Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier: gjalJGiGX4Qx+QpiYoAe+2CU0K4x6LN8sI0E2b2isXo=
Subject key identifier: F1:B6:D1:05:E7:62:A7:DC:28:3A:34:FC:34:EE:5D:F8:04:75:14:44
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 0198D4A7B526634197F0CB624E98F0B1FF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number: 010C
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: uraL2zgtjImXao0Zpnw5jKS/KnPdccOSKjp7kbaAlYM=)
2: tFY_1oU9xNxzF5JnlbdrLi4cQ9A.roa (hash: Sxl+M0Cfp0KqUWFjQhEzTtXSwHwXwN4AdOusnlZXPTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b5:26:63:41:97:f0:cb:62:4e:98:f0:b1:ff:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=f1b6d105e762a7dc283a34fc34ee5df804751444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:6f:0d:f2:9b:e7:ee:fb:43:7d:39:98:d5:
ba:a3:91:a4:21:d6:3d:11:cd:33:cf:d0:7e:b3:5a:
2b:5b:11:dd:77:3f:1c:9e:0a:e1:c3:d9:ba:22:0b:
51:eb:76:4b:74:c1:5b:e2:fc:7d:9c:4c:ad:9c:de:
d6:c5:97:49:5f:18:c6:35:b4:2b:27:13:35:ff:58:
4b:b9:14:df:d2:f4:04:e9:4c:f2:ea:2b:bb:53:d4:
4d:fc:30:d1:76:85:0d:69:8b:89:76:45:f4:d2:4d:
b5:70:8c:61:42:a4:f2:b7:81:49:74:20:25:7b:b4:
0d:f9:8d:d7:f4:a9:51:49:ce:f7:b3:a8:e8:96:87:
d7:50:9f:5b:af:58:43:49:38:b1:77:ea:5b:fb:d2:
aa:68:a1:59:9e:41:be:2e:a0:5c:d3:f8:10:22:ff:
8c:f1:39:55:07:d6:79:9d:ff:8d:fd:b8:d6:68:78:
98:c0:6b:d9:0f:bd:38:75:fa:5e:dd:b9:71:37:bb:
61:05:06:ce:6e:1c:7e:f6:7b:34:ba:47:d3:26:a0:
c2:6d:b3:02:6b:73:4b:5d:29:09:62:2a:9f:22:77:
5f:37:f8:f9:a5:88:2b:d5:a9:02:41:b5:bb:e6:90:
48:06:18:a4:85:37:68:bb:8c:38:1c:87:8a:01:cf:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:D1:05:E7:62:A7:DC:28:3A:34:FC:34:EE:5D:F8:04:75:14:44
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:99:ef:84:2f:5a:8e:3e:32:79:21:46:56:ab:1f:29:bd:ed:
5f:9e:1b:2f:dc:b4:e7:57:75:31:2b:9c:fa:c5:f0:ea:7a:6b:
ef:9e:28:de:7a:5a:a9:6f:06:ea:79:96:86:49:60:2a:fc:dd:
b1:49:bb:e1:04:90:56:0a:a3:4f:76:ce:19:61:e5:22:1d:26:
00:42:07:1b:c2:56:1c:f2:3c:85:38:dc:6f:a8:26:4b:74:b4:
77:22:35:3f:d0:aa:cf:9b:38:3f:e4:46:77:c5:ec:70:86:76:
0e:40:31:43:55:4a:99:be:0a:c1:21:3b:0b:87:51:61:72:23:
b7:bd:6e:b3:b1:dd:a4:b6:23:7f:2a:23:c1:da:5c:e0:78:6a:
a7:aa:6e:6e:f3:0a:0f:22:9f:03:b0:d5:3f:39:7f:60:d5:a8:
0a:dc:b8:cb:2d:a5:43:cb:1c:a4:b0:79:2e:6c:db:cc:ab:d0:
28:50:76:0d:4f:f3:47:9f:cd:95:0c:c7:a0:ac:49:79:1d:c9:
63:02:84:2c:0c:5e:4d:9c:fa:56:06:b4:47:e8:77:b3:4c:16:
93:84:b4:bf:32:28:b8:cc:8e:2f:b5:9c:51:08:00:a5:df:83:
be:f7:51:f7:38:e7:a6:fd:84:2d:41:79:b6:ec:4f:77:9b:a7:
b5:0b:fd:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp7UmY0GX8MtiTpjwsf8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjFiZjI0ZmYwMjU3YjNkMDVjZjcwMjkwYTFhY2Y4N2Nl
YTY0MzkwHhcNMjUwODIzMDIwMDE3WhcNMjUwODI0MDIwMDE3WjAzMTEwLwYDVQQD
EyhmMWI2ZDEwNWU3NjJhN2RjMjgzYTM0ZmMzNGVlNWRmODA0NzUxNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudxvDfKb5+77Q305mNW6o5GkIdY9
Ec0zz9B+s1orWxHddz8cngrhw9m6IgtR63ZLdMFb4vx9nEytnN7WxZdJXxjGNbQr
JxM1/1hLuRTf0vQE6Uzy6iu7U9RN/DDRdoUNaYuJdkX00k21cIxhQqTyt4FJdCAl
e7QN+Y3X9KlRSc73s6jolofXUJ9br1hDSTixd+pb+9KqaKFZnkG+LqBc0/gQIv+M
8TlVB9Z5nf+N/bjWaHiYwGvZD704dfpe3blxN7thBQbObhx+9ns0ukfTJqDCbbMC
a3NLXSkJYiqfIndfN/j5pYgr1akCQbW75pBIBhikhTdou4w4HIeKAc/8swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG20QXnYqfcKDo0/DTuXfgEdRREMB8GA1UdIwQY
MBaAFAMhvyT/Alez0Fz3ApChrPh86mQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlHX0pQOENWN1BRWFBjQ2tLR3MtSHpxWkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iM2NiNGMtNmUzNi00YzQ4LThmZGUt
OTQwNDZhYWJmZjlkLzEvQXlHX0pQOENWN1BRWFBjQ2tLR3MtSHpxWkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iM2NiNGMtNmUzNi00YzQ4LThmZGUtOTQwNDZhYWJmZjlk
LzEvQXlHX0pQOENWN1BRWFBjQ2tLR3MtSHpxWkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpnvhC9a
jj4yeSFGVqsfKb3tX54bL9y051d1MSuc+sXw6npr754o3npaqW8G6nmWhklgKvzd
sUm74QSQVgqjT3bOGWHlIh0mAEIHG8JWHPI8hTjcb6gmS3S0dyI1P9Cqz5s4P+RG
d8XscIZ2DkAxQ1VKmb4KwSE7C4dRYXIjt71us7HdpLYjfyojwdpc4Hhqp6pubvMK
DyKfA7DVPzl/YNWoCty4yy2lQ8scpLB5LmzbzKvQKFB2DU/zR5/NlQzHoKxJeR3J
YwKELAxeTZz6Vga0R+h3s0wWk4S0vzIouMyOL7WcUQgApd+DvvdR9zjnpv2ELUF5
tuxPd5untQv9DA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:12 2025 by rpki-client