Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: UTHRYsVi1B0j/G7rsCwqYWbIkVuvJyQw4BerYf5uKos=
Subject key identifier: C5:FD:6D:8D:87:8E:BD:2C:4C:37:27:58:27:40:50:CA:E4:8D:57:DF
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 0198D884C2AB09AB86EEF90F6BFE14EB5E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 94
Signing time: Sat 23 Aug 2025 20:00:35 +0000
Manifest this update: Sat 23 Aug 2025 20:00:35 +0000
Manifest next update: Sun 24 Aug 2025 20:00:35 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: YcxDnukhATb6LAoxh4PDq1cAbVFp5u6qyLOLlaTEgCY=)
2: hNq3yGnPCHaydptWbrbgby3w7SM.roa (hash: TF/bJmN5adtoEqSxW4KjZfMJbH3NebJd9z02MI+Ip68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:c2:ab:09:ab:86:ee:f9:0f:6b:fe:14:eb:5e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Aug 23 20:00:35 2025 GMT
Not After : Aug 24 20:00:35 2025 GMT
Subject: CN=c5fd6d8d878ebd2c4c372758274050cae48d57df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:64:9a:f6:7e:ab:0f:b5:8c:16:73:41:cd:
ec:42:be:ff:c4:e8:18:76:22:9b:88:77:de:f4:53:
28:e2:8d:f3:cc:02:70:07:fc:ee:dc:55:6f:c5:0f:
7f:fa:3a:22:2f:66:48:d0:d5:e6:e9:51:46:21:9f:
5d:63:4b:e9:e1:4c:a5:83:4e:f4:70:a7:78:89:4c:
23:55:88:4c:79:f9:ff:a1:57:4f:57:10:f2:42:94:
6e:df:40:3a:8e:58:80:7b:2b:19:ac:62:21:80:57:
ce:ef:79:38:e3:5f:af:77:21:c0:5f:0e:80:14:c5:
b7:17:b6:35:9d:23:7a:34:ef:62:25:c3:29:98:3a:
04:9d:fb:4e:51:f7:c6:2b:4b:8b:d6:72:aa:a4:7c:
d4:c1:07:da:e2:0e:f8:5a:75:7a:c9:56:ca:73:24:
4a:e8:00:62:c2:4a:ef:1c:4e:11:ff:e6:78:35:e1:
0a:1a:25:37:41:3f:76:67:a9:ad:58:6f:46:53:eb:
d3:78:53:9b:0d:fb:4d:69:f6:a7:8f:21:11:94:99:
55:09:2c:0b:32:02:89:d9:1c:6d:97:e4:1a:b5:79:
f9:1b:f8:a8:75:28:0d:0a:a5:e7:bb:b7:96:5b:36:
50:28:cd:44:c7:5b:f3:03:f7:68:53:fa:cd:e9:ed:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FD:6D:8D:87:8E:BD:2C:4C:37:27:58:27:40:50:CA:E4:8D:57:DF
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:86:63:66:e3:45:11:8a:05:f9:72:3c:75:50:54:2b:21:
93:e8:17:5f:02:f0:64:98:d9:58:38:10:a1:e1:51:ab:f0:80:
d3:cb:af:08:36:83:b0:31:7d:27:db:f3:f6:7b:6f:79:a3:90:
3e:58:7e:3f:55:67:c3:c3:38:68:c1:b4:4b:be:ef:2f:67:7e:
ea:25:0c:2c:4a:9d:9e:e7:b2:0b:8b:43:38:b4:09:fb:0f:87:
b1:a1:90:5e:1b:1e:22:ac:ff:02:76:83:5f:88:e5:15:61:55:
9c:8c:39:1a:cf:41:a6:16:99:6c:90:72:cf:03:28:71:27:a2:
36:67:40:71:0b:2a:c7:9b:f4:bd:5d:77:f7:80:ad:8e:fc:1d:
85:9b:3c:30:f6:14:74:93:9c:11:30:e2:5c:5c:7c:30:98:45:
0e:fd:df:6a:06:c3:79:b9:92:5b:a8:fd:61:c4:d3:8f:b6:d1:
b2:14:d7:74:74:0c:1e:eb:51:3f:86:88:d7:f5:80:ab:3e:8c:
c0:9d:a3:e7:b9:7d:9f:83:e0:1e:a6:8c:f5:eb:2d:77:4e:09:
45:11:2c:e0:57:ed:cd:a5:c0:6e:93:c9:b7:ab:39:f5:40:7b:
74:e1:0d:ea:e7:e6:db:93:46:ff:1d:ff:12:12:11:2e:39:6d:
8e:ba:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:34:13 2025 by rpki-client