Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: TVzNrTfqllqbjxRcqrwZIZXNFcNtNOgcvyC7PrQX9zM=
Subject key identifier: 6C:D4:57:81:4C:77:86:EF:15:6B:70:A8:0E:52:20:54:3F:3F:EC:BD
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 0197B7EA11D57B3E99E917A46EBB0F839780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0E1D
Signing time: Sat 28 Jun 2025 19:00:59 +0000
Manifest this update: Sat 28 Jun 2025 19:00:59 +0000
Manifest next update: Sun 29 Jun 2025 19:00:59 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: ni0g7HbraJRuDjpoi4+bDlCbbkvVw5ikcRS5Li1zaKk=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:11:d5:7b:3e:99:e9:17:a4:6e:bb:0f:83:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Jun 28 19:00:59 2025 GMT
Not After : Jun 29 19:00:59 2025 GMT
Subject: CN=6cd457814c7786ef156b70a80e5220543f3fecbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:7d:c2:9d:28:e1:4c:a6:f9:70:af:d8:b6:
24:2e:8a:13:56:68:dd:69:d9:22:ec:c3:d3:13:67:
fe:78:3d:80:39:b5:98:bb:e6:9e:88:a6:1e:2e:57:
a5:33:f9:3e:c4:4b:05:84:12:84:29:69:1f:2d:56:
1a:25:b5:29:58:79:fd:ac:32:53:11:8c:68:dc:6b:
8b:0b:5a:25:5a:8a:12:71:9b:5a:be:8c:11:12:1b:
93:52:36:b9:f6:c1:3d:f5:64:ae:75:df:fd:e5:f5:
8f:b4:6b:cf:18:84:5a:db:c3:81:e7:5a:6b:07:d4:
7c:c8:31:1e:24:aa:86:4d:7e:85:54:50:2d:f6:f0:
62:60:f7:ff:a7:7f:87:8c:49:ad:1a:38:4f:bc:db:
2e:0b:01:d4:59:59:9a:a9:de:4b:ed:91:76:52:04:
8d:78:96:81:d8:51:a6:29:83:9f:5a:8c:0c:fe:e8:
a4:20:bf:e7:23:11:d2:d1:1b:06:6d:57:8a:33:dc:
b0:12:87:07:9e:9a:2c:c1:94:b4:be:fe:a7:f4:0c:
e0:ce:a4:0a:ae:67:92:b4:bf:a2:b5:48:ef:48:e4:
40:ea:1c:5c:10:65:72:aa:21:af:8b:1d:ef:81:02:
ba:66:99:28:3f:11:67:88:a8:21:07:08:25:8b:a4:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:57:81:4C:77:86:EF:15:6B:70:A8:0E:52:20:54:3F:3F:EC:BD
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a9:40:d9:a1:f5:ff:78:4e:7b:d9:42:1a:cc:fb:e1:4b:f4:
7a:72:98:39:38:61:96:58:9c:78:b2:b2:56:aa:78:1e:ad:85:
43:4e:5f:75:e4:34:5c:e1:1f:c5:f0:1c:14:d5:de:60:b7:dc:
d0:61:62:6f:95:0f:a3:aa:fe:f1:ef:4f:00:da:85:e9:66:88:
da:70:c3:08:3f:a2:b6:ea:75:9d:97:37:a8:b4:48:ce:0b:09:
bf:dd:f1:71:86:be:b9:56:ea:7e:3c:15:17:17:50:ce:1d:af:
83:20:16:52:87:86:b1:2c:91:a8:6c:fa:91:fa:4e:55:16:52:
a0:ad:c3:24:5e:dc:f4:99:e9:d8:ce:af:36:3f:32:7d:30:7a:
54:cb:2b:ce:6b:77:1b:29:54:d0:10:6f:90:31:9e:05:d3:5b:
36:43:8f:76:5b:2b:b7:93:fd:6d:7c:b4:eb:16:9a:ce:e7:6a:
8a:f8:1b:46:b4:00:ce:09:2f:d6:ac:9e:39:8a:49:8b:d8:6d:
14:f4:58:ec:7a:57:62:cc:1e:cd:5a:90:77:c3:e8:d9:16:4c:
d5:f1:fa:01:19:9f:4e:09:41:0d:41:41:2c:48:8f:f6:9b:78:
5c:1d:6c:71:05:e3:fa:b8:bc:94:42:cc:3f:da:d1:8f:a4:55:
38:4f:69:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:34 2025 by rpki-client