Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: VAOSwcD3m0h0Ks8PycelD9D2oKArX1zlI6HvksKkp18=
Subject key identifier: AD:5A:98:6B:C5:CF:6C:70:46:BE:72:44:64:32:C0:79:3D:29:CA:05
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 019873E20DC222FF499A15A806F2BD466B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 1352
Signing time: Mon 04 Aug 2025 07:00:51 +0000
Manifest this update: Mon 04 Aug 2025 07:00:51 +0000
Manifest next update: Tue 05 Aug 2025 07:00:51 +0000
Files and hashes: 1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: av38X76EBIvmqgzIObVGGauCU9TAri+V4w5zgqUtflk=)
2: pXEOVL3s29ntjLGWnEad02SClcY.roa (hash: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:0d:c2:22:ff:49:9a:15:a8:06:f2:bd:46:6b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Aug 4 07:00:51 2025 GMT
Not After : Aug 5 07:00:51 2025 GMT
Subject: CN=ad5a986bc5cf6c7046be72446432c0793d29ca05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:c6:7b:23:2a:19:ef:a8:4a:03:c7:2c:ca:
75:2e:3a:8c:b8:0b:d9:14:a0:c9:49:f3:95:25:a1:
76:5b:76:81:e4:62:f3:3e:94:97:2f:80:3d:ab:aa:
49:00:a8:5f:dc:a5:3c:35:fb:05:36:db:49:b0:c4:
d2:2d:84:3b:3b:76:5c:89:5d:f5:9b:6f:20:57:70:
32:e4:7c:b2:06:f7:1a:b4:52:cd:f4:04:ea:e5:87:
02:cb:8f:1a:a3:83:4a:f8:93:17:9d:a2:2b:29:54:
cb:b9:47:64:0e:48:68:5e:b6:f9:b7:fd:e5:bd:b8:
67:66:34:f2:0d:99:a0:74:8b:89:64:31:27:41:15:
36:6a:b6:f1:eb:43:97:99:40:7f:55:1b:3a:4b:86:
aa:e3:8e:13:a5:df:bd:c6:31:1f:af:51:aa:93:0c:
be:91:3d:42:a4:78:59:40:5a:e7:90:8f:aa:ac:d3:
44:44:37:ce:2e:36:8e:b9:97:f5:78:b8:05:f4:a1:
a5:f1:a6:65:76:95:b3:2c:a5:53:29:38:68:3b:6f:
30:af:00:da:94:66:12:0b:1b:2e:16:6d:18:57:88:
9a:95:70:09:c7:10:c3:b8:07:aa:fb:10:c8:ba:a6:
f7:31:f7:4e:bc:a6:1e:00:b5:25:42:d3:d5:f0:88:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5A:98:6B:C5:CF:6C:70:46:BE:72:44:64:32:C0:79:3D:29:CA:05
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6e:a6:0f:e5:92:b1:b9:72:5a:74:91:4d:dd:6a:b0:3d:b4:
a0:cf:ba:3e:2c:26:b1:0e:c7:de:50:e2:d6:d5:4b:a8:f9:52:
54:b1:a7:5b:d3:17:7e:05:30:ce:6d:fc:39:db:53:c1:00:1c:
68:01:d2:28:b5:05:fa:a0:77:2c:fe:98:d2:67:91:02:60:a1:
73:e8:c6:1a:f0:73:71:d0:8f:63:b3:19:fc:cf:af:44:81:50:
68:a7:6a:0f:30:c6:f4:f3:29:c0:cc:10:2e:4e:c4:b6:74:6e:
71:a0:77:76:81:c3:c6:dd:cf:a7:66:f7:34:f8:6e:20:cc:fd:
ad:40:91:2f:91:9a:65:89:22:25:77:05:5d:b5:d1:9c:4d:aa:
13:b5:ea:49:73:fc:6c:f9:a2:06:f5:d3:7e:98:6d:4a:52:e3:
14:43:c1:3b:9d:ba:e5:a4:0f:37:50:59:54:6f:49:e1:29:a2:
76:e3:c2:e9:af:4d:3d:7f:53:f4:76:f9:56:bc:75:9a:de:8c:
c8:b9:c2:6d:d4:88:e0:a6:f6:c9:28:a1:03:82:47:73:56:e8:
a3:ee:98:d3:1e:16:23:35:50:8d:e7:ce:05:ec:be:69:b0:26:
f3:90:4e:c7:40:f5:ad:df:f4:e9:13:7a:65:0f:7d:83:59:00:
b5:3f:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:16 2025 by rpki-client