Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File: AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier: waZMOUJMBu3QP0nYQenoPNlRaGM5vZVmJ2eyoOBBpMI=
Subject key identifier: DD:12:F2:C5:DF:7B:C1:5B:CF:BB:40:20:8B:52:79:61:D1:F3:5B:B3
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 0198D5BBF175757E5C1E9EA0BCCE448EE944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: JSJk/rfMURf0lUmTjKBw0/rmFpaY03ndD6DJqrNgBH8=)
2: V2K-oZleXeUaxCNtSI8GJz8R-T8.roa (hash: BfQ/+c4yu8OqgDpQuVge6IJ1WfNKM140JuABCwOq8WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f1:75:75:7e:5c:1e:9e:a0:bc:ce:44:8e:e9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=dd12f2c5df7bc15bcfbb40208b527961d1f35bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:04:59:b8:40:40:25:fc:88:d1:b6:f0:d2:
b6:44:89:d7:12:cd:0b:99:77:c9:df:13:6e:3b:0e:
ff:92:a1:78:75:ca:bd:ec:27:7e:54:b7:f2:3a:93:
79:5b:da:18:46:0f:28:93:d4:70:3d:a7:6e:8c:ce:
50:8e:98:0f:23:26:88:d3:bb:0e:8d:d1:2d:31:8f:
5e:ac:13:af:41:e4:59:25:4f:5b:e4:c6:2e:4b:be:
1b:23:f6:c9:dd:1b:b9:7a:f3:36:ca:01:0e:d3:fa:
d1:9d:e5:2d:fa:af:5f:75:e0:ea:9d:df:83:61:8d:
ca:0e:9c:73:0a:61:6f:3f:38:96:54:6a:f3:f1:fc:
28:66:4d:04:84:fa:d7:c6:ba:35:fd:66:5c:5f:42:
f1:75:87:26:c9:1c:91:2c:63:8a:f7:d8:dd:37:8f:
1e:ae:f8:73:46:60:d6:2c:92:b7:80:df:e4:34:56:
10:71:79:c4:99:9a:0e:ac:9a:3c:5b:79:e2:5b:98:
7a:46:a8:aa:aa:49:48:72:14:cc:4a:4b:f0:d1:c1:
0b:43:40:2e:07:68:7a:90:fa:2c:da:39:a5:9e:3d:
09:5d:3e:b2:39:59:d6:5c:8b:2a:84:2d:68:87:a2:
86:a7:cd:c5:23:e9:bb:ad:83:96:2b:23:16:ae:83:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:12:F2:C5:DF:7B:C1:5B:CF:BB:40:20:8B:52:79:61:D1:F3:5B:B3
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a0:69:28:47:bc:0f:12:bd:66:c4:01:7e:1d:c9:a7:49:87:
11:e5:5e:64:52:67:62:89:83:83:20:d4:e5:7c:34:e7:b1:69:
6a:30:d7:26:e0:cc:95:20:d1:a3:61:78:4e:7b:7b:cc:79:7c:
0f:20:02:31:d1:aa:9a:0f:07:41:3a:4d:03:0d:2e:7c:65:dc:
54:fd:71:b1:a0:cd:b6:40:9f:3d:69:8c:ea:13:60:8a:0f:db:
e6:2b:69:0a:6d:b0:75:de:af:2a:a0:c0:43:9f:ec:db:88:8a:
9c:a6:55:98:24:c5:0d:27:46:88:f6:57:a8:49:1d:00:05:13:
5d:7a:33:70:5e:22:f5:74:c8:3b:97:ce:c4:98:94:ea:14:6b:
60:37:54:71:11:5f:45:ca:10:99:c8:12:5f:18:a8:c1:e0:52:
c9:0e:44:78:cc:ff:e5:03:f6:02:67:b8:b3:40:02:49:99:2e:
77:0e:fd:f9:0c:94:17:b4:e8:a7:7e:8e:73:ca:28:d6:2f:bf:
ca:e7:a7:e0:54:51:0c:01:f2:c8:54:c3:69:51:98:32:a8:03:
3c:f9:3d:73:d2:7d:4c:10:fb:6a:ee:7d:3d:dc:86:5e:21:dc:
a6:8a:39:73:45:65:43:17:57:21:fb:ed:29:52:5a:dd:02:10:
8a:73:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:43 2025 by rpki-client