Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: BRIrHn09k2y+vMHza2KD7mgndIUrDn9tXpGmfUjGbtY=
Subject key identifier: 14:F3:A9:40:40:83:8D:8A:2E:0D:1F:66:EA:49:30:32:86:2A:E1:BA
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 0198D73B94E5FABCE271ACF6A96CBE736D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 10D4
Signing time: Sat 23 Aug 2025 14:01:02 +0000
Manifest this update: Sat 23 Aug 2025 14:01:02 +0000
Manifest next update: Sun 24 Aug 2025 14:01:02 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: NCOujBFpzzypfZ4viSVJUIxs+WWfGixtVKkgcKIi3/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:94:e5:fa:bc:e2:71:ac:f6:a9:6c:be:73:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Aug 23 14:01:02 2025 GMT
Not After : Aug 24 14:01:02 2025 GMT
Subject: CN=14f3a94040838d8a2e0d1f66ea493032862ae1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:7b:25:4d:fd:59:00:cc:86:ae:33:eb:8c:
35:29:02:58:02:53:da:cb:43:51:f3:3e:86:29:06:
ca:54:6a:54:d0:7c:ee:b9:14:60:80:fc:e2:81:49:
58:57:04:66:a3:54:45:9d:85:d0:b6:6e:08:e9:53:
d6:f8:db:37:52:26:82:91:6f:c1:af:b3:90:31:dc:
62:42:da:35:2b:e1:7a:87:1a:97:36:51:d4:e5:5c:
4c:5d:2b:5c:f8:c1:e5:d9:52:b0:57:98:99:dc:2c:
92:9f:a0:10:0d:19:7b:1a:b6:fc:d7:53:bc:96:c6:
c6:f3:a1:27:9f:62:8c:b6:26:19:23:ea:55:05:39:
a9:8e:11:90:2e:d7:5a:68:13:38:9a:53:e9:d5:41:
53:f6:f1:98:e8:89:8b:03:c6:79:11:1a:b4:78:ad:
5a:a3:61:10:0b:4f:bc:a6:90:b2:36:50:be:f4:f4:
ab:ea:6b:5b:90:e4:3d:ae:2d:77:4a:c6:b6:af:5f:
b5:27:fc:b2:88:e5:9d:dc:40:88:99:82:91:a3:b4:
4e:fb:f1:50:45:db:b5:d9:0c:a4:8d:dc:bc:97:f9:
54:1f:b8:12:cb:9e:91:46:19:3f:d5:b5:cd:ff:ee:
5a:e1:c3:e0:b0:a0:29:d9:78:43:1f:26:d3:6b:25:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F3:A9:40:40:83:8D:8A:2E:0D:1F:66:EA:49:30:32:86:2A:E1:BA
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:86:ad:54:50:42:60:fc:fa:da:76:f2:35:4f:18:46:6e:32:
26:ef:95:f2:d4:75:13:d1:47:ce:88:90:1d:9a:f5:5e:86:dd:
07:7a:f9:26:a0:2b:65:09:1c:60:3b:ad:74:7c:05:a7:53:7f:
58:56:27:3b:47:db:91:e0:23:13:d6:c7:03:da:7b:c7:67:dd:
86:6a:ce:94:f6:c0:7d:84:a0:95:29:65:38:ea:54:ae:a1:ac:
d2:dd:1a:72:97:dd:7c:f2:45:d4:42:38:0c:cb:81:f6:cb:5f:
56:4a:74:32:4e:12:de:74:fb:db:0e:90:6b:5d:7c:97:dc:e3:
11:58:36:6c:cc:8b:0c:37:39:d0:d0:44:d3:ba:6f:6f:e1:1f:
7f:5a:0d:e0:d1:2c:06:af:c0:f2:7c:13:7b:88:56:0c:75:d8:
d8:93:63:75:c8:43:89:d1:a2:43:8a:d9:5a:bd:d3:65:d6:0a:
61:50:47:77:e0:79:42:df:b9:28:25:d5:82:39:3d:aa:9a:3e:
bd:a9:43:01:c8:b5:04:92:f3:5d:2b:2e:f9:5c:54:07:53:f6:
6d:9e:d5:6f:e6:c8:8c:e2:95:70:d9:38:a4:b6:e8:25:98:23:
e6:74:e5:95:c0:3f:9d:b2:90:6d:e0:13:44:7b:51:ec:d0:0c:
fa:28:35:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:15 2025 by rpki-client