Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
File: aIt13GcpXVhht31RoCEYtg3FWGg.mft (raw, json)
Hash identifier: zkHlDi3ZzLZNa8Uj7zAYPUdz13uP/oFsIPP0qr7SX7k=
Subject key identifier: A9:2D:E9:F4:1F:65:75:70:A1:26:6F:CC:C5:DA:EA:AE:B6:0E:55:90
Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Certificate issuer: /CN=688b75dc67295d5861b77d51a02118b60dc55868
Certificate serial: 0198D515603FB7456FAD275C0F4224D22F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
Manifest number: 0D53
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa (hash: 7YOwLzYn+04mEiM6zjtu45GNMFpON/tmtRVeglwvQWQ=)
2: aIt13GcpXVhht31RoCEYtg3FWGg.crl (hash: VoL77WsFpQ2NGf9Z9LCjsbplIs9ddi+rFRg0R0lCfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:60:3f:b7:45:6f:ad:27:5c:0f:42:24:d2:2f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=a92de9f41f657570a1266fccc5daeaaeb60e5590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:f2:cf:47:06:4b:21:8a:f0:4c:f1:db:f6:
10:66:cb:db:82:c3:50:22:10:4a:93:79:04:1b:be:
f1:f7:4e:99:7d:64:7f:3d:be:12:2d:1e:51:0b:c1:
d9:9d:fc:02:b4:15:b0:a8:90:fb:1a:cd:7a:76:db:
83:af:21:8c:5f:a6:27:5e:50:ba:67:4c:7f:49:78:
ad:16:93:ff:a0:60:f7:3d:6d:6c:d5:33:30:a7:0b:
dd:75:be:ea:33:3d:f1:91:63:29:63:ec:ab:04:04:
56:04:84:b2:06:c5:50:75:54:01:72:5a:f3:ad:60:
8c:27:99:d4:f5:df:00:dc:f2:3e:e5:01:77:0f:bf:
aa:de:81:43:0e:db:4c:06:7f:b8:f5:99:2e:22:c2:
a4:10:d6:b2:68:03:0f:18:8d:a9:0f:5c:a8:e8:77:
76:92:af:58:45:be:9f:97:4f:35:51:69:8d:fc:15:
c5:58:8a:22:97:aa:78:00:1f:93:fa:9a:af:07:27:
44:16:39:e7:c7:92:5e:65:e7:64:96:41:ef:d4:df:
28:80:1f:de:9a:f4:83:ae:d2:8d:8e:1b:04:1a:b3:
68:91:4a:d3:9b:35:b6:d6:ec:a4:27:50:ad:51:cb:
d7:0c:3d:5f:ee:f2:c6:ab:92:9a:60:7e:ea:d9:8c:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:E9:F4:1F:65:75:70:A1:26:6F:CC:C5:DA:EA:AE:B6:0E:55:90
X509v3 Authority Key Identifier:
keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:88:0e:ea:72:b5:90:01:d7:42:0d:ca:12:5c:0d:c1:ac:f7:
40:17:ef:a5:45:a2:6d:43:b1:2a:cd:2c:35:19:b1:aa:7c:28:
63:cb:8d:5a:a7:ed:6a:70:d8:c5:fe:7d:8d:58:e7:a5:97:f9:
f3:7e:59:02:e5:c2:9b:b7:b6:d7:fd:24:09:cd:37:43:39:93:
81:b8:30:38:e2:8c:8a:da:86:56:59:f6:2c:03:17:51:a9:26:
db:cc:b5:55:a8:c3:07:60:d9:b8:83:ad:1b:34:1f:df:11:7d:
d8:db:81:8e:1c:70:3b:01:b9:29:f6:63:9c:09:eb:e3:33:f6:
e3:dc:69:66:59:53:b4:50:7b:47:87:03:2d:a7:c8:71:ba:72:
03:96:c8:15:c3:17:72:68:74:72:12:d0:c6:78:f8:8b:f2:56:
70:74:f9:49:f0:29:f0:f3:6a:a5:a8:4a:d1:d8:d3:09:eb:97:
b4:92:b2:9b:88:6c:f0:7a:22:42:9f:15:ba:8f:85:4b:56:0a:
3b:ba:3b:dd:ac:e2:cb:8c:32:67:27:77:ce:e9:7a:90:3b:7a:
11:5a:e2:06:fa:57:0f:42:3a:74:1a:22:c9:0e:63:36:c3:3a:
01:27:23:af:1b:66:5b:6c:94:e0:20:de:f8:38:4c:20:a5:7b:
7a:06:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:52 2025 by rpki-client