Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: jsyJ2fgoR4ctGifoQbtlNEYO6GpQDYuR9MoydBC7f+Q=
Subject key identifier: CD:EB:A6:30:D7:7D:D0:69:C7:9A:96:D0:1E:5E:53:FB:62:0D:39:59
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 0198D516183467354F6845A6BAF1C144E2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 04:00:51 +0000
Manifest this update: Sat 23 Aug 2025 04:00:51 +0000
Manifest next update: Sun 24 Aug 2025 04:00:51 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: HTCi1wAPgy18YXEELuwuodW9e/gUU8h56eI+E9MaRIQ=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:18:34:67:35:4f:68:45:a6:ba:f1:c1:44:e2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Aug 23 04:00:51 2025 GMT
Not After : Aug 24 04:00:51 2025 GMT
Subject: CN=cdeba630d77dd069c79a96d01e5e53fb620d3959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:4b:5d:32:a4:be:1a:d9:56:bb:3b:d4:c1:
71:de:9a:ca:d1:c9:03:6d:6c:31:64:0f:bc:b1:65:
76:90:2e:80:c7:d8:b4:61:b7:60:ee:cd:28:66:f4:
3d:2c:00:cd:f8:f5:4c:99:ac:cc:91:41:df:08:b4:
75:f9:7e:d3:ab:17:8c:61:ba:50:c4:53:9c:1f:13:
c8:7a:bd:a1:94:06:86:b6:39:41:06:a5:1d:10:cd:
1c:91:28:f5:f6:2d:7c:98:6e:73:c5:25:a7:0e:78:
18:2c:72:74:36:89:a2:93:b2:94:27:ad:5e:92:a9:
1b:4b:ea:4d:8d:6d:8b:9f:69:24:a1:b8:ec:c7:ec:
33:f1:b9:50:d4:76:a6:2e:a1:3a:3d:e4:51:a4:a1:
88:43:9f:b1:fa:30:b0:24:6e:90:ff:40:9d:52:33:
c0:bc:ff:99:ca:df:46:b5:55:0d:00:a5:73:74:c8:
07:1f:f8:c5:3b:44:1a:61:00:9c:1b:09:6f:d6:8c:
be:3c:a7:b5:6e:ec:b4:05:af:84:f5:39:d0:0e:c6:
8b:8e:e3:0e:a7:ac:4b:8f:b3:8e:72:45:44:f2:79:
1a:ca:2e:03:da:53:76:c5:2f:e5:89:b3:37:b0:c6:
b4:e8:b8:1c:92:e8:44:b5:26:d9:45:0b:06:fd:38:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EB:A6:30:D7:7D:D0:69:C7:9A:96:D0:1E:5E:53:FB:62:0D:39:59
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:40:4b:8d:0c:39:a9:8c:d5:4a:00:6d:aa:fe:c6:bd:40:83:
a7:2a:c0:4c:50:58:b5:c9:8e:7e:85:42:49:32:ba:b4:42:ba:
ab:19:b4:d3:d0:c7:79:4c:73:80:a2:1a:a9:8b:7c:78:dd:d4:
da:94:1a:d1:18:7b:64:d1:da:5a:3f:6c:3d:94:6c:9f:e6:3d:
d8:fd:79:df:d7:27:63:6f:fe:fb:85:ff:64:42:7b:9b:17:82:
7e:bf:c3:01:ce:78:74:d5:b4:81:e2:60:b9:7a:c8:de:78:28:
af:00:ec:03:0c:1f:b8:95:86:35:9d:62:50:f8:41:a0:fa:62:
05:b6:68:5d:2c:92:11:4f:a5:71:bf:df:d5:44:56:2e:65:b4:
ab:fa:1c:ac:97:4f:25:d1:94:e8:b9:2d:0f:f6:a0:9b:82:7f:
27:81:a6:82:81:f9:98:e2:c4:ca:d0:a4:4f:99:2a:20:e6:6c:
74:87:99:f6:46:1e:7a:78:c5:1f:06:2a:5b:47:fd:a5:87:12:
0c:df:fd:e8:6f:ab:eb:41:ba:e7:d5:a1:92:c6:fe:11:2e:43:
4e:7f:24:48:f7:20:b2:a1:6c:e5:fe:67:0d:d6:73:ea:64:76:
bb:de:66:6d:17:c9:b1:42:f9:e0:7b:5a:95:ff:ca:f0:82:75:
2d:f7:5f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:48 2025 by rpki-client