Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: 1gRwNk2rhCR+JQy88f7fXdC7FbeoNcnbwvz/igxJo0Y=
Subject key identifier: EF:13:3C:AB:39:DD:15:EC:7E:40:F1:0B:08:64:38:B9:82:1B:18:3A
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 0198D65F56D74F5122AFAECDAE57EC9E352C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 0512
Signing time: Sat 23 Aug 2025 10:00:28 +0000
Manifest this update: Sat 23 Aug 2025 10:00:28 +0000
Manifest next update: Sun 24 Aug 2025 10:00:28 +0000
Files and hashes: 1: 9V1tND3zl52dvTGUP5zkoYgjSzk.roa (hash: ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=)
2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: grBAOLXxmVLQysOxpYM0kcirY99v6kn9HVRZGYBKYC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:56:d7:4f:51:22:af:ae:cd:ae:57:ec:9e:35:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Aug 23 10:00:28 2025 GMT
Not After : Aug 24 10:00:28 2025 GMT
Subject: CN=ef133cab39dd15ec7e40f10b086438b9821b183a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:75:be:da:79:e3:89:7c:99:cd:e6:4c:37:
fa:e3:1e:ec:c8:1c:42:52:c3:fc:64:af:05:22:c5:
b2:7e:84:37:db:8d:bc:79:b7:35:c8:10:9e:8c:11:
17:4b:0b:61:df:3c:5e:bd:84:31:52:01:9a:a5:29:
e2:08:75:ba:7d:c7:4d:81:0a:d3:3f:84:79:62:c4:
4a:aa:d3:e9:1b:d0:c7:b8:12:4b:9f:af:de:6e:ca:
95:a0:ff:ed:4f:d8:2d:bb:28:fe:e5:a9:d8:22:29:
42:d1:3c:12:0b:73:a6:04:c4:1a:ab:e9:df:df:ba:
12:30:f1:63:b5:d6:85:bf:49:41:86:9f:b4:28:6c:
04:a2:65:79:f4:a3:9c:0c:68:24:d6:cb:93:0c:42:
69:89:81:e9:b4:52:81:31:e5:a7:1b:8b:e1:05:fe:
40:71:c9:8c:95:52:67:36:dc:0a:48:3d:54:4b:d2:
4f:08:9b:69:8e:07:03:af:c8:07:07:cc:2d:fb:6b:
db:9a:4c:35:95:c6:51:04:e0:d0:cc:9c:11:b5:fc:
a0:a9:93:b2:97:c5:67:06:a9:ab:29:4c:1b:66:64:
d2:b5:ad:f4:67:37:98:31:01:db:7a:7c:78:a5:dc:
4d:08:b5:f6:f8:34:0d:cc:5f:7f:60:17:3e:3f:88:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:3C:AB:39:DD:15:EC:7E:40:F1:0B:08:64:38:B9:82:1B:18:3A
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:94:75:c5:17:aa:59:f3:97:a7:a9:28:23:41:8a:af:4a:fe:
e7:9f:54:91:7e:ab:1d:3c:d2:18:4f:7e:12:d1:03:91:b0:01:
52:cb:2a:b7:be:54:d2:6f:63:12:ee:d2:ec:be:d4:42:f2:4c:
29:13:e2:ce:c6:b4:f9:b8:33:02:1c:8b:71:cc:5e:14:1f:ad:
7b:b8:ca:9d:23:35:06:84:93:6f:e0:d0:3e:fa:5b:34:32:65:
6e:d2:89:ea:7f:dd:ad:49:03:5a:ba:1e:22:3c:d1:9e:83:76:
50:b2:e7:93:89:cc:99:a4:7d:63:b9:ae:c6:62:56:25:f2:34:
0e:7c:e9:31:42:9e:0c:fd:95:52:d8:0f:1b:44:6c:02:96:2b:
90:d3:9f:3d:15:e5:7d:a6:61:35:9a:fe:ad:d4:77:e2:c2:fc:
56:66:61:e9:bf:c3:f8:ec:44:a8:b6:74:2e:06:e3:bf:08:8f:
00:42:7d:31:c7:ce:56:e7:7c:1c:5f:d3:2c:d9:b1:bf:1b:6f:
4b:91:bc:7e:2b:ec:08:a3:3f:f9:e1:9a:54:f8:00:ae:bb:1c:
ec:07:94:4c:08:99:80:38:1f:0c:28:29:d4:d1:6d:34:71:3a:
98:ed:ad:b8:05:71:a9:82:91:f3:bf:29:5d:fa:bf:1a:c1:28:
87:3f:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:29 2025 by rpki-client