Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: w9qZIcrplsiMLajrs96rlhNiAgSoRG3C/9D2vzAEn+w=
Subject key identifier: 70:66:31:D5:80:37:E2:A4:E4:F6:61:5D:C5:74:71:93:9E:94:35:D3
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 0198D6CD3D0FA02F3A6D8F9C0ED09FA51EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: osMOfzlV5K468RWY6P8mA//MysVioGa5MP2G+3722sI=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3d:0f:a0:2f:3a:6d:8f:9c:0e:d0:9f:a5:1e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=706631d58037e2a4e4f6615dc57471939e9435d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:a3:a9:7e:cf:43:27:13:6e:21:4c:b3:41:
62:77:86:e2:e5:dd:78:76:70:0b:a3:2a:4c:ad:54:
a2:96:c4:78:76:30:5b:fb:df:04:9c:2b:81:e8:e8:
0d:e8:71:d1:ac:e7:09:40:d4:da:7f:07:ba:12:c1:
28:35:ad:94:7b:00:06:32:e4:92:ac:f1:ec:66:1d:
ac:b1:91:04:bb:80:a0:fe:df:20:b5:da:43:27:f2:
e4:00:21:1b:3d:54:91:fe:07:9e:2c:4f:a2:4f:1a:
8a:51:70:dd:d3:e5:3c:f6:93:93:17:48:f4:65:44:
bc:2e:da:7f:60:d4:a3:9e:4d:18:8d:4c:47:db:96:
f2:a3:fb:5d:32:b2:51:2c:f6:85:cb:e5:16:8c:da:
96:ac:02:74:d3:8e:ed:d0:64:e1:25:71:37:01:ef:
bf:85:10:9f:db:4c:11:a0:f0:56:41:be:24:38:f2:
8e:ff:19:36:08:1d:f0:90:b2:6c:ea:5a:62:1c:42:
16:c8:f2:f3:ea:46:ce:62:28:f1:7c:ad:74:9a:41:
f2:5d:01:32:73:29:ef:d7:bd:a1:87:49:15:c6:44:
eb:dd:4b:4a:b0:91:52:17:1a:56:aa:48:ad:ba:fb:
06:e4:31:47:d0:d9:36:0c:86:9f:54:09:46:a6:f3:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:31:D5:80:37:E2:A4:E4:F6:61:5D:C5:74:71:93:9E:94:35:D3
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:d8:84:34:0d:04:40:97:e6:23:f7:0c:47:7b:8c:75:7e:7e:
9f:a4:14:15:ee:96:46:6f:14:d7:34:3f:f6:da:bb:b0:b8:a5:
84:4e:22:91:b6:51:da:17:8a:8f:a0:a0:92:9f:37:3c:45:3c:
80:99:91:03:0c:a1:f7:8d:32:d4:52:09:56:a5:f3:5d:e1:75:
cc:11:54:f0:5e:c8:7e:0f:7f:69:a9:21:c0:ab:d7:61:f2:e6:
31:52:32:6b:b6:21:b8:c6:44:ca:39:66:62:10:db:f3:f9:3c:
eb:42:79:49:63:9e:3b:32:49:df:d8:7f:24:23:48:73:f0:3e:
7f:06:5b:d8:37:c9:bd:8e:5c:20:e4:32:c7:79:55:60:0f:36:
96:a6:24:59:24:2c:d4:68:d6:94:6e:f8:60:7c:2a:8c:8d:ec:
fc:a0:d1:e0:d0:e7:16:4f:48:34:ff:45:44:d5:fe:bc:d9:03:
28:fb:2e:b5:e1:65:f7:c3:d9:53:45:59:ef:e7:18:ed:e8:1b:
65:f8:c8:2e:c9:64:13:95:45:25:dd:77:dc:3e:96:b0:c1:34:
66:c9:4c:0f:b3:ae:a8:6b:5d:9c:c9:a2:07:43:7b:52:d0:c8:
98:a0:3f:cd:d0:8a:da:d0:e1:31:f7:9a:ec:68:0a:67:88:34:
d0:25:93:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:18 2025 by rpki-client