Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: vsPAKWlhrvHMpYXx1jJXV1eQT5QudnwShq8gCAMexrE=
Subject key identifier: 37:52:E4:E6:93:AE:77:FF:57:EE:C2:2E:42:E4:3B:01:C6:03:94:D0
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 0198D4DFDDB72623CDC981CBEEA363574157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0663
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: Ceq8ni5DLt6rfS2QOewOZADzIpY.roa (hash: sy82azLmDtvWPz93HHlbs3C4D4UnntFGcj5egr3ZE8c=)
2: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: 66MIuo7oilKnlAlMYN6GmbC/rk1TC9E6M/WwPyhXkGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:dd:b7:26:23:cd:c9:81:cb:ee:a3:63:57:41:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=3752e4e693ae77ff57eec22e42e43b01c60394d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:4b:2e:f2:2a:01:1b:84:2b:a9:cf:31:bd:
30:a9:c7:77:66:b1:58:c9:12:a8:f7:dc:66:10:5e:
a0:4e:41:b0:f5:04:e2:eb:c1:73:eb:89:30:24:5d:
6b:3b:53:fd:5c:31:56:0d:f9:3d:1c:a8:40:38:65:
14:5a:ef:40:9d:7f:9f:ef:23:53:2b:58:f5:ea:71:
6f:18:d0:ac:2a:4f:ab:a8:02:5d:17:1c:1b:82:26:
e1:d0:01:2d:0c:a9:9f:7a:c4:b5:0b:aa:c6:d7:82:
50:4a:8c:1f:6a:91:da:0c:b6:df:13:30:94:64:28:
8d:98:cb:89:76:1c:58:38:bf:f2:e8:63:35:b1:a0:
78:2c:33:53:f4:66:e5:1a:fb:f4:d0:58:5e:29:ed:
c3:b0:24:aa:3d:76:1a:1c:cd:0a:b4:2d:26:d6:08:
bf:cb:bf:e4:d7:1b:6d:74:20:07:b9:7b:78:5e:45:
5d:f5:9c:1e:95:c4:02:b6:25:ed:87:72:8a:51:e1:
14:8e:59:9c:9a:70:04:ce:32:e0:ec:bd:f4:ae:ed:
9b:2f:b4:eb:d4:ae:41:21:ec:60:ae:72:b5:56:73:
d8:b1:54:50:4e:56:49:72:82:1f:cc:b0:7b:e2:a8:
b4:66:eb:dd:c3:26:b4:35:e1:da:66:1f:7d:11:5f:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:52:E4:E6:93:AE:77:FF:57:EE:C2:2E:42:E4:3B:01:C6:03:94:D0
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a9:96:9d:02:f9:2d:04:79:41:d6:27:ca:86:5b:12:05:a4:
e9:e0:85:bc:73:69:39:8c:07:1f:d0:a4:6d:e8:1b:9b:5a:7a:
a3:07:5b:1f:37:33:39:93:11:7b:d7:18:cf:23:c7:14:7c:12:
7a:49:7b:ba:54:f4:c7:4b:a7:0c:a9:00:3f:e1:a2:e4:65:7f:
7a:e1:6f:96:06:1a:e8:65:63:e5:7b:38:e2:46:e1:28:ae:6c:
fb:7d:28:83:8b:32:aa:e3:b7:18:8e:64:2a:78:21:e1:97:90:
93:63:b3:1c:cf:a1:b8:aa:92:95:94:c5:06:cd:d0:09:4c:8f:
df:3b:a9:74:a2:6c:89:b8:6e:f7:11:fd:66:44:59:9f:f0:30:
73:99:5c:fe:75:88:97:c7:d9:ce:72:5c:92:c3:13:61:40:ba:
0d:1e:b0:62:22:9d:7e:50:0a:79:be:95:98:52:e8:4e:9c:bb:
5a:22:0c:c0:30:11:b5:45:49:b2:fd:d5:b3:32:f3:08:62:b3:
c7:5c:4a:dc:71:e4:5d:21:75:7b:73:ba:2a:32:4e:47:3f:47:
58:e0:a6:44:15:bd:38:36:13:8b:06:0e:d0:5e:a9:da:77:f6:
0b:27:25:29:d5:74:e7:6d:30:03:aa:35:25:ee:69:90:1c:e4:
0e:b1:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:13 2025 by rpki-client