Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: JfOZRFhGI74DuY269uNfE0cTzefj7AkCEs+cKpFUIy8=
Subject key identifier: 47:C0:45:7B:28:8A:07:CD:0A:F7:42:64:00:84:3E:38:F5:A7:37:D8
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 0198D4A82D113462F067F1DA4BDFDDB45663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 1111
Signing time: Sat 23 Aug 2025 02:00:48 +0000
Manifest this update: Sat 23 Aug 2025 02:00:48 +0000
Manifest next update: Sun 24 Aug 2025 02:00:48 +0000
Files and hashes: 1: TBGpVFI2lLvyIH4AY_XvgasXlhQ.roa (hash: tvFeHcNNfQ4t5ATDiY+/Dak2Xl/WexRzcSGHjDplBZM=)
2: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: j/KFJ4IEv6eq4UU1UwxPyVIEnSvCvmTiu01FYiXKD+Y=)
3: rbkwFcYLaEEcgP57xj9znwlpmj4.roa (hash: enJo8AXIWRTz+79R6txrBmjabj1OaXyVz0RKSwmCnM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2d:11:34:62:f0:67:f1:da:4b:df:dd:b4:56:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Aug 23 02:00:48 2025 GMT
Not After : Aug 24 02:00:48 2025 GMT
Subject: CN=47c0457b288a07cd0af7426400843e38f5a737d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:a1:de:3f:91:a2:16:b1:c2:c2:39:a6:37:
32:bf:01:c1:0f:ef:51:7f:f5:4b:1b:2d:fb:9f:16:
9d:83:8c:5b:01:e7:45:92:54:91:28:74:19:9f:58:
08:79:8d:6b:ab:39:d9:28:46:c2:99:cd:93:56:62:
be:1f:cd:14:93:56:6e:50:63:4e:92:3c:5f:b8:b2:
75:f4:31:f5:ca:3a:eb:8f:61:b2:2c:02:5b:3a:0f:
f4:03:97:12:6b:76:39:73:17:ef:f0:a9:ba:fb:5a:
05:0c:f1:0b:58:08:30:de:88:c2:98:98:24:f0:26:
77:f0:6e:73:a5:d9:4e:9c:c0:09:80:37:b3:95:4a:
c8:6e:87:2d:6a:ea:24:ea:27:d5:3b:9f:58:7f:d2:
67:f9:4c:d9:6c:32:9e:da:af:23:05:1e:69:56:a2:
ee:27:99:af:57:8f:0f:8e:42:f5:9f:77:ff:9a:ee:
f0:59:30:5c:95:82:c7:28:95:5c:2d:b1:cd:f9:d8:
58:aa:5d:77:aa:81:65:f5:46:35:9b:54:ff:5c:2e:
a1:63:aa:d1:83:c4:65:84:6e:23:d3:26:76:8b:54:
be:ef:da:01:27:c5:3b:79:60:54:b3:06:1a:5e:78:
d9:f9:b7:a8:13:d0:28:7b:e3:d2:d0:4c:cd:80:9c:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:45:7B:28:8A:07:CD:0A:F7:42:64:00:84:3E:38:F5:A7:37:D8
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cb:ac:5e:15:fb:48:81:49:51:28:ae:cc:26:eb:cd:e8:55:
6f:03:56:fc:94:7b:b9:d5:8e:c6:2c:e7:ac:1d:4f:8e:ad:e7:
63:e6:18:3e:5c:13:45:2d:f5:9f:96:83:81:e6:c4:fa:f9:89:
70:23:3b:c6:da:7d:07:84:8c:92:8f:3e:54:e9:8c:33:d8:00:
30:e9:46:33:62:2e:e8:b7:e0:ce:25:60:77:1d:62:72:fe:f1:
29:2b:fb:65:d5:57:fe:26:df:62:1d:c7:55:08:a4:b3:71:34:
c1:a4:28:40:90:56:05:c9:17:02:86:24:e2:c3:f9:45:f6:25:
19:4f:a4:f8:b4:a8:b4:db:57:bc:f4:49:25:3c:89:51:ef:f9:
a2:7f:fd:91:7a:56:f9:5e:a2:e5:f2:22:07:3d:51:72:d0:c4:
5b:ba:1a:eb:ef:c5:45:c9:ef:39:0c:11:66:71:33:cd:ef:ae:
5d:70:99:2e:16:70:ef:1a:8d:46:71:e4:4a:e4:ea:bd:0b:ad:
2a:24:6d:6b:0c:dc:37:3d:3d:81:bb:f5:9b:14:72:a0:75:a3:
99:76:92:5b:f8:42:39:3a:73:05:31:51:86:29:8e:6c:b3:cd:
79:e5:cb:6f:9f:d3:95:b4:cf:5e:d5:1b:2c:a2:73:10:90:bc:
fe:61:35:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:09:36 2025 by rpki-client