Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: MfprJD1CzOIMOQDZnFdi5jETyNEsl81j58glb6cn84I=
Subject key identifier: B6:22:0A:3D:57:89:40:21:E4:7C:04:DE:C9:AE:64:8C:7E:C2:1F:7B
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 0198D5BC667CF5DE4E96DAC300CC7DBB7A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:30 +0000
Manifest this update: Sat 23 Aug 2025 07:02:30 +0000
Manifest next update: Sun 24 Aug 2025 07:02:30 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: LnTPKV7P6LLPX9xGJpK6XtIszBdNRuAmzP0zaMkUx3A=)
2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:66:7c:f5:de:4e:96:da:c3:00:cc:7d:bb:7a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Aug 23 07:02:30 2025 GMT
Not After : Aug 24 07:02:30 2025 GMT
Subject: CN=b6220a3d57894021e47c04dec9ae648c7ec21f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:59:2e:bf:2b:c0:f7:28:d1:6a:a2:32:44:
83:9b:85:3e:85:b9:ed:af:d9:0e:f4:7e:2d:e2:82:
ea:1b:8d:0d:ae:c8:d3:7c:a9:f5:cd:4a:1d:d0:9d:
99:a6:b8:de:cd:91:4a:49:2c:ba:e7:9d:05:a5:b9:
c8:94:42:17:72:c5:29:1b:00:b0:8f:b4:5f:cb:d2:
c2:d8:4b:a0:2f:93:7a:75:54:eb:7a:e1:aa:8c:dc:
0e:b0:b8:6a:8c:2b:af:6e:b0:ec:f5:32:41:3a:75:
05:e4:ff:d6:81:6e:a9:13:86:b7:02:09:97:4f:b1:
37:19:4d:ca:bc:34:22:1e:c2:48:8a:78:7f:20:52:
15:6f:1f:2f:79:ca:d8:4d:77:39:88:af:00:81:f8:
1f:25:1a:f9:76:fb:fd:5a:b5:79:18:cc:31:d1:90:
16:73:5d:f9:1e:11:28:11:67:92:36:86:97:7b:38:
c5:f8:e0:8c:64:8e:10:a4:90:ea:d9:3d:04:0a:ff:
4e:c0:90:32:3c:11:d1:77:c8:8d:41:eb:60:ff:5c:
6d:e5:27:8f:6a:96:6e:bd:a6:78:d6:67:8b:a3:83:
c9:12:20:41:74:bf:79:35:db:02:e8:c9:37:b6:33:
28:c6:71:c6:37:28:1c:82:16:2b:ad:87:22:bc:73:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:22:0A:3D:57:89:40:21:E4:7C:04:DE:C9:AE:64:8C:7E:C2:1F:7B
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:71:88:18:f9:2c:26:07:92:79:ff:a7:9e:27:c3:92:64:83:
a8:d5:5b:33:f8:e2:23:61:11:c8:b3:9d:d7:e2:b1:00:5c:33:
97:a8:4b:6d:c4:4f:ee:59:88:6c:43:31:09:a3:53:85:5a:ae:
bd:fa:5e:72:92:de:db:2d:a8:56:07:33:7b:0f:5d:1c:86:ef:
a7:10:0e:1c:51:ed:50:b4:c0:d6:a4:56:29:cf:8b:98:f3:d6:
93:63:19:a7:61:9d:5d:86:84:a7:79:b5:48:14:c3:04:1e:77:
aa:a0:a5:cc:06:10:96:41:4f:c9:63:1a:c4:c4:0b:f5:9f:25:
e8:02:9b:89:b5:a6:a1:30:d0:9e:72:10:ee:d8:62:3f:cb:46:
1c:43:a0:ca:67:19:a9:a0:5a:4b:46:b9:26:83:18:a8:49:c6:
1b:64:62:06:c1:4a:b4:08:d5:9e:b1:eb:28:55:94:d6:04:b3:
17:13:61:43:36:17:57:f8:c7:d2:22:e6:b9:d2:a1:a9:08:59:
95:76:4e:10:61:b3:e9:ab:22:aa:60:39:8d:e9:22:6b:c4:b1:
f4:66:01:62:89:89:1e:57:36:41:c6:45:f8:dd:dd:21:da:92:
9e:63:aa:66:f4:fb:1f:53:6a:71:4c:0f:09:45:44:30:ff:b1:
1e:cb:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:54 2025 by rpki-client