Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: ZAc+szNIw4kiMZ/MCRntQsbHGKuNXEe88BKYe8JNI7g=
Subject key identifier: C3:27:57:82:16:0E:C6:0F:63:22:2C:92:8D:E6:2A:8A:FE:C5:9D:21
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 0198D54E1DAE7366A9DBC1FA5B4D6FB408A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: VqhqDmaakEbc84bc7pFH9dW5hgxEgV163VxUZNqef4M=)
2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1d:ae:73:66:a9:db:c1:fa:5b:4d:6f:b4:08:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=c3275782160ec60f63222c928de62a8afec59d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:91:ea:a4:79:2c:ce:4b:bc:a1:31:07:77:
52:0f:24:5a:6b:ba:9e:25:cb:04:2d:ef:33:c0:97:
5d:8f:33:41:94:d7:29:41:95:2f:d8:7b:ce:42:be:
f8:40:67:ff:92:f2:4a:e6:7b:b6:36:94:56:ea:1a:
c5:97:57:5c:3d:99:1f:c7:e9:db:de:c2:c4:ea:71:
76:5a:6b:97:0d:94:81:d8:8d:0f:3b:0e:28:32:7a:
f9:65:e5:8b:cd:31:21:23:65:2e:94:f7:93:82:7d:
84:89:10:d5:fc:67:b7:74:44:12:3d:7f:39:45:63:
4c:87:2f:d3:9b:80:40:06:9f:f2:91:95:45:9c:2a:
ad:a6:d9:f4:26:14:b5:c8:fd:a2:17:33:43:88:ad:
33:76:ee:39:31:75:82:00:5a:a5:5d:1f:9b:c3:93:
26:4d:5b:3b:7f:ab:d0:3d:7a:b9:35:6a:9a:bf:a4:
3a:58:07:66:d7:86:a9:61:cf:46:b5:8d:8a:c2:9c:
41:04:71:a2:da:00:78:fb:0a:9b:27:47:7a:6e:2d:
c4:84:a7:dc:9a:02:f9:22:1e:62:6d:ac:8b:03:a3:
d8:f5:2b:fd:11:5a:9f:ad:35:02:84:32:10:00:3d:
28:12:9b:69:2c:77:dc:d7:f7:7c:72:17:2c:75:df:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:27:57:82:16:0E:C6:0F:63:22:2C:92:8D:E6:2A:8A:FE:C5:9D:21
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:87:56:ad:90:58:ce:63:59:26:6a:f5:dc:3d:f9:f6:af:75:
e6:f3:6c:57:08:42:b3:c8:12:2a:41:ce:b7:a2:cb:09:57:86:
20:70:1d:01:69:ed:d2:7b:54:dd:fa:f9:4c:d9:57:c5:55:51:
31:6d:05:d5:15:94:90:22:73:f9:be:43:e7:9e:c6:c6:32:4c:
75:b6:37:46:e5:9e:ad:84:bb:9c:e4:15:62:2a:f0:d8:ad:ea:
bd:0c:7a:5a:35:97:0b:02:2f:dd:80:1c:8d:e4:0c:32:8e:da:
41:39:ef:bd:80:c1:33:8f:9a:48:8d:60:35:4b:12:40:e4:47:
d1:fb:8f:70:b3:53:d7:38:13:5f:6e:3f:c2:79:e8:81:a1:96:
3c:6f:be:fc:63:9b:be:a3:b9:61:89:74:40:1a:f4:b8:10:00:
b5:6f:1f:30:c7:9d:8f:79:35:7c:c2:30:b5:c8:5c:95:22:51:
5d:b5:e9:14:aa:04:ef:4c:fc:d4:96:f4:89:ea:d3:69:ea:e0:
a0:26:3a:20:d4:d5:e4:2f:5b:83:0a:52:6a:91:91:04:10:28:
84:66:bb:87:51:0c:3a:0e:49:54:4f:c9:a5:86:47:bb:cb:fb:
b6:47:7b:17:c8:35:47:ae:9e:fc:08:48:26:ea:f4:15:94:3f:
93:10:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:44 2025 by rpki-client