Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File: ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier: 2iCibeVbw3Onzqy5tt+8g+f8uP1+9uO2jXm0d5yk8cE=
Subject key identifier: 52:4C:C0:F0:6B:D3:82:9C:8D:81:C8:4E:79:87:08:4B:03:B7:96:00
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial: 01987450806DE4127A383DE7118642CDB0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number: 0EEF
Signing time: Mon 04 Aug 2025 09:01:29 +0000
Manifest this update: Mon 04 Aug 2025 09:01:29 +0000
Manifest next update: Tue 05 Aug 2025 09:01:29 +0000
Files and hashes: 1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: Q1LGthBBqB8KWxTpbWoHxB6WBgJynZPk5PdWVsFdBis=)
2: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (hash: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=)
3: Qetcf0dQacmnDzzLj6Br0uoMaiI.roa (hash: kfWLgyOV8y1YMkD0xHciwqgNJz90NpBbtolieL+YMGs=)
4: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (hash: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:80:6d:e4:12:7a:38:3d:e7:11:86:42:cd:b0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
Validity
Not Before: Aug 4 09:01:29 2025 GMT
Not After : Aug 5 09:01:29 2025 GMT
Subject: CN=524cc0f06bd3829c8d81c84e7987084b03b79600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:6e:e5:ca:99:e4:0a:8f:c7:58:86:44:d2:
b0:66:45:fd:fd:1f:92:ba:ae:f1:ac:83:68:50:7b:
26:59:0f:16:00:57:7e:cb:64:b0:b1:86:bd:92:ff:
63:ed:28:99:7f:78:36:72:d2:32:fa:2d:fd:17:cb:
a4:2a:5d:2e:db:91:af:2b:14:23:dd:32:f3:1e:2c:
8c:a7:c5:5d:d0:cf:dd:3d:52:8c:23:e1:7f:3b:99:
0c:5d:f8:37:7d:4e:4d:bd:d1:30:b8:77:af:38:4a:
b7:a9:ea:99:6b:1e:ff:10:de:66:5a:eb:3e:cf:5d:
f8:76:b1:29:e7:9f:a7:da:a8:af:33:86:47:fc:d3:
1d:57:29:10:a8:03:22:e0:bf:8f:3e:7a:e6:82:43:
22:38:3d:a6:90:54:ae:b4:8f:2f:1d:6f:76:5b:15:
f7:38:1b:ea:b2:e5:0d:32:72:cd:43:7d:03:16:0b:
33:3b:93:e7:7e:d7:e3:43:21:a7:35:40:8e:28:73:
c0:28:33:0b:b9:53:74:f1:b2:60:2b:af:8a:89:31:
e7:28:d3:28:e3:31:5d:52:70:18:e2:c1:11:0f:41:
fa:9b:fd:ae:20:65:15:9e:60:cf:95:74:58:b1:90:
a5:a2:08:78:1f:8b:3c:11:7f:a8:0b:69:83:73:69:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4C:C0:F0:6B:D3:82:9C:8D:81:C8:4E:79:87:08:4B:03:B7:96:00
X509v3 Authority Key Identifier:
keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7f:df:ed:f0:28:c4:c0:bc:b6:ff:a5:18:6c:2f:13:b0:9e:
7a:85:25:39:ca:b1:64:44:bd:51:81:8c:0f:de:08:01:bd:30:
79:2f:1a:df:be:0a:de:ff:2e:23:8b:9c:75:a7:a7:a0:aa:46:
bc:f1:04:8d:40:7b:79:e3:18:74:a9:be:22:2f:21:45:57:f5:
a5:b5:70:d3:73:5a:36:52:0f:e2:62:e6:0c:5b:5b:f0:7c:3f:
e9:8b:ce:94:24:e1:7b:a9:14:36:0a:2c:e2:65:66:66:2a:3f:
fc:8e:0c:8f:31:60:58:4e:9f:79:6a:c3:02:5e:c4:6e:b8:4f:
2f:9f:f2:69:eb:11:02:14:b4:20:e6:41:94:64:2d:59:a2:30:
6d:1d:c1:71:f3:68:9a:ee:22:fe:db:cf:d6:9d:0c:8d:14:47:
32:47:0f:43:d8:bd:b6:ca:22:b7:05:ed:16:bb:bf:1c:f9:8c:
15:37:8f:ce:72:6a:e2:d2:73:57:71:6d:1a:14:c2:ec:12:56:
fc:13:ef:e3:fb:fa:f9:9a:8d:fd:d9:3d:2a:17:dd:28:9b:c2:
c0:45:14:8e:67:03:f9:af:89:4b:c8:51:4e:99:b9:23:5b:4d:
77:21:02:0c:8a:eb:d5:a9:90:ad:b9:20:18:8d:79:1f:0c:04:
a6:49:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:58 2025 by rpki-client