Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: A9hQcShX9t3ealBcKilgeDTPLVJNu1zoSfcrS2OT31M=
Subject key identifier: 87:19:84:E7:91:08:62:DD:EC:5E:F6:AC:29:6F:DE:3F:6C:3C:4A:04
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 0198D54E0438DBA0F2DB1D8931772AB90F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0967
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: plwd1NnvGXDJLkPePTlnlSVE6Qi7DuvQbFuGd2aS4MA=)
2: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (hash: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:04:38:db:a0:f2:db:1d:89:31:77:2a:b9:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=871984e7910862ddec5ef6ac296fde3f6c3c4a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:93:9e:d6:02:31:d4:ae:4e:2b:10:ae:44:
d6:5c:aa:99:8b:3f:e1:6d:4c:ea:81:37:e8:7f:a2:
8f:a7:f1:d2:50:36:1b:d9:58:e8:7d:cb:e0:98:b2:
94:e1:7d:79:e6:fe:4e:74:b8:f5:d6:41:c4:d2:49:
5c:67:a1:e0:a5:d6:43:16:81:43:15:6f:1f:f8:a1:
7b:af:48:2e:e9:9a:45:d9:ed:1c:47:82:56:d8:99:
86:2b:a4:aa:8a:2c:31:8f:68:76:7c:3e:ac:a8:22:
ec:2b:a5:70:2e:ba:98:31:98:91:06:8a:e7:36:25:
9a:84:6b:7e:32:75:e8:3f:de:9f:c0:c6:19:f9:d6:
9f:52:1f:63:0c:22:84:77:f0:e3:76:da:96:93:a0:
b7:a5:c5:75:fb:70:07:ba:09:0d:26:3c:cc:c6:ab:
79:b0:65:11:1c:89:5c:e3:a6:76:52:ce:35:1d:c4:
5a:d1:51:02:25:f1:ff:cc:f3:f7:bf:c8:8f:f8:97:
95:1c:f3:20:44:32:c5:17:8f:b6:f1:5a:d6:88:3c:
36:eb:19:30:1a:9a:45:18:38:69:96:e7:2f:24:36:
9f:67:21:d2:ed:8c:e0:6a:70:1e:b9:c4:6d:de:fb:
bf:26:ad:b5:67:a8:09:99:64:0d:de:e9:f4:92:d2:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:19:84:E7:91:08:62:DD:EC:5E:F6:AC:29:6F:DE:3F:6C:3C:4A:04
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:41:59:a9:6a:d5:a5:db:93:a3:0f:e5:b9:8e:5b:fe:e1:1a:
73:15:2d:71:dd:ae:23:74:c1:93:9e:95:fe:13:92:78:62:0e:
3a:d6:e8:83:48:c2:ef:db:fe:71:12:06:7d:ea:cd:d7:25:6e:
08:6c:ac:6d:be:97:a7:b5:31:88:54:71:c0:75:ab:00:fe:81:
ff:a4:a9:6a:7b:3a:67:92:aa:71:51:77:1b:25:7c:11:3b:4e:
35:7a:0c:6f:1d:1b:0c:7e:ab:7f:e9:0d:58:94:e3:8e:f3:59:
4d:c1:7d:c1:93:09:16:ab:89:8e:17:27:92:4e:21:d9:00:1b:
ac:d1:c8:dd:d3:64:a2:96:8c:b5:63:6d:35:c5:70:cc:11:b6:
e5:25:e0:96:10:04:51:17:b5:0d:01:52:6e:17:60:f6:21:c6:
35:03:8a:26:cf:ca:b2:ee:70:6e:53:b6:46:5b:75:44:92:14:
6e:24:1f:52:1a:dd:a0:8f:72:fc:61:64:58:e1:56:00:db:cc:
28:c3:1a:bf:c8:61:4d:14:f8:2a:37:01:84:c9:b3:fb:a0:ec:
e6:24:bf:7c:25:ac:3e:e0:92:2b:a0:90:5d:07:21:47:7c:5f:
3a:67:28:4f:76:10:fb:47:99:90:9f:56:f0:be:b2:cc:fc:a6:
83:ce:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:48 2025 by rpki-client