Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: w4/epVXwdipSf5RVsxZzkK3L0It0mP/mA3nEGpfEidQ=
Subject key identifier: 7A:D7:AE:28:54:D3:81:15:45:46:2C:B5:7A:FA:2D:4B:DC:80:84:9D
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 0198D660D03474B8BC33C8064EF4633B86A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0A09
Signing time: Sat 23 Aug 2025 10:02:05 +0000
Manifest this update: Sat 23 Aug 2025 10:02:05 +0000
Manifest next update: Sun 24 Aug 2025 10:02:05 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: vyf4khSfqZ/1OjdO1wrB0vvW70Fj8NWLGdaei97dpiA=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d0:34:74:b8:bc:33:c8:06:4e:f4:63:3b:86:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Aug 23 10:02:05 2025 GMT
Not After : Aug 24 10:02:05 2025 GMT
Subject: CN=7ad7ae2854d3811545462cb57afa2d4bdc80849d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:76:76:7b:71:59:40:3b:0e:e2:ad:7b:2c:
1f:c9:db:56:a3:9b:1e:42:fb:b5:33:06:6f:43:cf:
3b:4e:e4:dd:ab:67:60:87:c5:bf:fa:5a:25:62:22:
2d:c6:92:27:19:0a:5f:7d:de:54:1d:ea:b2:8f:35:
f2:99:b9:52:54:fd:98:f0:15:bc:8e:35:d7:b3:bb:
25:04:a3:d0:90:9b:d7:59:af:df:23:97:11:8d:c1:
f4:5e:61:ab:0f:d8:5a:d7:2b:a6:1b:ce:82:96:fe:
e5:3b:ed:bd:8d:85:1b:2a:bd:b1:00:41:e1:60:bf:
6f:60:33:57:f0:81:87:b2:a6:c7:a4:43:16:d1:19:
a0:76:76:c2:b9:52:6b:42:10:d8:71:84:c7:dd:1a:
48:7d:5b:0f:90:83:aa:24:bf:3d:a3:74:0a:27:4e:
c1:c5:cd:3e:83:db:68:8a:09:5f:f3:23:3e:a4:6d:
87:24:7e:1d:ea:43:45:76:eb:59:10:51:1f:84:79:
64:f8:35:94:d0:f9:16:db:6f:1b:62:f5:16:a1:43:
73:78:d9:fe:37:a0:96:5f:55:8e:8e:b3:ee:07:de:
66:f0:97:8e:d2:4b:53:06:82:8e:8d:33:8b:0b:f9:
f1:ec:d7:cb:0c:3d:fb:b3:22:b5:a8:c7:95:e7:30:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:AE:28:54:D3:81:15:45:46:2C:B5:7A:FA:2D:4B:DC:80:84:9D
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:16:1f:9e:c5:9a:df:61:2e:06:4c:c7:06:74:37:4b:52:64:
23:9d:2e:f2:00:28:77:af:0b:48:c8:6b:4e:c4:b4:8d:7c:8f:
b1:05:0a:ef:87:b8:5e:3d:b3:68:ba:cb:7f:dd:6c:9c:1e:a0:
7f:7d:7f:a1:06:39:c0:84:59:46:f3:82:86:68:fe:c0:14:bd:
e7:ed:18:bb:53:a8:72:9b:11:05:46:59:c9:0f:8e:4e:84:66:
d0:05:62:93:fe:a5:4a:72:92:d4:67:04:e0:e5:58:20:f9:a5:
1d:8f:1b:41:fa:b3:33:c3:b2:8d:99:2c:0b:34:7c:39:b0:3a:
83:cd:cd:fe:2a:d2:8c:3f:e4:54:98:0b:98:b6:7f:f0:32:51:
f4:51:46:04:6b:97:ee:53:25:36:b5:db:be:51:cc:9f:a4:81:
81:f2:89:ef:c1:dc:4e:33:15:36:de:64:7f:9e:0e:c0:ca:8a:
8f:de:2c:05:d2:0b:52:f2:ba:35:d8:35:af:dc:a3:cf:4a:90:
ac:f4:12:23:af:b2:97:c1:97:43:ac:f2:c1:05:63:34:cc:1b:
1a:33:12:e3:80:8c:10:a9:12:44:86:86:c7:8d:29:95:8a:e4:
e1:12:8e:70:ea:ba:80:90:f1:e6:90:5c:8a:54:d6:79:cd:58:
18:5b:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:20 2025 by rpki-client