Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: B/n/QFBCg45Fu2YKR8IX/+1pyHV/qiORMhkedq8HzRU=
Subject key identifier: 6B:81:00:67:52:27:23:53:DC:4C:9D:2A:5C:6A:0C:8E:BE:66:42:62
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 0198D4E051C4B3068045E086B3AA0CCB9770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 07A3
Signing time: Sat 23 Aug 2025 03:02:07 +0000
Manifest this update: Sat 23 Aug 2025 03:02:07 +0000
Manifest next update: Sun 24 Aug 2025 03:02:07 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: iNbPzheHwxQdwdaAzG+TWAtMTU9LRfSRwDqW7xm4+LM=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:51:c4:b3:06:80:45:e0:86:b3:aa:0c:cb:97:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Aug 23 03:02:07 2025 GMT
Not After : Aug 24 03:02:07 2025 GMT
Subject: CN=6b81006752272353dc4c9d2a5c6a0c8ebe664262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:29:b8:9c:fc:15:c4:15:55:9a:b1:02:83:
33:f6:5f:2e:1d:7e:2b:5a:03:bd:b2:e3:da:ae:21:
1e:66:e3:70:d1:22:28:e7:a9:aa:11:f2:a7:09:b6:
ad:2e:da:64:1a:ce:49:8c:dc:ed:c0:58:d6:c1:4d:
fc:23:9f:92:97:78:2c:d5:0d:c7:0c:1c:fe:45:98:
62:ee:21:78:29:b5:8b:fb:69:9f:2a:26:2e:07:79:
e2:bd:95:bd:15:cf:86:09:59:9f:0c:36:4b:29:84:
68:85:07:b8:59:ce:9c:b4:51:81:b9:cd:4f:96:85:
6b:e8:2c:89:cd:82:f9:c7:3f:e8:1c:df:8f:12:78:
29:7a:15:03:f4:4a:81:a7:58:3f:6a:15:1c:57:04:
91:35:63:1d:24:32:5d:54:47:d0:3c:8c:d7:e9:97:
42:77:92:dd:37:b8:36:0b:28:4c:e2:ce:ed:57:4c:
55:dd:57:0a:a2:60:f5:6d:eb:60:0c:93:f7:b5:c8:
d8:e8:82:83:87:bc:93:46:5f:e1:4e:6b:39:02:8d:
84:9c:4f:62:f5:7d:bf:41:10:09:89:0e:1a:52:6d:
43:f0:e1:e8:53:a2:76:14:00:15:21:12:10:53:f1:
03:ba:07:fc:6b:a6:e9:48:1d:b4:b7:63:ba:92:90:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:81:00:67:52:27:23:53:DC:4C:9D:2A:5C:6A:0C:8E:BE:66:42:62
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cd:a8:0c:c7:1e:d8:85:fb:7e:4a:9e:35:f9:50:25:1b:a4:
e8:52:48:4a:f0:83:d8:ae:07:a7:11:fb:35:0b:7e:b9:9f:e6:
92:5b:77:fc:ba:10:e8:d1:6e:30:38:93:77:4e:38:5e:a2:1d:
36:fa:79:54:c4:ab:48:05:b0:13:ce:eb:63:87:86:0d:1e:1f:
63:8f:60:1f:25:e0:be:11:81:e4:ab:ee:7a:c6:4c:a3:8f:58:
5b:43:4f:4c:02:29:e0:c9:bf:55:2d:5d:97:a7:4d:39:2a:2f:
b6:be:d5:5e:79:9d:ce:00:e8:11:36:d0:35:d9:ed:15:22:4b:
ba:69:63:08:d1:ac:5b:b0:fc:a7:b5:e9:0e:58:64:55:01:7a:
38:37:43:92:cf:80:7a:6f:d7:5d:34:22:50:b2:74:9f:bb:16:
f0:90:96:1e:9f:60:e0:e1:d3:d6:d1:70:3b:a1:fa:23:d3:68:
d6:60:8f:21:10:d7:bd:2a:51:5a:08:0c:00:d3:54:a2:fb:e8:
5d:61:74:f0:39:19:0b:e3:87:26:31:c2:09:c6:68:5d:3e:62:
2f:75:8a:57:38:87:6f:2a:e0:f8:d9:08:f0:80:95:98:42:75:
53:38:df:6d:f8:b8:d7:c8:97:f7:db:8c:e8:4a:47:ff:ac:52:
a7:53:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:09 2025 by rpki-client