Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: jkOuY5iqJyG2K7X8lUtSpsAbHFTKCFyKloo5hCQ8orQ=
Subject key identifier: 86:CF:69:24:29:2E:90:58:92:66:83:E6:0B:D1:54:77:0F:94:B5:59
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 0198D5BBA40F737850DA9819F86BD886E20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0AB6
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: 9QKesQXwflYcf0fPM222WTbDsjhHvcaUclYUGzKfxE8=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a4:0f:73:78:50:da:98:19:f8:6b:d8:86:e2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=86cf6924292e9058926683e60bd154770f94b559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b0:34:c2:1e:89:ea:f2:d4:ff:61:26:ca:b7:
45:b3:79:ad:49:22:02:39:9e:03:71:f2:d3:30:96:
9c:16:44:83:7f:ca:ef:68:7a:cd:a8:98:18:8d:04:
8d:82:c4:92:a0:a8:05:d2:26:66:c1:35:ae:c9:17:
91:f2:05:d5:e6:d8:2b:7d:cf:de:aa:cf:a4:da:a3:
49:68:4b:74:97:51:a2:df:34:ca:84:d3:44:c9:90:
1a:a7:2b:84:d0:5d:d1:de:48:46:f3:20:97:bd:1c:
2b:b6:b2:72:1a:e7:b3:23:0a:e6:80:c7:1b:b6:97:
84:8e:ef:09:34:33:ee:ac:3e:be:75:6e:b7:50:74:
59:2c:21:b9:83:c2:1d:ba:a8:b1:c6:75:37:47:b2:
12:97:fd:05:d0:12:9e:bf:a6:e1:f8:6a:93:9f:89:
5c:7d:05:a6:31:b5:21:83:0a:03:6d:ff:e7:f0:b0:
18:81:a2:d7:a0:ef:e4:37:ec:e7:ba:8d:b9:3d:05:
96:48:ed:de:90:d0:9e:e9:f1:0d:36:39:3a:93:38:
6f:63:79:89:a4:cc:e7:4f:b8:63:89:17:89:6c:cb:
04:1a:8d:ee:af:cb:05:18:cf:63:bb:8f:34:37:3f:
bb:8c:b3:1e:75:31:67:b2:6f:cb:8d:08:bb:b6:d3:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CF:69:24:29:2E:90:58:92:66:83:E6:0B:D1:54:77:0F:94:B5:59
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:07:ff:8c:a8:3a:ce:a4:11:48:6f:2c:e6:e0:12:93:41:
ad:ed:0e:6a:51:c9:03:67:fd:e4:22:62:7a:01:fb:f4:c1:72:
4d:26:54:78:c9:0d:aa:36:29:2a:39:4c:27:4a:50:18:36:ef:
98:cc:e1:d5:51:c2:ed:9b:98:97:ea:7b:1a:d2:91:29:4f:ab:
d3:f7:8a:e3:26:36:5f:64:05:e6:cc:6c:1c:85:71:06:00:59:
ae:bf:0e:d5:24:7e:9e:cb:bc:15:13:06:85:36:43:b7:4d:31:
f6:fe:7a:e6:9b:fe:fe:27:46:81:34:c7:5f:64:12:5f:3f:98:
5e:a5:a6:43:77:1f:c1:4e:af:99:10:02:03:63:1d:61:a9:04:
7f:c5:3b:2b:ae:8b:fc:ab:52:37:40:d4:a1:ec:02:09:60:a7:
a9:e4:b3:2e:9a:14:d6:bb:1e:ca:49:77:c6:15:4c:12:44:46:
29:06:29:8e:8f:21:ba:25:e3:56:89:36:66:8b:07:99:97:0e:
e9:3c:35:bc:39:d6:63:2f:5b:3b:1a:e2:72:6d:a7:a5:f1:33:
71:20:8c:21:0c:60:7b:92:17:9f:9f:34:88:28:a0:ac:08:2d:
24:0e:14:85:1e:f3:f2:17:37:08:63:6c:71:ef:7f:05:28:5d:
fc:ab:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:41 2025 by rpki-client