Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: MPy3YVezloGUuqNcWtMAtzsavnmEG/6DGGkXh7TjM2U=
Subject key identifier: 5B:9A:45:2A:06:15:AC:31:91:D2:CD:1B:98:1F:47:ED:A9:FC:8F:F4
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 0198D65F929F59760B5512CB0447D1A71916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:44 +0000
Manifest this update: Sat 23 Aug 2025 10:00:44 +0000
Manifest next update: Sun 24 Aug 2025 10:00:44 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: qjsdjs6AifqJATPkLciqqHNvGPTWJTJw2bWLxHGqA60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:92:9f:59:76:0b:55:12:cb:04:47:d1:a7:19:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Aug 23 10:00:44 2025 GMT
Not After : Aug 24 10:00:44 2025 GMT
Subject: CN=5b9a452a0615ac3191d2cd1b981f47eda9fc8ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:18:6a:02:73:1f:96:63:87:09:c6:95:97:
53:d3:19:be:f9:73:9c:02:5f:df:4f:81:1f:11:af:
43:3e:fb:ac:66:9a:e8:4f:59:e2:4c:6d:0d:86:7d:
1f:82:de:08:bd:39:1f:f2:4f:84:04:e8:ae:21:46:
6a:f4:75:7d:0b:41:d2:57:47:d1:ad:4a:f4:b8:42:
4d:06:dd:73:78:7a:5c:67:d3:90:0d:0c:bd:1f:d3:
54:03:9a:54:dd:62:97:fa:07:34:fe:e6:ce:fd:51:
3d:ef:1d:07:0c:5a:10:23:df:3f:75:17:12:93:6e:
61:91:ed:e8:7f:aa:00:b0:01:75:0e:27:26:bf:60:
db:6c:cc:59:54:71:95:87:e5:23:5c:50:8c:ff:4e:
66:9d:4e:c7:1f:42:1e:dc:23:57:bf:41:aa:4e:d9:
8e:bc:cd:83:2c:b8:9b:95:2f:04:db:49:6e:0f:4e:
35:98:8a:e9:de:6e:3e:3b:ac:9f:04:b0:ca:4a:10:
3b:5c:6c:18:0d:4f:86:19:0b:95:dc:1a:9a:0c:12:
50:a3:b2:a7:9b:9c:39:14:3d:7f:97:bc:bf:96:2f:
cd:17:39:4c:e5:11:bf:8a:e2:bd:f9:9c:80:be:86:
b3:59:6e:aa:9f:a0:57:f2:7f:f1:aa:54:ce:0d:e2:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:45:2A:06:15:AC:31:91:D2:CD:1B:98:1F:47:ED:A9:FC:8F:F4
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:1a:a7:3f:61:10:2e:65:ef:a5:c3:aa:8e:78:03:d5:e5:
cf:84:48:e9:61:49:27:db:cd:f2:38:e5:90:5c:2a:2d:91:78:
cf:a5:0e:07:94:fc:d9:ba:d0:43:72:fb:2e:75:9a:ed:64:63:
35:e8:01:df:4c:6e:79:e5:bc:24:b6:d0:25:35:03:95:75:14:
b1:d3:9c:52:93:6d:73:0b:ca:4d:54:50:6d:3b:0c:6f:13:67:
8c:f4:01:e3:e7:c1:1a:d0:3a:1c:75:d0:dc:29:47:61:69:82:
ee:b4:ae:0a:76:8b:23:90:f4:27:f7:d1:1c:5e:e6:fa:e3:7b:
76:c4:41:fb:c1:62:85:2d:81:26:f2:12:21:56:9e:42:88:a3:
34:58:02:c0:d9:6d:6d:08:29:7d:ec:07:a2:bd:a6:a4:4c:dd:
ca:c0:0b:38:82:b6:02:15:0d:52:10:fe:6c:4b:57:a6:00:d1:
69:b3:cd:61:c3:0f:19:69:32:09:f3:9f:39:b7:aa:48:67:a6:
1d:14:6d:b7:95:37:21:c8:7a:72:77:48:d0:78:6b:a3:80:e3:
cc:92:24:0c:8c:84:fa:e0:05:93:87:66:7d:dd:2d:5f:e1:dd:
2c:92:3c:f3:df:2f:c1:aa:57:27:0a:70:a8:ee:5e:a7:81:b2:
b5:df:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:32 2025 by rpki-client