Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: 8TC8WoR9Uhf2zpBXj5LM5iyS9P4717Tu47Tsk2gbMZ8=
Subject key identifier: D3:96:F2:50:DF:A7:17:47:CB:D2:A7:96:06:54:47:34:02:42:9E:B1
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 0198D4A7A171A21666DF65D30BACD2D03B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:12 +0000
Manifest this update: Sat 23 Aug 2025 02:00:12 +0000
Manifest next update: Sun 24 Aug 2025 02:00:12 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: STSmOAdsT1qYMLxTGEWMzmL3ls5kVfe+dhp6MDa19B8=)
2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a1:71:a2:16:66:df:65:d3:0b:ac:d2:d0:3b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Aug 23 02:00:12 2025 GMT
Not After : Aug 24 02:00:12 2025 GMT
Subject: CN=d396f250dfa71747cbd2a7960654473402429eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:e6:dc:d9:80:f8:eb:b7:18:96:c1:54:da:
11:5b:e5:16:0f:cc:cd:20:86:32:34:84:60:f5:c4:
f5:a7:68:0b:bc:9a:85:ef:e1:81:99:df:8c:a4:06:
37:0f:e0:2f:dc:31:88:42:31:fb:e6:64:15:3f:29:
cf:66:78:35:28:6e:00:d9:a7:31:60:44:e5:bd:5c:
7e:44:c4:66:68:88:da:75:06:97:f2:70:44:4b:05:
7f:c8:21:e6:6f:62:28:54:e8:b9:24:2e:95:7b:63:
d2:61:00:7a:3f:d5:6d:51:68:69:2e:35:f1:99:e7:
67:26:90:0a:31:d6:72:95:c0:c6:9c:5a:79:9f:d6:
ac:1e:72:44:0e:49:b7:9b:d8:74:a0:af:18:94:35:
3c:85:67:a5:2c:b5:0e:64:5f:eb:14:a9:aa:f5:44:
e4:1b:2e:a7:34:ef:08:07:5e:89:da:f9:28:3f:b1:
8d:d0:79:56:7c:09:81:0d:23:44:ec:c6:0b:56:ce:
a0:b1:3f:10:27:9a:7d:fa:c3:19:0b:6e:d5:aa:8c:
b2:64:35:de:b8:82:89:ce:ec:a1:15:9e:0b:09:e9:
63:8b:a9:46:57:f0:87:8a:bf:5e:9e:03:c9:67:ad:
10:8e:8a:7c:86:86:40:18:16:dd:20:29:78:5b:65:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:F2:50:DF:A7:17:47:CB:D2:A7:96:06:54:47:34:02:42:9E:B1
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:00:73:2a:85:68:2a:c7:4b:05:a1:42:27:b9:f2:03:7f:8a:
68:47:00:c7:c9:61:a4:d3:f3:66:7d:c8:bd:e4:6e:90:97:b8:
1d:77:1e:d4:1b:e7:36:f9:7b:49:8c:c1:b8:f2:dd:77:5d:08:
f3:40:a0:e0:eb:26:75:c2:42:87:cd:f7:2d:dc:d5:33:ac:11:
5a:fc:63:7f:f7:02:90:ac:33:e3:77:e1:a4:73:01:cd:d0:1d:
04:1c:7d:41:12:17:76:a0:27:f7:0c:5b:c0:e5:61:38:b3:c7:
c7:b8:10:09:07:cb:01:7e:19:19:cb:88:27:c5:fe:4f:32:20:
bd:ff:4c:d3:f8:20:28:4e:3e:64:cc:df:33:a6:34:6c:79:e1:
23:25:39:bb:1a:bc:bb:86:69:8d:c3:04:24:d2:a7:74:e3:c1:
16:59:44:20:52:ac:ba:d8:13:d4:b8:03:81:39:cc:4a:a9:2a:
e5:fa:84:af:d1:b5:ed:dc:1a:7d:f4:3f:2d:7f:30:63:18:10:
89:f1:a6:7e:e7:a8:5e:7c:5e:fe:8f:01:b0:d1:5e:27:19:5c:
10:3a:27:02:48:96:8c:de:bf:15:a6:df:f4:5b:dc:66:ef:3e:
6a:1e:0a:67:c7:13:79:4c:72:b7:24:5c:39:34:48:7f:90:47:
e1:07:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:37 2025 by rpki-client