Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: fFo2cuLA2PdAVUEdVjfz/LaheS9GRh+dMffFZ6NGKhI=
Subject key identifier: 1C:2D:49:68:E5:54:E0:2E:85:16:E2:24:35:53:3F:F1:DB:E7:2F:27
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 0198D5BBD888FBD25E5D8DC9290B74B3641A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0EB1
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: Owtd9cFMEahnGJrwOCihANS7NtpuR5BV/Wjks23HJcI=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d8:88:fb:d2:5e:5d:8d:c9:29:0b:74:b3:64:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=1c2d4968e554e02e8516e22435533ff1dbe72f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:67:69:b0:55:62:55:d5:26:61:2c:c1:bb:
d9:2e:c7:a8:c6:7f:a6:5d:ac:81:1b:74:d1:ec:9e:
47:d9:13:6a:1c:3a:1e:a8:8c:e6:77:60:bb:f7:69:
de:05:ae:73:04:6f:51:30:b7:89:bd:c2:79:06:c4:
19:d4:3f:35:91:20:45:af:58:c1:c4:c0:f0:27:ec:
02:15:af:85:64:b8:b7:5f:c4:35:56:d5:81:47:07:
7a:11:ca:f6:82:48:62:59:17:2b:ac:95:ca:fb:ad:
f1:f7:f0:83:49:17:16:f2:aa:54:76:37:f2:7a:96:
e3:68:a2:94:ad:0d:07:ef:c8:81:43:65:9b:b4:af:
d9:2c:42:45:60:59:86:09:ca:52:b0:d7:63:e9:e7:
f8:8d:89:40:28:98:11:35:ec:13:cc:bc:85:b8:65:
2c:71:91:bd:c3:c2:94:e4:20:eb:69:90:37:62:51:
bf:1b:d1:30:cf:19:48:2e:30:3a:69:95:05:9b:f6:
fd:6b:a3:2f:97:00:cf:01:66:76:bf:6c:1b:b1:b0:
75:57:4c:60:71:f2:d6:be:67:84:57:22:8f:d1:09:
e2:a2:04:d1:a6:60:3f:98:c5:ea:31:e8:24:be:6f:
1b:9d:d6:9c:58:4a:7e:c8:70:1f:42:5c:46:96:87:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:49:68:E5:54:E0:2E:85:16:E2:24:35:53:3F:F1:DB:E7:2F:27
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6f:98:32:68:19:6a:a9:2d:80:bb:9c:a1:53:e3:12:8c:fa:
e9:b8:fa:3a:bb:09:f5:02:e2:2b:9b:2c:b4:e7:e9:fc:ee:ee:
70:fe:f4:6d:ea:37:0d:9e:22:39:e8:df:fa:9b:ba:3b:4d:99:
35:78:c5:df:6d:72:55:78:50:c8:a8:b0:0a:7f:0f:92:1a:45:
fe:f7:79:a5:8e:ac:a6:01:d0:a9:d6:85:ec:19:0a:73:6a:fc:
b7:8c:3c:00:49:13:c0:d4:4d:87:62:27:60:c8:d9:8c:00:81:
17:8b:15:c9:1e:e7:0f:b8:41:a3:96:a9:4c:46:cf:97:6e:ab:
0c:34:56:86:f8:9e:b2:70:c6:9f:50:15:23:cd:28:2f:57:09:
22:21:d5:43:75:16:e4:a7:81:38:c7:84:18:7f:6a:99:2c:2d:
08:9d:6c:4d:ed:7a:4b:52:78:3f:66:3f:29:ad:7f:4c:ba:37:
31:d4:ab:6b:c2:de:95:1c:a1:88:f8:b4:8f:d4:57:35:27:f0:
93:a8:6b:53:7c:39:61:5e:2e:4a:12:32:27:8d:e9:eb:c4:5a:
f0:72:d8:da:67:cd:e3:d3:8c:6d:c1:c0:49:06:bc:d2:74:ff:
92:3c:5d:ed:91:80:b7:5b:6b:8c:e7:34:7f:af:64:93:28:2e:
be:81:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:03 2025 by rpki-client