Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: qLNL542Fdod63GD3pkhAilc2Ac00VIoGR4/uHMqu5ok=
Subject key identifier: 7D:88:3F:17:18:15:FA:5C:43:21:35:C8:BA:3B:8E:59:F7:A8:BF:D4
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 0198D473DA388312667132900A0FBDAA0D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:38 +0000
Manifest this update: Sat 23 Aug 2025 01:03:38 +0000
Manifest next update: Sun 24 Aug 2025 01:03:38 +0000
Files and hashes: 1: 1LWuminfGd450btHCMbnnbPQ_ZE.roa (hash: TISDdBpwKFkkTeSDLc72qwKWM7K/Xn5/55e5YUo0nnQ=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: 8NHynUXlmWxLCvJG5AX6MzIzEy7BzSPPYSRCVVo7pxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:da:38:83:12:66:71:32:90:0a:0f:bd:aa:0d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Aug 23 01:03:38 2025 GMT
Not After : Aug 24 01:03:38 2025 GMT
Subject: CN=7d883f171815fa5c432135c8ba3b8e59f7a8bfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:67:4f:aa:bb:bb:b7:fc:83:27:e4:02:64:
3d:7a:be:41:c5:39:23:5a:03:57:5e:b0:e6:6e:88:
cd:1a:9e:ea:ac:7a:8b:06:24:f4:aa:fe:2c:a6:df:
88:a0:62:dd:4a:b3:37:7a:80:b9:6d:49:c4:d8:72:
2b:49:f3:3a:88:39:7d:fa:19:72:84:bb:05:5e:46:
7e:88:a3:59:13:65:2c:5f:d8:fb:ef:d9:0b:75:d4:
97:d0:db:9c:fc:31:45:82:90:a9:48:74:ce:33:2a:
be:c0:25:42:2d:fd:e1:76:ad:93:33:24:7d:ce:66:
3c:55:be:0d:3e:e4:3d:18:d7:77:17:1e:8c:5e:9f:
46:b7:cb:19:5a:c1:d9:53:d6:c9:1d:9c:5c:36:1e:
ff:08:e1:99:6f:89:da:9f:a5:c5:1c:81:fb:ec:7c:
50:e3:74:f3:86:95:2b:8a:71:e4:c3:97:b0:56:2f:
03:30:23:bd:27:4d:e0:42:26:6e:8e:6b:c2:7b:95:
b7:56:ee:f3:3d:06:47:52:23:53:12:e8:6c:65:ec:
75:49:7e:15:25:f9:0c:9f:89:bf:92:33:9b:97:7a:
bb:be:9e:5e:06:48:96:51:ca:a7:7d:38:78:0c:93:
75:54:40:9a:7e:c9:ab:83:46:98:6d:dc:1a:e0:d2:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:88:3F:17:18:15:FA:5C:43:21:35:C8:BA:3B:8E:59:F7:A8:BF:D4
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d6:f1:a0:c7:5c:b2:97:49:02:b0:db:51:90:05:28:e1:37:
fd:2d:93:de:b0:89:e6:42:03:34:f0:07:28:d4:07:3e:ad:31:
36:4c:f4:ac:e5:82:57:75:bf:24:20:c6:4b:7d:3a:89:27:d4:
30:e6:ab:7f:e1:f4:2e:87:61:a3:87:cf:9e:5f:2f:a1:63:90:
7e:ad:18:cd:fa:d8:07:23:49:9c:a5:79:1b:a2:58:38:f6:95:
af:dc:b4:19:cd:ad:b0:e2:ee:06:b4:a5:4b:27:a7:28:d4:00:
47:41:90:ab:0f:c8:2a:23:fc:da:9f:3b:02:8d:6f:7a:c5:94:
06:03:9e:10:4e:f1:d3:42:01:e8:fd:1d:e9:e6:b8:8c:0e:6f:
67:4f:10:f7:83:8b:c6:29:78:80:86:0a:3c:0c:72:22:51:ef:
f7:03:e8:79:07:c6:55:c1:48:6b:3e:17:c3:9c:ef:3a:a4:75:
14:1a:24:8e:08:20:29:7f:35:d7:b7:76:cd:28:71:dc:77:2c:
04:7f:55:9a:12:ab:df:e0:b1:b1:ee:d4:44:b0:9e:bb:bc:74:
51:a8:f8:c7:0e:1b:78:49:51:97:db:1c:48:d4:49:19:cc:5f:
fa:53:9f:fa:79:05:13:35:d3:47:07:26:e2:1e:a7:fb:1b:80:
b2:53:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:08 2025 by rpki-client