Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File: ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier: p/7ffF4hMQcNdLaxzZd8vSO63XODPx7CmfZ4sj5h2TM=
Subject key identifier: 7F:A1:43:C0:5A:89:8D:3D:3F:55:C6:AD:DE:AA:21:5E:99:16:4C:9F
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 0198744FF689E4C20E0DAA7F61506EF7A817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 09:00:54 +0000
Manifest this update: Mon 04 Aug 2025 09:00:54 +0000
Manifest next update: Tue 05 Aug 2025 09:00:54 +0000
Files and hashes: 1: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: mVztCA679/lG+OsrTgVsb6IbYiuHpFjLU8aBlMImIS0=)
2: vtQmEnQvCzTxgKx6eoQDleSryN0.roa (hash: X99pd7WPnymxRoUriny009KnFNB5G5RPTZ3dWOg4RYg=)
3: zfevDRWTI9ElP_0JFPWcB5eiL-A.roa (hash: xu09TmX2/se2qxFKlwHjNcmA2dSMzqNt9raj3MmhER4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f6:89:e4:c2:0e:0d:aa:7f:61:50:6e:f7:a8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Aug 4 09:00:54 2025 GMT
Not After : Aug 5 09:00:54 2025 GMT
Subject: CN=7fa143c05a898d3d3f55c6addeaa215e99164c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:d6:c3:06:5e:f5:88:f5:42:13:ba:7d:6d:
04:f8:b0:20:5a:de:65:55:e8:9f:57:4c:62:a8:70:
1a:96:a0:fd:bd:c5:b0:67:ee:c5:84:92:9c:e9:d2:
5d:a3:3e:5c:5c:a8:3a:66:11:49:49:f1:92:5d:c4:
7e:94:68:7a:8a:60:91:2f:30:fd:fc:23:8f:4a:33:
c2:23:0d:4c:86:ce:3d:07:26:1c:00:75:83:ca:5b:
7f:a9:16:1e:d9:9c:fe:40:04:b7:7b:32:c9:d5:1d:
6c:b5:d6:80:fe:17:2f:22:3b:06:4f:ba:df:51:36:
ab:dd:54:48:83:b9:f8:ee:2e:33:65:96:d8:98:eb:
a8:91:f2:73:38:de:bb:e2:db:74:cc:e5:fe:b2:8a:
d7:c6:a2:d0:08:8e:58:28:8f:8b:20:1c:63:95:af:
c8:de:df:18:df:1f:48:3d:76:e3:71:d8:80:73:ea:
82:e7:53:9a:ef:e6:ec:ef:a7:5f:41:50:d8:b2:f2:
19:6f:47:d9:1f:13:cd:9b:e8:0c:b1:1c:27:b8:02:
3c:01:33:12:ac:ce:11:3e:d0:64:44:e5:4b:f5:3f:
13:3a:6c:a3:fe:d7:54:c3:1c:9e:dc:97:69:dc:d7:
f2:2f:53:73:93:ca:2f:19:b1:86:91:80:a5:3e:5e:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A1:43:C0:5A:89:8D:3D:3F:55:C6:AD:DE:AA:21:5E:99:16:4C:9F
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e1:96:84:dc:3f:64:7f:39:95:ee:bc:f9:97:6a:83:45:50:
2e:83:69:35:73:10:cc:bb:ef:05:80:ed:18:b9:87:9c:3b:25:
03:b3:83:6f:9e:54:52:54:cd:9c:94:68:7b:ab:10:51:2a:22:
27:68:1a:a3:28:16:a5:2d:3a:22:ab:f5:a9:0e:7f:d3:da:10:
96:95:54:84:8a:02:d4:98:d2:d8:d1:5a:6c:4b:09:80:e0:08:
40:0d:ef:dd:d3:47:54:3c:e7:d8:1b:77:a2:31:f9:86:2a:5e:
55:f0:45:a2:b1:56:c6:8c:a5:30:54:90:24:b4:98:12:db:a3:
38:10:46:5e:20:c5:56:fa:90:6d:d3:c0:5d:90:34:76:2d:f2:
65:eb:86:b3:6b:b8:97:26:43:e9:ac:c8:5f:d2:c2:96:e0:aa:
c0:d3:f4:36:80:64:d5:dc:e7:65:92:45:8f:08:a8:53:4f:20:
93:e1:e1:db:7f:15:a8:41:26:79:aa:44:63:d3:8f:85:8e:00:
f8:ec:86:36:f4:32:5b:a1:f1:b1:c1:df:76:c0:8e:d2:60:ba:
e8:1e:75:01:b5:06:b4:3a:44:1b:b7:ea:a8:90:c7:a8:94:3c:
73:9f:11:6b:81:74:99:d0:e8:80:37:75:e7:8b:3c:b7:68:ef:
32:ca:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:09 2025 by rpki-client