Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json)
Hash identifier: M1ckMzssOsbp3OewPFlM3HShwpftMkIwQAYmGpQA5Lo=
Subject key identifier: FB:04:87:D2:D1:26:CB:5F:88:D6:E6:42:BA:3A:82:49:F2:D6:97:05
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 0198D66077A376F8527A2EACC72F9C881EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
Manifest number: 09EB
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: pO3YsizGDcUdgq9URlf0e6DzYNatXPHrNn4f1T1i+dI=)
2: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (hash: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:77:a3:76:f8:52:7a:2e:ac:c7:2f:9c:88:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=fb0487d2d126cb5f88d6e642ba3a8249f2d69705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:fd:1a:e0:1a:3d:4c:30:be:66:50:6b:58:
37:45:0f:4a:b9:bb:51:31:cd:90:9e:a4:4b:40:9d:
d0:ce:d0:a2:9f:fb:7a:11:c6:c8:5e:6f:df:f8:20:
2e:f7:c3:31:1d:f6:f9:b6:7e:fb:43:78:07:e0:6c:
ae:80:fa:6f:06:29:81:d8:c4:6a:6e:8a:08:58:02:
c8:e2:c1:4e:4c:2b:6a:33:ea:c7:11:ec:36:e2:a2:
e3:94:37:09:84:a2:8f:6d:e1:fa:22:7b:41:fe:1f:
ac:56:4a:37:fb:59:96:7d:97:57:89:0b:60:6a:db:
c7:0c:f9:1a:be:16:4f:90:5c:3e:80:fd:4c:ce:80:
63:8c:c3:10:fa:d1:5e:36:4b:7c:50:48:60:76:84:
4e:4e:c6:c0:de:33:4c:75:5c:eb:fc:af:4d:d5:7f:
63:65:11:e6:aa:69:96:7c:84:1e:b8:76:57:de:84:
1c:41:7f:d4:57:9f:db:42:07:34:55:b2:84:b4:df:
09:cd:8d:45:cd:91:0b:f0:61:4f:5a:b4:85:75:d4:
1e:2e:3c:8c:ff:40:44:a4:c6:4f:d9:1b:60:3f:6b:
c0:88:93:25:93:12:95:4c:e6:b5:f4:5c:0c:fe:64:
c9:cc:a9:fc:00:09:a1:9d:e3:35:c5:eb:9d:d3:c1:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:04:87:D2:D1:26:CB:5F:88:D6:E6:42:BA:3A:82:49:F2:D6:97:05
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e1:8c:79:5c:74:44:83:01:b7:23:9e:72:25:52:fe:03:67:
09:57:76:f0:0a:63:a6:8b:7d:cf:89:3e:44:b9:dd:b8:fd:01:
a8:c7:f0:81:b1:51:c5:f9:59:40:0f:84:15:3a:1d:4f:63:67:
d0:70:d1:4b:46:55:d3:37:f1:98:7b:e1:b1:bf:c1:56:e4:5e:
4e:29:cc:e6:53:9e:5c:eb:cc:1a:60:e9:a8:50:63:12:3c:6e:
73:a1:5a:4d:a1:75:93:9e:c2:de:b0:25:33:bb:08:ad:f5:d6:
72:e4:a8:64:37:09:d1:11:87:c2:52:1d:5b:e8:24:fc:1a:4c:
da:54:c0:28:d7:59:15:8b:f7:26:cd:d1:b0:11:33:8d:20:a1:
a9:d0:f2:67:03:04:a4:9e:c0:35:9b:3f:79:c9:22:e5:dd:93:
10:d2:b1:c6:b4:1e:e2:40:39:b2:13:08:2a:56:f0:3a:46:6a:
1f:c7:b8:f0:00:8e:01:d4:7f:f3:b9:42:d5:7a:24:89:f0:05:
4d:a5:e7:77:e3:ac:ae:aa:b1:8f:fb:f7:23:32:ab:7d:85:2f:
e5:52:22:7f:7a:67:3c:dd:f5:d4:b7:0e:90:2b:17:8e:ba:14:
f2:d0:93:ab:94:20:8d:ed:7e:fd:90:5d:27:e9:40:c3:54:df:
cf:a7:cc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:00:26 2025 by rpki-client