Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
File: aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft (raw, json)
Hash identifier: O+CY1jhTohp20j6DW3DmLRWDtm4D+LaHPvdmVuS73OA=
Subject key identifier: 06:B2:A1:05:23:05:7C:BA:44:7B:9A:0C:57:DB:59:10:55:96:4C:89
Authority key identifier: 69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
Certificate issuer: /CN=6987d0047fb1d8912c63f911305a714f438b1e71
Certificate serial: 0198D4DFD2DAA25690E55E6B7F01C1E58B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: Atkr4h8_-iWKS-lQ1C-yvRl84ME.roa (hash: 2T7HRH5eHvmAemXfiDHO7EMODqi7SWlhFBBbiZ8y44c=)
2: aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl (hash: H9CKyZVxTdu1VjRo7E1/i887eAag3I2tHaBqYLqFcHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d2:da:a2:56:90:e5:5e:6b:7f:01:c1:e5:8b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d0047fb1d8912c63f911305a714f438b1e71
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=06b2a10523057cba447b9a0c57db591055964c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:a7:e2:c0:87:05:49:86:4b:cd:ec:43:b1:
6e:79:78:07:33:94:7d:46:ea:73:6c:c1:df:a2:81:
f9:2a:f3:e3:19:15:e6:ab:80:04:07:3a:31:bd:49:
d1:d8:e2:c7:0e:e6:c2:e2:d9:93:6a:67:0f:27:ca:
55:10:38:54:7a:da:72:7a:7e:e4:84:e8:b8:d3:b8:
7c:14:82:ab:3e:33:da:20:3d:92:00:98:6a:55:e3:
df:24:1a:31:79:f2:11:d9:9a:5d:fa:df:df:85:18:
9b:90:95:79:20:61:50:92:00:82:f0:df:25:36:8b:
88:ad:4e:84:9b:66:aa:f5:f2:c4:40:bc:40:e2:02:
45:4f:8a:5d:70:ac:80:60:83:f8:6f:91:08:50:d8:
69:c9:e7:f4:35:cf:41:dd:c8:8c:db:54:73:75:ca:
77:10:aa:0b:da:72:5b:21:d6:ea:4a:1e:25:81:e0:
92:bd:98:91:33:fe:4e:36:28:81:71:e3:19:2e:8f:
aa:95:b9:97:2b:73:df:83:52:ad:33:0e:6a:0e:e4:
d6:a1:75:a6:ed:6f:81:54:a1:a6:59:56:45:1e:cc:
4f:d2:60:5c:d9:c2:79:fd:84:79:52:2a:c9:69:1d:
b3:47:04:3c:38:f3:70:c2:09:8a:43:21:0a:24:14:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:A1:05:23:05:7C:BA:44:7B:9A:0C:57:DB:59:10:55:96:4C:89
X509v3 Authority Key Identifier:
keyid:69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:51:c6:22:10:e8:d3:fd:c9:a2:58:b3:b3:c1:bc:07:e4:9d:
7d:8a:dd:cb:c0:51:9a:51:64:74:41:17:d6:8d:b4:25:d8:8b:
05:8e:2b:3f:57:fe:81:ba:30:d9:31:13:77:5f:76:03:08:d7:
1b:a1:55:67:e2:64:4e:4f:fe:39:64:ba:10:cc:22:ce:28:35:
e3:9f:19:6d:25:8e:54:65:56:dd:38:d2:50:cc:89:d4:03:be:
8b:d8:36:cd:2d:86:90:3a:92:ca:fe:40:96:58:b3:44:d8:d9:
44:4f:af:fa:70:55:6e:9a:88:8a:12:a2:d5:39:1c:50:f1:6f:
57:5d:47:62:62:b8:0e:40:f8:5d:d1:13:2e:82:44:2b:2f:a7:
45:2b:95:02:85:29:f3:00:e2:ee:ed:08:f7:63:f5:e4:12:46:
b4:dc:5d:7e:9c:59:3a:1e:6a:fd:84:a1:5d:6e:c2:56:5e:c1:
fd:36:82:12:fc:b4:06:3d:5c:c6:c0:71:45:7c:d7:ce:0c:32:
9a:28:7f:ac:80:87:36:99:1d:f5:a2:8c:8e:e0:22:20:3e:cd:
ea:cb:43:91:16:fa:17:cc:04:1b:59:10:f7:b3:25:f1:79:c3:
fa:ad:dc:60:f9:09:41:05:18:d1:34:9c:e3:a2:e4:9d:d9:1b:
30:32:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:13:01 2025 by rpki-client