Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier: JDXS0hEMX1w0d/ze03Jae/fA0suq/IRarIfTmFe0sjI=
Subject key identifier: 9B:E4:E9:A0:9B:C3:57:A3:EF:EB:BF:05:CD:C7:07:39:54:B2:76:72
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial: 0198D51566B8DDEE0AC66D7A2C5C22DF4D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number: 02DF
Signing time: Sat 23 Aug 2025 04:00:06 +0000
Manifest this update: Sat 23 Aug 2025 04:00:06 +0000
Manifest next update: Sun 24 Aug 2025 04:00:06 +0000
Files and hashes: 1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: VpV3F0kwp5VXKh64R5e3fETaVNbjWVqnPXK7hERko10=)
2: d97Ch2oOF5rboQAm4Ny7S68pdDs.roa (hash: GTey3KF1CvpIvjeJCgqABtZ3XGUGtGoEyAaxaxLHaVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:66:b8:dd:ee:0a:c6:6d:7a:2c:5c:22:df:4d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Validity
Not Before: Aug 23 04:00:06 2025 GMT
Not After : Aug 24 04:00:06 2025 GMT
Subject: CN=9be4e9a09bc357a3efebbf05cdc7073954b27672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:aa:05:bb:9a:95:80:47:0c:fd:e9:d1:ce:
00:48:36:93:8f:86:01:5d:18:c1:79:dd:94:c8:2e:
10:75:26:d8:43:9a:91:53:dd:4c:dc:ea:4f:a3:7d:
e6:60:34:82:62:cf:87:8d:36:f9:ce:13:72:ec:bd:
0a:80:5c:af:ad:14:92:64:58:79:ae:75:f7:e5:df:
24:f2:54:f2:8d:38:41:f0:1a:ed:20:bc:4e:84:c1:
cd:54:f0:d3:4a:a9:e1:1a:93:a1:6f:15:60:f2:c5:
05:db:23:d7:ca:a2:88:41:c0:75:bb:e4:ab:7c:ba:
14:45:e1:36:ae:16:8b:56:47:35:18:64:76:54:a4:
79:8d:59:82:4e:bb:48:dd:d2:4f:e9:02:74:c5:ac:
ee:99:45:88:40:2c:07:2c:30:dd:94:3f:dd:80:26:
71:f6:44:f5:af:c1:e3:e0:1c:26:50:d3:bc:4b:c9:
a1:95:a3:78:d8:da:9a:1d:65:54:e0:43:af:84:84:
ab:e9:78:3c:ca:e1:95:e5:b6:5f:44:f1:e4:3c:8f:
e7:32:c1:9a:f5:e0:5e:1b:13:40:60:e8:26:a1:f0:
dc:d8:15:ed:dd:bb:13:6c:a4:93:7a:a2:19:94:92:
b1:68:85:f7:b9:6c:a0:e0:af:3b:ff:3e:6d:9d:f6:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:E9:A0:9B:C3:57:A3:EF:EB:BF:05:CD:C7:07:39:54:B2:76:72
X509v3 Authority Key Identifier:
keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e9:a5:6a:e8:48:81:c3:1c:5f:44:8f:4b:da:e3:93:12:77:
5d:9e:a0:10:49:58:03:63:8f:eb:52:13:4c:f2:3a:49:e6:42:
7e:fb:84:65:e5:70:ab:e4:6f:fd:d3:35:40:56:08:cd:d4:7b:
5b:87:eb:81:c0:0f:11:83:fa:a0:bf:aa:2e:3b:ac:01:bc:d7:
85:83:51:fb:7d:61:a4:96:be:24:31:2d:03:c3:4f:2c:c8:d1:
a5:04:9b:a5:82:dd:2d:c3:67:77:f5:ca:1c:c2:c5:2b:f4:bd:
17:9e:53:fa:b2:a8:47:4c:29:a3:38:2a:3d:48:42:8e:5a:c7:
85:38:06:4d:dc:1e:9e:37:5e:93:1f:a6:d4:38:d9:32:9c:bb:
01:39:e8:63:b8:27:3f:4e:56:6e:6c:08:88:4f:17:a0:2a:4a:
ab:08:25:a8:51:b6:67:ec:e8:35:6b:b9:79:db:4a:a6:a3:f8:
f2:5a:15:fe:4a:8b:b5:d5:b8:ee:8d:6e:c9:13:94:10:82:ed:
57:55:b3:27:fe:67:d2:ab:06:6b:01:e2:df:35:88:1a:5a:c9:
b6:74:13:76:cf:58:9c:c8:fa:83:b3:ea:4a:31:fb:ec:58:34:
5a:35:68:72:23:d4:88:53:19:e5:bf:22:17:be:b7:fe:85:8c:
72:bd:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:35 2025 by rpki-client