Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: t52VtVLz4dt1phKKpVq0zALf1aMTfZGYF2LlhD6cuZg=
Subject key identifier: 04:4B:AA:E2:0C:79:08:E4:59:9C:8F:84:2E:39:DB:98:79:42:49:74
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 0198D5156A17EAAA2DBC30642632DA1C46A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: oRasWQwitzu2lVcfdY3k3k1pyPhRDCTTMs97hn6Nof0=)
2: _XUidn5LGX4qhZ_75ajbeYWe1Ao.roa (hash: b/pfq31DckGw+o1qBs5ugJl7vAflaGA+vdef1tZYmPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6a:17:ea:aa:2d:bc:30:64:26:32:da:1c:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=044baae20c7908e4599c8f842e39db9879424974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0e:28:da:8b:33:7f:2e:f7:8a:62:12:75:53:
8f:a2:55:4a:a2:6d:25:63:88:9c:63:23:e1:ea:7e:
ae:36:cd:03:a7:58:c7:c5:5e:2d:7f:e8:7a:07:ff:
d0:97:92:c5:2e:72:d2:86:08:50:0b:36:89:9b:4f:
0e:62:04:cd:9e:77:c0:c4:b1:b2:42:2e:27:3b:9b:
e9:51:87:fa:7b:2e:6a:0a:87:8f:f4:4e:06:37:78:
12:9b:07:7f:35:f3:70:cd:2f:41:a8:30:22:aa:9a:
e1:17:9f:93:dd:fe:bf:34:08:94:72:f0:a4:27:0b:
57:8f:0b:0f:46:4f:bf:bf:e4:4e:17:4c:1e:78:92:
63:76:a1:c4:1d:36:57:38:86:37:84:97:9a:b9:f8:
c2:bc:71:49:af:96:25:76:2d:14:7e:1f:d8:39:15:
c7:7e:11:7b:12:12:9e:a9:bf:6b:df:55:a0:1c:63:
c6:65:5c:b6:11:f4:ea:ae:e7:82:81:53:2b:d2:9d:
6b:21:75:6d:df:78:55:52:16:63:14:18:29:9c:2f:
51:0d:c6:c1:35:5a:6c:a2:a9:dc:8c:af:7d:2b:0c:
3d:06:09:25:ec:f7:7b:7a:d9:38:32:df:14:b9:8a:
08:38:95:5f:42:26:2d:12:73:7c:01:98:d3:21:1f:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:AA:E2:0C:79:08:E4:59:9C:8F:84:2E:39:DB:98:79:42:49:74
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:95:0a:3a:b8:ca:5b:22:4b:c9:5f:5e:06:dd:0d:94:0a:77:
51:64:27:d1:c5:63:e2:c1:af:7d:05:51:b3:29:e6:70:eb:ea:
9b:02:ad:68:88:6f:e2:17:95:b3:55:73:12:88:43:0e:18:f8:
93:fa:3c:09:81:57:0a:2e:7a:d8:0d:1c:65:80:ab:5b:e6:e2:
bd:67:0a:c7:d1:5c:b5:51:ca:36:ec:02:87:49:1c:98:85:6b:
83:d4:2f:66:2a:0c:a9:1e:96:5f:43:49:e5:52:49:a2:00:61:
3f:6e:23:d0:c3:58:36:2f:2f:a3:42:fb:54:ac:7c:69:1d:eb:
80:ee:7d:57:de:4c:ce:a4:6d:04:b7:e2:d5:2a:d4:4f:89:5b:
cc:3d:66:43:04:02:41:f3:a7:34:79:b8:ec:ac:2f:83:b8:8f:
95:1c:bc:80:9c:c0:a2:db:f6:bd:48:e4:23:80:91:87:87:33:
fe:b6:04:02:96:bb:ff:cb:c2:59:38:67:ef:ee:78:81:8c:7e:
f2:42:69:8e:c8:3c:d3:75:3b:6d:73:bb:b5:08:0b:41:97:84:
36:b4:02:ae:61:55:bb:6c:31:02:5f:1b:9d:f7:35:51:57:b4:
4d:87:9a:b0:a1:62:a5:c8:25:43:33:c8:b3:63:f9:3e:bf:cb:
73:90:ee:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:36 2025 by rpki-client