Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: VFa8RV9yE/sknxIQt7VT/tocV4X4hrzetK4xw+eZQz0=
Subject key identifier: AD:F7:80:0C:19:E2:B6:95:F7:A9:55:2F:16:F1:58:6C:CA:11:CE:08
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 0198D65F856227A666A5B948CDC9213960C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 0FC9
Signing time: Sat 23 Aug 2025 10:00:40 +0000
Manifest this update: Sat 23 Aug 2025 10:00:40 +0000
Manifest next update: Sun 24 Aug 2025 10:00:40 +0000
Files and hashes: 1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: tVCcifGt5N3OAsHn2FlzgblWWNjAQbUz1IDkgrI2EGY=)
3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:85:62:27:a6:66:a5:b9:48:cd:c9:21:39:60:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Aug 23 10:00:40 2025 GMT
Not After : Aug 24 10:00:40 2025 GMT
Subject: CN=adf7800c19e2b695f7a9552f16f1586cca11ce08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:a6:b8:67:e1:2c:ea:f6:df:ec:22:1d:01:
4b:62:4f:7e:a9:dd:83:7c:be:29:d5:aa:8b:e3:e8:
b2:42:99:3f:a0:8c:9f:f0:aa:8f:89:b2:c0:e9:4d:
3c:2f:55:0d:4e:8b:96:71:ee:81:5e:dc:51:d4:01:
59:33:8d:2c:8c:b1:cf:9f:2c:7d:84:f2:b9:e2:23:
dd:c2:a8:ed:7f:da:1c:70:30:aa:60:32:64:6e:fc:
e4:27:2d:72:39:4e:11:6b:e7:e2:b8:86:16:7d:97:
81:c1:10:2b:46:32:cf:c0:70:a5:eb:80:4e:76:95:
cb:ae:90:8b:68:71:fa:2a:f7:9f:73:bf:41:cd:32:
13:22:ef:e0:ae:8a:02:99:cf:87:4c:51:98:79:8e:
af:8d:16:30:74:77:60:3c:fd:4c:51:c0:fa:e7:83:
f8:67:a3:35:da:36:d2:32:12:90:c4:99:dd:3a:ff:
bf:30:b4:7a:60:d1:81:b0:13:03:03:92:b8:b9:b0:
44:d8:bf:2d:ec:15:f3:aa:6d:f0:34:d1:86:e7:f9:
8d:7f:c6:cd:e4:54:85:c1:c6:67:a4:e6:78:52:e0:
38:44:17:ba:fe:e9:4c:4d:d2:95:7b:86:53:2c:a1:
b6:00:97:a6:8d:f5:f3:f5:dd:1a:b5:2f:02:86:e5:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F7:80:0C:19:E2:B6:95:F7:A9:55:2F:16:F1:58:6C:CA:11:CE:08
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b7:2b:df:9e:74:02:97:88:31:c6:df:e2:8e:0e:30:4b:00:
3f:e2:32:06:92:ab:a0:cc:a4:71:20:40:dc:d2:89:c8:52:e0:
1c:cf:b0:da:0e:c9:e0:83:61:f2:0e:10:81:30:21:74:9e:41:
b6:25:bb:a3:98:48:48:b7:1c:3b:a1:c2:c7:c7:67:80:37:5c:
22:0e:e3:54:03:9b:da:0d:b0:cd:71:d7:d2:0c:02:b8:04:9e:
c4:46:fa:0c:0b:50:99:1a:bf:d2:22:85:dd:0d:01:76:1b:9a:
eb:9f:20:be:1e:21:d5:31:7b:0b:e2:c9:b9:77:32:38:03:0d:
66:d7:3b:0c:fb:82:10:27:33:e4:20:38:a0:5f:7b:01:09:9b:
92:72:1d:67:26:ba:01:d5:a9:a9:68:3d:f6:aa:75:e9:a3:a2:
06:92:b7:77:83:93:01:db:85:db:a3:e4:cf:c5:4c:6f:c9:54:
8f:39:22:cb:57:40:c9:6c:09:96:01:e1:a8:c3:77:72:9e:4e:
93:5c:be:0c:fc:32:17:6b:60:f2:d9:d0:8a:03:5d:9b:9c:63:
13:d7:8e:7e:d9:94:84:49:06:2a:82:34:96:84:cb:14:27:ae:
10:44:17:82:d3:97:55:69:2e:bb:e5:fb:16:9e:29:f2:68:94:
50:71:bc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:32 2025 by rpki-client