Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: 8zBw//EQtfAAaVlcrMAbzuessbnwnsnxHvr4IWZo63Q=
Subject key identifier: 87:CA:C7:06:18:4D:4E:DE:31:B0:67:76:DB:78:4D:05:F8:2E:25:40
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 0198D54EB68AFB39E9F4F8B9EF23DC73F688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 086A
Signing time: Sat 23 Aug 2025 05:02:42 +0000
Manifest this update: Sat 23 Aug 2025 05:02:42 +0000
Manifest next update: Sun 24 Aug 2025 05:02:42 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: cJPAOeQimJvpGXhkeC6fKfYTYV4qB/6D3+QjSeRpsAk=)
2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b6:8a:fb:39:e9:f4:f8:b9:ef:23:dc:73:f6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Aug 23 05:02:42 2025 GMT
Not After : Aug 24 05:02:42 2025 GMT
Subject: CN=87cac706184d4ede31b06776db784d05f82e2540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:93:77:ec:c1:60:94:dd:42:66:0a:4e:e7:
c2:d0:3a:6e:64:36:c3:7d:6c:4c:47:68:0e:df:0a:
50:35:69:6e:2c:d3:5e:fd:8e:1f:bf:ea:55:8a:9b:
df:aa:b0:8b:6d:ea:de:0e:ad:d1:83:78:a5:b7:c1:
6a:8d:6a:68:44:42:e0:05:6b:32:21:e7:89:be:8d:
d5:ab:0a:9f:c2:44:4f:59:15:b8:65:f6:33:7f:7b:
2a:00:fc:0c:44:5a:de:33:7c:09:c4:a9:f7:b2:4d:
d5:75:b8:bf:0e:77:fb:39:7f:79:f3:cd:f5:76:a6:
02:31:02:8b:40:c6:14:a3:35:1a:c0:68:1a:1e:a7:
00:8e:0f:b2:02:2e:e4:98:ee:3b:86:5d:b4:39:b4:
97:d5:a3:bd:cf:f1:c2:28:52:f4:c4:65:4c:3a:b4:
b1:e3:87:a0:65:e5:a6:bc:02:b2:81:08:de:ce:94:
9d:86:28:8e:34:88:a4:96:d9:29:62:d5:d0:db:7b:
41:33:2c:a2:71:08:5f:ea:a7:f0:6a:c0:58:5b:7f:
cc:69:73:af:e7:92:c2:fc:c5:89:27:09:87:9f:7f:
b8:58:c2:c5:36:54:60:f7:7d:c8:cf:1f:16:6e:d4:
15:28:2f:14:c1:3f:43:99:62:5c:1b:31:2b:44:8b:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CA:C7:06:18:4D:4E:DE:31:B0:67:76:DB:78:4D:05:F8:2E:25:40
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4d:54:c1:12:2c:05:44:13:b9:41:12:ac:9c:34:3b:8f:86:
f7:dd:93:ca:5b:9a:a4:1d:0b:3a:d1:fa:c7:27:34:57:61:56:
c9:50:bb:a7:6a:30:1a:b7:dc:80:57:b8:2f:c7:12:66:b9:96:
c8:06:09:c2:5c:34:be:8a:ea:be:7a:10:57:bc:85:f0:2f:08:
a4:06:9a:7f:cd:65:d8:71:52:fc:80:93:6f:f3:b5:5f:e2:b5:
cf:07:9d:f2:e1:87:ec:b5:1d:84:03:e4:3a:32:d5:6d:8d:b9:
fc:bc:8b:f5:d8:82:95:61:bc:4e:ec:8f:fb:72:43:e6:09:43:
72:f1:bc:16:38:8e:0a:2e:84:64:fc:b9:e6:91:cc:bc:2c:2e:
cd:b6:c9:1f:2a:70:b8:57:c2:d7:8c:5d:05:81:aa:01:14:0a:
f0:b0:4e:53:ca:11:7e:0b:07:c7:67:79:cc:bc:58:80:f0:66:
d3:1f:37:a5:28:0d:4d:00:77:6f:e3:90:f8:f0:8a:0b:61:95:
96:14:e4:d6:65:10:c2:b2:30:15:47:8a:2a:14:8b:48:9e:38:
56:27:b2:06:4c:e5:8b:b2:1e:30:f7:e1:ce:2e:93:b0:f1:bd:
e1:e9:38:ad:8a:09:62:84:0f:53:49:4f:2e:1a:6f:1e:57:ab:
35:34:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:31 2025 by rpki-client