
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: ke4O0iGh3B/IfazSv9KyzoXjcFzi0unWPZVbYqzWUH4=
Subject key identifier: 7D:DA:63:2E:B1:E0:6B:26:C0:C0:ED:F7:85:AB:0E:FA:D3:DC:5F:3C
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 0198D4A84FEE2430AFBE10EBF3C853A464D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 1188
Signing time: Sat 23 Aug 2025 02:00:56 +0000
Manifest this update: Sat 23 Aug 2025 02:00:56 +0000
Manifest next update: Sun 24 Aug 2025 02:00:56 +0000
Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=)
2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: X3g7e6wlSIaKR/WCiYlm6M9XIEWoiaNwfoZCt5h/Um4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4f:ee:24:30:af:be:10:eb:f3:c8:53:a4:64:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Aug 23 02:00:56 2025 GMT
Not After : Aug 24 02:00:56 2025 GMT
Subject: CN=7dda632eb1e06b26c0c0edf785ab0efad3dc5f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:cd:23:42:e4:58:40:64:0a:f4:82:ea:bd:
d6:6f:9e:f3:e9:32:66:05:5e:a3:a3:22:d5:73:72:
a7:67:36:2d:4e:46:95:c5:7f:27:2f:30:47:1a:4a:
5e:14:d2:1d:67:9e:21:18:f3:0e:62:dc:a1:1d:3c:
2e:cd:0d:85:50:96:34:a6:b8:11:b9:68:36:01:f5:
8a:b1:5a:84:f4:e0:7d:c7:79:78:01:cd:0a:79:24:
f3:6a:fd:18:cf:ed:e8:48:7d:e6:21:36:34:d6:2f:
27:b4:43:47:b9:e7:a0:4d:f0:8e:1a:7e:9d:ab:fe:
6d:d0:a7:7a:64:f8:90:f9:01:ea:e1:5d:bd:24:25:
f0:7b:94:3f:3d:5a:75:a2:16:a4:3d:5d:e3:43:01:
f4:61:e2:7c:be:6d:cb:5d:72:c3:16:2d:bc:4b:59:
3b:f5:8d:d5:07:97:eb:c9:6f:2f:a6:bb:80:82:5a:
c4:3a:f2:12:08:fe:cb:89:d2:6f:c7:5b:c5:83:68:
7d:cb:57:80:d9:9d:d0:c0:ef:93:81:e4:13:49:79:
21:0e:74:a1:d0:00:c2:de:6c:41:6e:64:c1:f7:00:
4c:ad:2e:11:e6:db:04:ac:38:ce:e3:52:1b:4e:21:
d9:f3:47:56:d8:63:c9:92:a3:2c:81:39:27:a1:3a:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DA:63:2E:B1:E0:6B:26:C0:C0:ED:F7:85:AB:0E:FA:D3:DC:5F:3C
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6b:65:d9:99:95:b9:26:d3:78:97:7b:21:34:99:c3:34:53:
f2:b4:1f:38:ef:64:32:33:b7:c6:53:52:3b:47:de:0d:0d:8e:
9d:17:3f:47:61:ff:07:82:7b:c4:e6:95:75:c6:8d:8f:f6:1c:
6e:bf:14:07:0d:2f:c3:26:43:c2:56:19:71:46:71:51:29:ef:
2d:fd:fb:40:bf:75:5c:c4:f4:7b:91:d2:d8:03:40:61:70:81:
7a:6d:8e:5b:41:25:5c:9c:0e:9a:ae:c5:88:da:1a:9e:32:09:
22:52:9e:a6:66:d6:74:17:0e:59:75:10:82:20:1f:d3:99:38:
20:19:ad:d1:cf:bf:44:3d:b3:74:93:40:ec:37:b3:9e:28:61:
1b:1d:40:de:ec:a3:60:ab:5e:0c:5e:fc:16:08:3e:32:11:31:
43:22:9a:50:e5:34:15:cc:07:4b:5b:62:2f:88:61:51:6a:5d:
45:f2:b4:66:50:cd:0a:c1:d9:40:92:bc:4d:bc:c7:c8:d2:94:
fe:43:5b:75:1c:a2:51:fe:24:3f:fd:c4:98:69:a7:e0:8a:14:
b8:0e:10:ea:6f:a2:94:d6:81:b7:0d:94:46:5a:a8:32:a0:86:
e4:5d:d5:ea:7e:53:dd:7d:2c:52:af:3c:b7:5a:e3:00:64:5f:
13:9c:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:04 2025 by rpki-client