Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: aDxxiLBromCo51nRE+/rwYKQb+CKDyVXXJWcs732a7c=
Subject key identifier: AD:7A:58:7F:C7:9D:CE:5F:66:2D:9B:B5:19:1F:76:D0:3E:49:B3:5D
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 0198D58387E3E068A2FB4071DE76E3946A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: MIwskv3SWxs1DofklDQnEmne/AxDCivkOe/wA79ku3w=)
2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:87:e3:e0:68:a2:fb:40:71:de:76:e3:94:6a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=ad7a587fc79dce5f662d9bb5191f76d03e49b35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:96:c4:5d:eb:a1:0a:d6:d5:8a:46:c3:a8:
77:6a:3b:6b:c9:df:26:1b:c1:10:f2:2a:1f:77:aa:
59:6a:0c:bc:b7:b8:1c:9b:26:e0:e8:43:b9:b9:7b:
41:f3:90:44:e1:03:3b:a8:1c:5a:80:ea:fb:37:8b:
4d:73:54:3a:72:66:3b:3b:6f:90:68:5d:c4:ad:47:
97:24:2f:08:d4:91:f8:42:74:08:1f:fb:25:1a:bc:
00:d7:1b:31:76:29:31:7d:e9:be:55:a8:b2:b1:35:
0d:11:33:84:47:e7:43:d1:2f:fc:33:53:4c:7d:bc:
66:24:52:07:4d:3f:94:bd:18:48:fb:15:87:4f:21:
db:1a:1d:4d:ac:06:ed:0a:ae:d0:21:e7:f5:91:07:
91:2e:85:52:ac:7c:4e:34:19:71:29:a7:3f:e4:98:
97:8a:36:99:f9:ca:e5:6a:41:ce:66:d5:50:43:1f:
c7:94:d9:56:90:ec:48:a3:63:86:0f:57:8d:8e:c7:
24:c1:73:ab:a1:88:b5:a1:15:29:c8:9e:3e:01:d2:
d8:38:01:61:b2:2e:c0:e6:53:79:31:1c:af:37:8a:
62:dd:b7:da:bf:d9:c9:e0:e1:ee:62:45:24:bb:54:
52:a1:4f:0c:6d:35:50:85:32:a8:d9:15:ac:bc:fb:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7A:58:7F:C7:9D:CE:5F:66:2D:9B:B5:19:1F:76:D0:3E:49:B3:5D
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fe:20:d8:b0:e9:24:2a:c7:29:72:f5:40:1d:83:f0:44:1a:
61:bc:b9:2d:1a:e5:1e:d2:35:6b:58:2d:2d:0c:64:d1:dd:30:
89:05:7b:13:81:4a:39:36:14:6b:5f:54:24:92:be:5e:97:0a:
1a:c7:20:73:55:c0:9e:2b:4c:11:92:63:84:44:46:78:40:77:
24:6c:b1:fc:cd:63:8d:90:5a:ca:57:df:e0:9c:34:31:80:18:
fc:74:e0:04:50:8c:28:1e:db:9c:bf:4f:f6:7d:30:fa:62:60:
fe:cd:cb:a8:b6:b2:79:6f:61:93:b9:69:b9:ba:6b:09:5a:88:
8c:e4:1e:48:c3:cd:a6:35:f4:87:a2:c9:a1:14:ee:7c:e2:14:
b5:93:56:58:23:b8:79:40:99:89:f6:9a:56:21:70:ec:24:eb:
c4:82:6e:c3:1b:59:ed:79:44:04:2d:c8:9e:69:b0:96:7e:1c:
9e:5c:e3:88:90:8f:03:67:89:ea:40:2a:ae:0b:fd:d9:39:17:
4d:69:98:f7:40:be:8f:52:85:e5:74:e9:a4:e9:b7:a2:1e:c5:
7f:45:eb:de:10:12:f7:f4:91:88:d5:23:8a:b0:51:bf:04:83:
ef:7e:2e:2c:f0:8c:3f:c1:ef:9c:52:bf:e6:21:9d:03:99:e7:
86:16:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:39 2025 by rpki-client