Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: COgNYoPaR9Z35jsrtxbek8XXsYGbfxi1AMC3CVqcvTM=
Subject key identifier: AF:8C:A4:1C:AA:D5:07:41:7C:95:E2:9D:1B:E2:6F:69:3C:35:61:CF
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 0198D4E07400E3027B81AF4B798387E6BA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: 6QBVEiLusjnuHnwecVMK9Kg-WII.roa (hash: OapSvDTUmzDRZu9Q3KlIrLgI0CjCfgxrem8xot5UiSo=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: 0T+o5EMxCPFzjc+i/fGE8vBOifBCnK3/dWSXElhUUfE=)
3: GiC40GdnPgHbIqIbDNeP-spJi-M.roa (hash: Xd4LHWf6P2V0nuixtM1f8JXOI9EnPVM3k32pXeFOXiw=)
4: JeT3PicL3j6wpeXRT3s8FrJpy3w.roa (hash: tjXOPJYxlFtc8BfVkznJC0Nu37PcV0Dt33rxJApZ9kY=)
5: L5lOWtMXwmLYho3Arxcpd76R5sw.roa (hash: XM0Za1PmkukhwAWipMkx42usukTFibdWlbabSAWWgH4=)
6: Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa (hash: pZ1a8TMxYqDEEa657nYARi2g7u3tXGj01SXvh3eUl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:74:00:e3:02:7b:81:af:4b:79:83:87:e6:ba:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=af8ca41caad507417c95e29d1be26f693c3561cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:2a:5f:89:fe:d6:9e:be:53:9d:99:c6:b3:
92:27:d9:8e:38:12:5a:41:7e:3d:c9:67:d5:36:bd:
18:54:d7:ed:5c:41:36:0c:a6:29:5d:76:56:95:ea:
cd:d9:d7:9a:f1:f1:38:87:e3:3c:c8:71:77:7c:29:
ae:b2:85:bf:04:e7:f0:e8:73:5f:3a:47:e6:50:5c:
94:a0:70:78:67:10:ae:d6:0a:e9:4c:5f:33:8b:9b:
3c:b6:0f:04:ec:4e:a6:6c:cf:44:c5:64:bc:51:0c:
85:59:b8:63:3e:57:98:82:2e:2c:e3:51:05:33:5d:
a1:8d:ac:cb:1d:a3:78:e5:8d:e3:d3:6b:9f:fb:df:
77:f8:af:d5:9f:d8:81:a4:8e:1e:24:92:22:b3:6f:
19:40:ef:44:14:1b:6c:95:07:ba:44:41:8d:44:b4:
86:3e:71:30:eb:ab:d5:a5:35:16:1f:4a:ba:db:9d:
60:9e:cd:93:67:67:9f:1c:12:c2:dd:b8:5b:79:b4:
32:35:a8:d1:ec:6c:be:d6:87:44:9f:d6:f3:4d:bc:
ea:29:ba:77:96:6e:b8:da:9d:da:a4:3a:36:16:37:
f1:89:cf:4a:5b:99:a1:30:fa:52:86:98:22:bd:a8:
34:d5:65:a7:5d:80:45:45:54:d3:dd:64:f8:26:ca:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8C:A4:1C:AA:D5:07:41:7C:95:E2:9D:1B:E2:6F:69:3C:35:61:CF
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:40:44:69:aa:78:2e:ae:cf:bf:46:31:bf:1f:dc:e0:ac:d7:
a8:8c:b1:39:29:7c:83:84:12:b2:81:0c:31:cb:86:ef:9a:77:
1e:c0:b5:20:47:e2:5b:11:22:36:c0:64:c8:81:b2:b5:be:d0:
04:29:56:73:4f:10:bd:ce:51:d5:e5:ca:a0:ba:da:88:39:07:
b1:cd:2c:75:9f:84:23:51:44:7b:ef:e2:b8:90:b1:03:66:c5:
7a:20:7f:8b:23:ab:cb:ed:e2:ab:37:0e:16:0c:46:ba:0c:14:
f5:13:c7:c2:e6:ec:f5:40:dc:de:8b:fe:bb:84:a4:6a:64:1c:
6f:0d:ec:8d:7a:9d:52:93:74:b2:5a:85:7d:df:37:96:6e:4b:
ab:dd:fa:52:f5:ae:35:01:40:66:32:25:d1:8d:8a:cf:a7:c4:
ce:58:23:a3:a6:7c:f6:ff:88:38:58:56:a1:2d:62:19:67:d1:
8f:b6:ae:6d:73:f7:3d:de:e1:b1:1b:99:f3:03:18:14:97:5c:
08:85:4a:ce:22:0b:dd:d9:55:38:53:12:8a:50:9e:97:fc:c0:
4b:17:72:b8:02:05:ab:12:b7:22:10:93:ec:86:45:81:f7:0c:
7d:c3:3c:15:36:ea:6f:c3:50:e9:e6:40:75:38:71:06:15:71:
21:0f:5e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:03 2025 by rpki-client