Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: oafapgDfKvxhsGaq0m0lzLnEw6DVV9cShm5lCJQ1GtU=
Subject key identifier: D0:AE:F7:0C:79:18:DF:11:B2:AE:1D:E3:AD:90:92:0E:A4:F1:EB:E0
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 01989411D67E757CB8F1C2EBCF4BCB42BC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0E8F
Signing time: Sun 10 Aug 2025 13:00:53 +0000
Manifest this update: Sun 10 Aug 2025 13:00:53 +0000
Manifest next update: Mon 11 Aug 2025 13:00:53 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: Fj+RzVvChaHX6YiDWpxPpxD7d70zkN8pPIsqi5nXf08=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:d6:7e:75:7c:b8:f1:c2:eb:cf:4b:cb:42:bc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Aug 10 13:00:53 2025 GMT
Not After : Aug 11 13:00:53 2025 GMT
Subject: CN=d0aef70c7918df11b2ae1de3ad90920ea4f1ebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:19:58:92:1c:43:57:d4:3b:05:7a:5e:df:
72:ed:0f:9d:f7:2b:71:c9:02:96:2b:77:98:57:3a:
3e:ba:bf:54:8b:67:24:60:14:9a:20:b3:f7:d6:9a:
ff:2f:78:16:b5:8e:f0:b8:09:ec:5d:ab:4b:9b:0c:
9a:b4:b6:a1:90:e0:dd:6e:f9:aa:37:4a:a2:fa:f4:
08:ec:79:51:7e:1f:49:90:17:18:2e:82:b2:f0:98:
6e:9e:17:5c:f3:43:45:12:f7:3e:35:a6:d5:2b:2a:
0b:db:b9:6c:02:6a:06:71:47:fc:96:44:28:37:36:
09:1c:18:96:22:9d:7a:f2:a1:11:28:9e:6a:38:3b:
d1:e8:57:63:9e:fc:49:b8:e9:ef:21:71:b1:0f:a3:
71:e6:0e:96:16:9d:e5:a1:f8:c0:d7:7c:ee:b5:38:
7b:59:4c:d3:41:be:69:74:0d:a4:e1:35:ec:11:7c:
c4:6d:34:6d:09:5d:af:d1:73:52:7c:82:f2:e8:71:
5d:6a:c0:ef:51:e2:8b:e3:43:68:e7:8e:f5:5d:10:
18:cc:e9:06:31:98:a4:cc:e4:a7:c8:c8:20:76:3f:
be:14:8e:a0:16:49:d8:27:e6:6d:b0:3f:d9:2e:57:
2e:f5:b7:b2:c6:76:da:fd:f9:8c:27:09:ba:e6:6a:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:F7:0C:79:18:DF:11:B2:AE:1D:E3:AD:90:92:0E:A4:F1:EB:E0
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:78:c8:f8:2e:30:95:d6:93:2f:8a:fd:ef:62:37:45:91:a9:
4b:a3:31:f8:90:c6:73:e5:38:78:da:f8:c1:c4:4d:f1:d2:d4:
99:15:4d:64:e8:07:21:d7:11:4e:6a:9f:73:83:c2:f2:be:e9:
a0:5b:88:82:6a:fe:b6:dc:ca:b3:b2:ab:2c:fb:e8:82:62:b4:
7e:00:22:cd:32:97:7f:2c:27:7b:9c:7b:47:2b:87:12:6a:8b:
f4:b5:c0:b5:fa:73:b9:55:b9:28:34:16:d2:d1:aa:b5:c2:53:
e6:35:d5:46:37:ef:9e:e3:58:ce:68:d9:3f:e4:50:19:a0:82:
a4:c9:75:d1:d6:f6:f5:c2:56:be:1d:c8:7f:45:64:b8:ac:ca:
8c:e2:5b:c0:ff:f5:1e:ba:57:c2:16:73:66:5b:98:e8:d8:28:
2d:2b:a8:ef:94:d2:22:ef:f5:e8:d4:e2:01:58:df:d9:44:2c:
95:42:6d:d2:f5:37:c2:ea:f3:99:fe:ef:67:bd:0c:ec:4d:7b:
e2:e3:db:ba:69:d5:b0:4c:1d:b2:d2:80:95:0b:42:28:0a:2c:
cf:25:ff:90:04:9e:75:ee:3a:de:07:79:18:25:c6:d4:67:43:
92:57:b0:c6:1a:7e:37:df:b2:10:80:31:e3:ed:7b:d3:f7:00:
23:04:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:54 2025 by rpki-client