Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: 78xvmCNnctjRsAptP1LVsv16w3S00cAciWloUp4PlUU=
Subject key identifier: AA:BA:C2:82:CD:31:6F:E4:2B:7E:28:A6:2B:9A:41:DF:5C:4A:CE:FA
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 0198D4E008470E8B7F6745357F7487FFE7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: zVQ3gxwRw9FYqabEQiE3jI0UlmEwU6zS3gzDqCMWOOY=)
2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:08:47:0e:8b:7f:67:45:35:7f:74:87:ff:e7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=aabac282cd316fe42b7e28a62b9a41df5c4acefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:42:ea:5f:97:0f:9d:4b:77:d5:56:52:cd:
37:d8:21:07:18:d7:5b:81:78:e7:47:2c:3e:23:dc:
98:cf:2a:98:5f:ac:27:07:f6:39:57:7c:5c:c7:e1:
f7:12:10:5d:0c:54:2c:09:12:9d:34:bf:2d:95:4d:
9c:8f:94:7d:f1:89:45:4b:c0:3e:2d:5c:11:ba:f8:
e7:83:c4:e6:c1:0d:a8:0a:da:ac:00:96:bd:ee:18:
82:46:5d:0f:d8:73:09:c8:a3:ea:7d:aa:b5:e5:45:
75:b5:cc:85:57:3e:f2:08:70:18:c7:7e:e2:92:b6:
3c:a8:9d:3b:01:f8:6d:20:7d:6e:58:bc:76:11:ec:
27:e3:af:57:b2:65:d3:f3:8c:04:15:a2:b6:dd:21:
a5:8d:aa:15:67:03:6c:92:2c:91:f5:d8:39:6f:59:
e9:c3:6b:6b:56:d7:78:de:d9:6f:d9:54:b5:84:1e:
08:15:b0:17:fa:65:39:4e:c9:a7:d4:6a:52:96:5b:
13:7e:b8:f7:b7:fd:50:45:91:cd:37:d0:e5:0f:b3:
9e:a3:7f:e8:31:b7:7d:71:fc:0b:da:18:45:3f:10:
66:44:ad:69:08:14:f7:ae:2e:80:60:77:6b:d9:f6:
0f:32:03:97:de:db:c5:67:2b:61:27:f4:cb:13:46:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:C2:82:CD:31:6F:E4:2B:7E:28:A6:2B:9A:41:DF:5C:4A:CE:FA
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bf:81:47:d2:42:72:eb:eb:44:44:46:e6:55:ac:4e:db:ba:
3d:9b:16:86:74:b7:c1:75:09:b5:fd:b0:d6:bd:29:4b:ee:37:
e0:67:d4:6b:1f:7e:d8:c2:af:c3:3b:4e:57:a2:95:ed:b9:75:
ff:67:68:e0:2a:69:5c:8b:5c:d2:d5:88:24:aa:04:80:bf:a6:
b4:c6:e8:a8:ce:26:26:a7:7f:51:86:a0:83:a4:ac:e4:68:90:
0e:24:06:df:49:7d:f2:49:03:96:d5:1a:a6:fe:d7:ff:87:57:
ab:5f:3f:2f:82:be:9a:83:28:6b:e1:c8:a0:4a:9e:f3:17:18:
c1:c5:4a:81:6f:99:a9:3f:25:eb:03:2d:38:1a:47:b2:56:7c:
d0:e6:2f:7e:01:2c:aa:cc:ad:27:dc:71:86:6e:fc:4c:4d:49:
4f:e2:1b:4e:bf:44:f2:49:75:b7:54:2a:4e:12:74:2b:7a:a1:
14:e6:33:ef:2b:8a:cb:c5:b2:63:f0:76:49:fc:ef:9c:3a:ff:
ed:f5:76:a6:39:69:4b:a4:71:a9:43:47:07:17:d1:7f:13:64:
4d:ac:27:65:b1:e4:b5:14:a3:c0:00:25:8d:e2:db:89:ea:dd:
2c:8d:bc:bc:59:a3:84:19:ae:26:90:85:6d:ba:6b:dc:75:0e:
f1:b4:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:11 2025 by rpki-client