fc:
f8:2a:73:8d:64:60:75:b9:25:e4:96:b3:53:ba:e8:
7c:79:25:3a:7d:e4:51:5b:a9:28:4f:b8:a1:bc:5d:
30:ef:48:c4:c5:98:fa:bd:29:3e:ea:a6:03:f2:5e:
8e:45:cb:2f:b1:d1:fe:1d:23:39:75:a7:ce:c2:4f:
e8:be:f8:a0:fb:0f:37:c5:1c:b3:04:10:14:64:c5:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AB:52:55:82:01:AB:5A:16:C0:9A:6F:C8:E3:78:04:A6:38:19:56
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d9:0a:df:dc:18:4c:52:4b:de:72:0f:6b:5d:21:a8:db:56:
ae:b3:d0:be:84:ab:fc:76:c1:d0:54:aa:ae:c5:ba:e0:35:73:
d2:83:61:ed:e0:84:55:76:fe:fc:df:c9:5d:9a:87:95:dc:09:
6a:5a:a4:49:c7:cd:5a:df:25:33:e2:80:a6:30:8c:eb:2e:38:
78:a1:b9:ac:fa:ec:fa:32:13:7c:e8:3f:a5:8e:14:1b:c1:ef:
ed:9e:47:10:12:a2:c0:48:c8:92:af:a3:a6:87:58:fa:96:9a:
ff:12:41:5f:94:bf:43:e7:39:07:c7:18:8c:43:be:05:ca:cc:
4f:81:50:bc:12:e0:cd:4d:25:cd:f5:f6:73:72:10:d3:ac:9e:
51:a7:74:a8:1c:aa:96:ed:da:d9:c7:8d:be:66:c2:bd:09:c3:
af:db:f0:ad:f8:8f:31:ff:1e:c8:b0:02:9e:f3:76:90:46:06:
d9:3c:93:e1:e4:dd:5b:b3:23:24:b1:36:e6:a5:cc:fd:44:6c:
14:8b:11:b1:df:61:22:20:02:d5:05:d7:37:89:a3:72:e4:8a:
55:d0:c9:fe:2e:26:59:ab:3d:69:1c:5a:bb:3a:97:a0:89:37:
ef:21:fa:09:8d:b0:1a:47:cd:0d:2a:58:85:28:e9:6b:b2:f6:
09:6d:b1:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO64GjhmvbtrKxEE/PlCfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjAyNTk2ZDVjZWNlMzdkYzM0Yzg2MTA2NDU3OGZjNmRh
YTVlODYwHhcNMjUwODA5MTMwMDU1WhcNMjUwODEwMTMwMDU1WjAzMTEwLwYDVQQD
Eyg5MGFiNTI1NTgyMDFhYjVhMTZjMDlhNmZjOGUzNzgwNGE2MzgxOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydl1EpIK/vEJrRCFnuri1+SY3z+E
n+xXvSbbeXqHW9IW0oDej1JFECfer0EMrk1BLEP3y+nWeZ+um32Xx890nA0ZDu9Q
c4nhK0fcjgzhDumUNMRkMxX2HoueEBVJ82+phI/xz2mLO3nvubWFH5rZKu2XHeVJ
xteVCuXGeY2D8BVN/XyM1LTOevff/dUjxt/hQEhPG8qm4ofhCRUEVXDanCuCZY5u
kH63yb0+tG6VfQlVYfz4KnONZGB1uSXklrNTuuh8eSU6feRRW6koT7ihvF0w70jE
xZj6vSk+6qYD8l6ORcsvsdH+HSM5dafOwk/ovvig+w83xRyzBBAUZMVLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCrUlWCAataFsCab8jjeASmOBlWMB8GA1UdIwQY
MBaAFAEgJZbVzs433DTIYQZFePxtql6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUt
NDgxMTUxYWNmMzI5LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUtNDgxMTUxYWNmMzI5
LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNkK39wY
TFJL3nIPa10hqNtWrrPQvoSr/HbB0FSqrsW64DVz0oNh7eCEVXb+/N/JXZqHldwJ
alqkScfNWt8lM+KApjCM6y44eKG5rPrs+jITfOg/pY4UG8Hv7Z5HEBKiwEjIkq+j
podY+paa/xJBX5S/Q+c5B8cYjEO+BcrMT4FQvBLgzU0lzfX2c3IQ06yeUad0qByq
lu3a2ceNvmbCvQnDr9vwrfiPMf8eyLACnvN2kEYG2TyT4eTdW7MjJLE25qXM/URs
FIsRsd9hIiAC1QXXN4mjcuSKVdDJ/i4mWas9aRxauzqXoIk37yH6CY2wGkfNDSpY
hSjpa7L2CW2x2A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:29:23 2025 by rpki-client