Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: Me4wBWyssHXe7nN1rtL0RDL6pJFbZmxSPi1hC2zV6Bk=
Subject key identifier: 68:81:3F:C3:32:52:8A:2F:7C:1B:ED:7C:E8:DF:CE:AC:55:AC:EA:0A
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 0198D583513255A40EA750A8BFF6C1005287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0CEA
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: IxFN5zfkelw73525l3aqHxs21qMWyza+gjwnC7KKvro=)
2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:51:32:55:a4:0e:a7:50:a8:bf:f6:c1:00:52:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=68813fc332528a2f7c1bed7ce8dfceac55acea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:31:64:d8:b2:70:98:aa:31:7c:48:4d:a6:
86:1e:d7:e4:b6:81:f1:19:57:3a:29:31:d6:bd:ab:
7e:b7:86:01:eb:12:3d:48:a2:3f:0a:00:fa:53:f4:
ef:46:b8:34:3f:dd:a7:3d:2b:11:ef:96:fe:c9:31:
36:93:7e:d0:9e:3e:5e:92:50:dd:27:db:f1:0d:19:
ae:51:59:56:67:f8:39:66:bd:32:e8:7b:e4:25:07:
3a:f8:11:aa:4c:09:c2:e5:2f:af:ff:97:c2:10:0b:
dd:b5:16:d0:a4:54:e4:35:c4:99:14:62:7e:4c:d8:
13:c9:08:fd:70:3e:5f:aa:6e:48:c4:1e:d7:b6:8b:
20:7c:be:29:f7:4b:cc:59:e0:41:68:2b:ed:ed:67:
0a:52:fe:9f:d6:86:5b:93:e6:17:47:7d:18:17:af:
5a:b7:60:84:78:ce:37:05:5e:77:2e:4c:90:5b:cd:
07:9c:0f:c8:90:7f:b8:f5:26:c5:57:1a:3b:1a:0d:
af:d7:a5:fc:f3:c9:6b:b3:69:74:29:94:4c:d2:43:
b7:94:76:7e:fc:9f:84:01:bd:ad:8d:66:d3:7c:15:
17:e7:3f:3c:8b:66:3d:0b:85:98:33:fb:eb:16:b4:
08:fa:d3:1d:e3:01:1f:70:6b:14:1f:80:4f:9d:ec:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:3F:C3:32:52:8A:2F:7C:1B:ED:7C:E8:DF:CE:AC:55:AC:EA:0A
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:92:72:6b:ab:59:49:b5:15:ea:5e:f2:46:da:f9:fe:9a:68:
d3:b1:aa:ca:5b:92:27:44:25:e8:8f:4e:b2:10:95:0a:73:79:
49:5e:f4:a3:a0:7b:6b:e5:8a:8b:ae:c1:af:d3:c6:9a:c8:d5:
ec:24:c8:57:5f:9b:4e:6e:2b:fc:c4:02:dc:e6:45:ce:c3:28:
ca:46:5e:8d:54:93:7a:7f:f4:4c:c8:67:c3:3f:0e:ea:c1:52:
f7:3d:f3:8d:49:cd:73:d3:15:1c:f0:43:63:9c:41:17:54:c2:
46:6d:cf:1f:3c:13:e2:60:20:64:32:bf:5b:fd:a9:db:18:52:
80:10:4d:53:1a:78:cf:ad:c2:e1:9d:91:6a:ef:bf:4a:f0:fa:
37:8a:e4:49:52:89:4d:72:1a:be:a4:b4:d7:da:cf:c8:d9:35:
4e:dd:6d:b1:1b:ba:94:20:22:a4:5c:24:64:f3:11:6d:f2:c7:
ed:70:a4:5e:5c:18:d0:55:e3:17:ab:29:36:3e:16:8e:68:3f:
df:50:f7:72:16:b9:4a:66:5c:b2:e3:ac:9e:a0:7f:8c:2d:5e:
0e:36:82:d7:a5:56:c4:64:1d:af:5a:72:48:d8:3b:f0:ad:81:
d6:74:38:11:50:2d:9f:25:87:c5:06:8e:18:29:88:18:36:c0:
8b:08:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:39 2025 by rpki-client