Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File: AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier: 2XWFQCxsE6SPmH6Xwfy7XLdWD7a8AllUkdwGT2k0gog=
Subject key identifier: 74:23:A6:F8:22:3C:5B:5A:36:FA:3B:77:25:1A:13:6C:32:35:CD:2B
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial: 0198D5F147CF89B57585F8E1B686ADE00E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number: 0146
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: 4xltQ/vS127g3EsqYGMerdKy1ZqMHR1etTVcq72Z0U4=)
2: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (hash: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:47:cf:89:b5:75:85:f8:e1:b6:86:ad:e0:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=7423a6f8223c5b5a36fa3b77251a136c3235cd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f6:14:32:be:dc:c0:64:07:fe:e9:62:5d:70:
dd:fb:88:e6:2d:fb:54:f6:a1:2e:76:31:48:d7:11:
22:16:98:ed:e9:2c:d3:73:7f:1d:ba:d3:a3:94:8d:
44:1f:68:c8:72:ae:e2:38:97:16:58:c9:ba:93:69:
5f:94:d8:7b:47:d4:d4:07:3d:00:39:cf:92:14:28:
24:8f:a9:63:2d:b9:5a:13:89:61:29:41:43:38:3c:
e2:0a:19:da:36:6a:dd:c6:56:aa:7d:de:cb:a8:ac:
5e:8e:3a:ca:fb:4f:7a:67:1f:bc:6c:4a:ed:f5:5b:
91:7b:d0:2a:50:dc:db:6c:38:54:8e:eb:23:00:80:
40:1c:6b:ad:73:ad:9a:3f:d9:82:80:82:6e:7a:f0:
1e:df:22:2c:bc:83:9f:72:8b:c0:bf:a8:80:a4:2c:
6f:61:78:b0:05:49:9b:16:08:e4:c5:16:d2:a2:27:
93:75:ea:ab:34:1b:61:1a:06:5d:7e:71:da:69:5f:
1c:1f:07:4f:50:9b:07:aa:4d:2f:07:c4:ab:1d:69:
2a:74:76:a4:4b:f5:8c:b5:4b:6e:ab:63:88:ca:9d:
00:43:d1:a9:60:ec:0d:8f:8a:68:38:24:81:19:4d:
14:fd:60:dd:b7:91:0b:dd:d5:ff:d2:9d:bf:1a:c2:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:23:A6:F8:22:3C:5B:5A:36:FA:3B:77:25:1A:13:6C:32:35:CD:2B
X509v3 Authority Key Identifier:
keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e3:52:4f:67:b5:cc:71:37:a2:5a:0e:5c:e5:2d:57:2f:4d:
26:b7:11:de:72:4a:83:d2:04:2c:70:ef:1c:b9:85:a6:7d:e7:
8b:6c:5a:86:59:54:6a:18:10:93:2b:6b:84:0a:75:6b:2c:41:
36:12:a8:0b:8d:86:79:cf:0c:63:f9:d2:d5:88:5f:6b:ee:0a:
60:31:25:95:5d:5e:4f:12:0d:0c:23:ba:dd:e7:d3:22:5d:9d:
3c:2f:35:9c:d6:42:86:f1:34:5b:c6:f9:89:cc:da:e4:d6:10:
01:b6:54:e6:c4:af:6a:06:49:1b:61:fd:de:8f:8b:5d:71:68:
3e:fd:1e:41:92:82:2e:24:49:13:35:58:ce:6a:42:25:ae:98:
b6:0d:aa:b0:a7:92:6f:81:79:d3:9c:d4:60:33:d0:85:7c:75:
54:33:98:8a:bf:27:26:ff:29:cf:18:2e:1d:2e:a2:67:38:d8:
89:1f:5d:b6:35:e9:ef:7d:a7:d2:aa:3c:4a:00:0d:8b:b4:a6:
1f:14:a8:f6:c6:c0:d2:4f:2e:a9:76:6a:9e:cc:ed:89:57:4f:
58:54:4d:c5:1f:12:16:53:68:25:c3:ba:c7:9f:ad:8a:60:41:
38:be:e8:ea:54:c2:b6:7a:e5:61:09:50:bc:45:0f:c0:6d:dc:
41:2a:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:17 2025 by rpki-client