Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: VwBHz/dpIIaCcr4ej2L4DzqinPQ0sfMgRt32bPqAS38=
Subject key identifier: F2:36:FB:EB:65:0D:CC:81:D4:5C:2F:5B:53:40:1B:0B:B2:F7:55:C5
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 0198925AAB9F9041481CAEEECD662248D2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0918
Signing time: Sun 10 Aug 2025 05:01:12 +0000
Manifest this update: Sun 10 Aug 2025 05:01:12 +0000
Manifest next update: Mon 11 Aug 2025 05:01:12 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: ULWbFlKyM/Ybpe38HnZDnAoOggHceOGtKCJyGBKHG20=)
2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:ab:9f:90:41:48:1c:ae:ee:cd:66:22:48:d2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Aug 10 05:01:12 2025 GMT
Not After : Aug 11 05:01:12 2025 GMT
Subject: CN=f236fbeb650dcc81d45c2f5b53401b0bb2f755c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:84:46:0e:91:40:f3:70:c7:a5:51:11:55:
8d:ec:eb:6b:e6:4d:29:cd:04:20:47:33:50:0f:cc:
cd:84:62:e0:27:43:67:34:29:11:a2:1d:4e:38:40:
e5:54:89:4e:f5:7a:27:8c:f9:33:38:a4:2b:e0:1f:
54:51:35:38:99:95:ac:e1:41:43:aa:9d:8e:bb:d1:
27:d2:3e:d5:56:fb:77:74:0e:33:92:c9:7a:d0:2d:
f1:9a:13:4c:6b:a9:8f:e0:20:f3:33:90:77:79:c6:
89:91:10:06:b9:21:cb:76:4c:33:b6:2d:0c:95:39:
d3:7b:b1:33:7b:39:46:ae:3e:fa:14:b7:6b:7a:0b:
94:84:ef:ad:5d:8f:dc:d9:25:a4:68:89:10:6a:16:
55:a6:d9:81:2f:0d:86:86:8a:c0:96:d2:0d:83:ab:
8a:49:49:3b:c2:f2:50:34:cb:88:40:f7:9a:28:2a:
56:7d:05:65:81:a4:3e:01:bc:34:05:62:11:57:fe:
30:1e:19:87:56:81:02:ec:9a:95:49:e1:85:ab:46:
48:18:45:db:9f:2b:63:43:8f:f8:d5:72:44:ec:93:
7c:81:53:86:55:76:bb:7d:1e:8f:07:64:1e:95:61:
38:63:e8:4d:c0:bf:f3:92:ed:5e:55:ce:2a:47:17:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:36:FB:EB:65:0D:CC:81:D4:5C:2F:5B:53:40:1B:0B:B2:F7:55:C5
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:cb:9c:d4:18:48:02:dc:e7:ff:56:c3:12:37:29:76:97:
4d:00:95:6a:14:54:58:7f:11:2e:b9:32:06:3e:29:d5:24:1b:
42:e0:e2:e5:dd:b7:51:61:ff:c0:de:8b:20:80:ee:6b:09:f3:
e0:da:ec:05:fc:71:80:b2:99:57:60:6b:1f:dc:90:8e:1c:89:
1b:37:81:a5:8f:e9:de:8f:0e:19:2e:77:85:9f:2c:69:fc:9a:
52:8e:a6:8e:ab:ba:0a:7d:c7:76:75:f9:8d:45:cb:a2:88:82:
69:74:07:4d:62:70:ef:12:03:57:ed:ad:c3:05:49:0c:91:d1:
94:2f:8e:22:d3:45:0b:b6:0c:cd:ea:fe:26:63:f3:8c:02:9c:
f2:d5:18:83:0a:1b:ce:59:85:66:bd:c5:08:7d:58:27:10:42:
c0:62:43:19:9c:d1:2a:ae:1d:a9:8c:7c:76:e7:c1:ce:1c:f8:
73:44:8a:72:35:15:1d:9b:72:c7:6e:08:ca:32:6c:dd:0f:71:
14:59:f3:1a:74:3f:c2:2d:4d:01:73:4a:ae:1e:fa:b1:84:d3:
cb:3b:13:65:a3:14:1e:c2:81:68:73:b0:65:88:4c:ac:1f:de:
18:52:a6:2b:56:0c:30:46:28:9e:7a:5a:ca:0a:5c:8d:b6:d4:
9b:6f:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:34 2025 by rpki-client