Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier: OwC9JQKtqekAJDRvKoDS5RCyQYS1AFiKtC8qvSCJtSE=
Subject key identifier: F7:6B:91:C4:6B:C3:B7:C2:D2:A9:19:38:6F:59:23:CE:A7:C8:33:E9
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 0198D5BB9A746E596DD72903839830BB9ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number: 0222
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: 7dWcNrDR1Gd+aMafsf2s3m2M1GZwqNCxsIjtH9LhErM=)
2: uFe0wHxAH2UJDFtywnXN56bE3x8.roa (hash: 9rxLZS+5H9kGmYpmtTMn6ZZUIBXYa1LvDlimXlk6PXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9a:74:6e:59:6d:d7:29:03:83:98:30:bb:9a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=f76b91c46bc3b7c2d2a919386f5923cea7c833e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:d6:31:d9:08:cf:f6:d6:8a:e1:95:68:48:
a6:62:09:51:2a:3b:d0:c8:83:d4:70:55:00:3b:29:
36:9b:08:e6:d3:41:91:01:07:6d:6e:b8:96:1f:a8:
a9:a9:45:e4:7b:34:2e:5d:0b:5f:a0:10:58:f8:58:
8e:54:c0:5d:1e:6b:0c:c5:35:72:7b:e5:c8:f8:4a:
23:b9:1f:1c:ae:68:26:b2:cb:1d:e5:9e:6d:05:89:
e4:c2:8a:14:97:55:4b:f2:54:67:54:75:1e:0f:e2:
df:19:10:76:b3:28:4e:6a:3a:34:f2:dd:8d:e8:6b:
15:45:7b:aa:72:52:9d:17:04:91:10:ba:c9:01:80:
5f:f7:59:66:7e:cf:bd:84:41:b8:5e:b9:c7:7a:3f:
8b:b7:5f:5b:86:f6:11:9e:ae:17:c0:97:ef:b9:40:
2b:75:0a:e9:f5:ae:19:2a:3c:74:b2:ba:bd:63:19:
44:3c:9b:90:36:f0:6d:65:df:64:32:a4:4b:d6:ec:
ff:39:39:68:ef:24:f7:7f:46:48:2d:f6:b6:bb:23:
9c:e1:36:ee:a7:9c:a0:c8:a2:03:77:4e:cd:01:00:
f5:01:9a:44:88:eb:18:42:05:60:03:90:ed:2a:ce:
c2:33:de:d7:27:79:07:4e:b0:d6:d4:ed:f8:08:43:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:91:C4:6B:C3:B7:C2:D2:A9:19:38:6F:59:23:CE:A7:C8:33:E9
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cc:e5:60:0e:a6:47:30:e1:2b:b0:db:9f:1f:e0:61:49:c3:
52:4d:6a:6d:0d:60:d6:9f:7a:64:95:40:ec:41:66:57:08:94:
42:27:83:79:98:e5:a6:49:f3:36:0c:4c:fe:2c:46:29:7f:b2:
8f:17:e6:03:d2:18:8f:fe:8b:81:72:e5:5d:a4:8a:0d:0a:c8:
5d:5d:10:60:d0:75:90:7f:02:1d:70:37:87:78:f6:ad:08:a6:
43:60:26:bc:be:74:59:2d:a8:b8:f0:b1:27:b1:7b:46:ca:96:
d7:0a:44:d0:3f:6d:69:9d:a2:79:06:13:8f:c8:8c:df:6d:88:
4f:7d:a7:16:a9:8f:bf:4c:a3:e1:0c:66:20:d8:a8:1e:2f:b6:
31:ab:2f:eb:cc:de:26:2a:6c:c8:17:47:cf:80:8e:fd:97:bc:
d0:4c:6e:c8:5c:fd:54:b0:50:17:f9:a2:9a:15:e6:a9:52:71:
4c:ed:a9:d6:67:53:5b:fb:32:54:35:84:61:6d:1b:34:73:5f:
2c:57:93:99:f0:42:6b:f0:97:d6:36:53:d2:78:fc:f9:1d:00:
5f:01:d5:91:41:2a:0b:2c:df:bf:2d:89:43:49:b2:76:d7:bc:
6f:94:fc:0f:8d:27:bc:46:ef:43:89:2c:3e:72:36:d8:81:ae:
53:b4:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:55:26 2025 by rpki-client