Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
File: a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json)
Hash identifier: dmCwEyWvDe9y+Sa0Pg0KSmObBgD8ywZr4VC6MDkM7MQ=
Subject key identifier: 3E:F3:3A:07:93:8F:9E:7F:2E:23:9F:4E:ED:D8:69:F3:F1:8E:36:0D
Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
Certificate issuer: /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Certificate serial: 019892FF6728598BFD847BF7BD4D0DF4166D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 08:01:08 +0000
Manifest this update: Sun 10 Aug 2025 08:01:08 +0000
Manifest next update: Mon 11 Aug 2025 08:01:08 +0000
Files and hashes: 1: WW1zYqOtAv6xpztxCe41pJBmBcI.roa (hash: ANkEAvSjUZh7Q55af7iPjLdQ2+UV7wXRW5HhuWBQ4lo=)
2: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: ZndnEk6mWeYlRby8QafJxIuTVfrLnraSAmLjy7p2i3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:67:28:59:8b:fd:84:7b:f7:bd:4d:0d:f4:16:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Validity
Not Before: Aug 10 08:01:08 2025 GMT
Not After : Aug 11 08:01:08 2025 GMT
Subject: CN=3ef33a07938f9e7f2e239f4eedd869f3f18e360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:3e:b1:1a:d0:c9:ed:d6:13:41:5b:c8:dc:
1e:ae:6c:cd:79:8f:61:d6:64:b9:89:aa:e5:44:42:
87:d6:aa:65:d3:68:3c:f2:b9:95:2b:19:e9:6c:27:
ac:5c:57:b5:e1:5b:34:55:23:0a:20:6a:97:a0:77:
d8:74:50:42:9a:7c:a0:12:fe:8a:39:0f:c1:9f:b1:
23:65:3d:ad:6f:4e:b9:6b:ed:42:c2:eb:05:ef:0f:
14:99:20:77:1c:70:39:08:7f:99:89:06:03:ef:ba:
7e:2e:d1:61:ae:cc:d5:f7:4b:3a:24:1d:53:6c:65:
05:61:6f:a0:5f:ec:44:5a:4c:80:10:cc:8a:a0:99:
0e:4c:56:52:61:ff:b1:ad:37:00:5f:7b:7b:66:65:
e8:f2:73:a8:18:62:d8:d2:ff:85:4d:21:41:f5:40:
44:76:96:0a:26:99:27:ae:ef:d5:3f:05:d7:94:12:
e7:64:ff:be:20:71:b0:1f:e2:94:2b:13:e9:73:dc:
04:b9:51:d8:e5:06:e2:66:22:08:cc:f5:dc:e2:c6:
f4:af:79:86:12:33:b9:09:89:cc:32:30:e8:7d:d8:
9f:05:14:bd:65:04:29:85:74:c6:a4:9b:fd:0c:39:
8c:e5:99:1c:27:82:33:25:90:07:ab:c6:c5:a8:17:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:3A:07:93:8F:9E:7F:2E:23:9F:4E:ED:D8:69:F3:F1:8E:36:0D
X509v3 Authority Key Identifier:
keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a9:19:e1:77:e1:0d:c0:0a:49:af:3c:95:53:bc:0c:7e:bb:
88:a1:6a:0d:66:46:98:92:20:79:86:73:d8:e8:c8:99:dc:49:
33:dc:e1:35:23:fb:21:a1:e0:a6:c3:bd:33:d3:87:02:e4:6a:
eb:a5:06:cf:cc:3d:9a:c8:16:63:3b:c1:d5:ca:0f:fc:05:74:
db:62:92:70:52:cf:89:e8:48:ea:13:49:98:a6:06:2e:66:00:
d4:ed:84:68:1e:77:a1:c8:fc:e6:24:4c:49:d9:53:98:9b:03:
55:4d:3c:33:4d:8a:d7:49:c1:2c:4e:87:42:17:90:e7:0d:3a:
19:7a:2c:30:d1:c3:73:ae:2f:76:36:d1:09:77:b9:fc:b0:35:
90:41:f6:97:20:1c:d3:19:00:4e:c0:61:2f:56:36:01:85:9d:
45:ce:b6:35:0a:fe:07:96:a0:5c:1e:7a:5a:a5:c2:07:c2:f9:
e7:8e:f1:94:fa:5e:e5:d8:42:67:b6:72:09:9d:d5:e9:f8:fa:
3b:a6:7d:dd:22:68:aa:c3:b5:38:f4:32:93:04:37:b2:5b:79:
76:ca:89:d6:3c:75:ee:d7:9b:35:54:30:fe:78:30:24:ab:57:
24:a6:e0:d1:c6:aa:01:1d:c7:f1:25:f0:e4:f9:22:16:d6:6e:
b7:41:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:52:16 2025 by rpki-client