Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: SrZ85742w2oFvXrbdZg5PCFWcTNaJ/cYj3f1Fb/hzhA=
Subject key identifier: 6A:3C:E6:E5:81:C0:12:EA:63:9B:FF:87:FC:74:71:01:55:9D:FF:BB
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 0198733D6E4685F3FD2210E2CAD0F23DF6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 04:01:02 +0000
Manifest this update: Mon 04 Aug 2025 04:01:02 +0000
Manifest next update: Tue 05 Aug 2025 04:01:02 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: 3oDQhO9sX+TY7UQ9IogW/LV1zprkuBmBjiFS+P6vk5c=)
2: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (hash: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:6e:46:85:f3:fd:22:10:e2:ca:d0:f2:3d:f6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Aug 4 04:01:02 2025 GMT
Not After : Aug 5 04:01:02 2025 GMT
Subject: CN=6a3ce6e581c012ea639bff87fc747101559dffbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:bd:f8:87:81:e2:30:ae:94:10:74:32:97:
1d:d0:f0:82:30:49:85:f2:6c:0a:13:7d:60:25:f1:
12:78:bf:0b:0d:f6:4d:14:95:71:34:61:20:56:1f:
e1:c8:56:86:6a:e8:fd:ef:ea:64:b3:9c:ae:55:51:
a0:13:d3:c4:14:97:5e:76:28:34:4f:4a:8d:7d:b0:
cb:7a:a4:58:1b:86:6a:de:12:17:6d:58:4e:12:2f:
ae:28:3e:51:f7:f0:3c:e9:27:9c:90:3b:e8:a5:f8:
57:e3:d3:43:2b:9b:b1:1d:3b:9c:dc:d0:03:ed:ef:
28:6b:78:e8:7a:71:9a:d7:f9:b4:4d:4d:8c:16:7b:
a5:87:0b:5f:8c:ce:58:18:31:48:f3:78:f9:36:34:
f9:97:8d:2d:f2:ed:33:88:d3:16:c3:ca:90:4e:b1:
31:dd:a2:03:20:54:67:c4:c9:80:f9:3d:bc:ab:48:
da:89:41:0a:2c:4a:ed:46:d0:db:59:8d:ed:23:e5:
5c:5d:62:d7:54:87:4f:64:1f:d4:ff:75:b5:20:df:
4c:c7:62:48:6e:9d:08:94:19:28:6f:8c:be:17:a6:
5f:d9:22:93:cf:74:c5:30:3a:49:f6:2d:3c:c9:ee:
3c:ea:56:48:45:37:f1:7e:9b:d5:b8:ba:cc:5a:58:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3C:E6:E5:81:C0:12:EA:63:9B:FF:87:FC:74:71:01:55:9D:FF:BB
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f6:33:d2:6a:0a:21:da:e7:14:35:25:17:51:24:bc:aa:e4:
7c:19:86:02:51:e2:25:b5:2c:ae:fc:bf:d5:6f:af:69:79:11:
a5:e1:8c:05:a8:bc:aa:64:1e:19:b6:8c:ce:bc:dc:2e:58:ac:
29:9d:81:3a:ac:08:1c:0a:b6:df:4d:f4:f6:4a:ec:be:b5:a1:
f1:f3:ac:c3:a6:70:60:be:96:4f:57:e3:fb:e4:08:7c:12:71:
22:c6:d2:59:c7:4a:52:3c:9d:15:51:e4:68:d8:14:7e:a6:b2:
d5:2a:53:e8:1c:1b:3a:05:8e:a8:9a:5d:f3:62:e6:a2:32:bc:
f6:1d:01:1a:df:82:a7:b3:26:1b:86:e1:6b:3f:4d:f0:0a:be:
63:fc:07:ba:29:6d:dc:06:9f:7a:ba:6f:5e:22:fa:b9:c4:bd:
3d:56:f0:8e:fd:47:a9:de:1b:38:ac:2a:01:24:71:9b:62:6c:
32:20:27:24:b5:32:c7:43:0e:bc:33:57:17:4b:2c:91:de:41:
18:5f:6c:98:df:66:75:5a:5c:55:06:32:2d:d6:bb:4f:04:95:
4a:a7:ac:4d:1c:04:a6:1e:e0:23:53:37:c3:b0:23:3d:2e:0f:
75:b6:0a:25:a0:70:dd:3b:8e:f7:28:ac:0b:d1:0d:84:de:02:
7f:56:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:03 2025 by rpki-client