Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: OaLfAsvca+sFHJOIcuh0BXXOysq0tFU+6k5CArbY9G4=
Subject key identifier: 07:68:E8:73:FE:6F:EF:AD:3F:B2:72:F9:C8:4D:05:F6:6E:DA:01:C3
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 0198D54E6D0659821226A627046A70DA14F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 0587
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: cv2SlibOm0QYE3TmuNJ0Apved3T63vDnXPhSV0EfJKk=)
2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6d:06:59:82:12:26:a6:27:04:6a:70:da:14:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=0768e873fe6fefad3fb272f9c84d05f66eda01c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:3e:30:a3:1a:1c:1e:4c:46:82:3e:5a:2e:
86:1f:a4:f0:70:51:31:63:7c:1f:30:f5:b7:0f:74:
56:e1:aa:c0:b3:a3:42:94:84:8f:20:bb:60:d8:75:
3c:57:ca:93:51:54:6f:8a:f9:52:e3:c4:54:8f:6e:
76:7f:70:cd:64:cc:b4:61:ef:99:5b:b7:e9:6a:ab:
7e:25:1b:21:9a:34:60:88:fb:f0:f1:9e:5a:c1:d5:
b8:d9:41:28:d1:0b:97:61:9e:53:50:e3:6c:56:d2:
e1:08:ec:1e:d2:ac:3e:70:41:b1:d2:46:1d:48:d8:
91:d2:c7:25:9b:e1:b9:e8:d9:1d:7d:c1:cf:09:b4:
75:8f:f5:65:1e:9f:5b:f7:bc:42:bf:8f:99:96:59:
d3:73:b9:f1:b2:f9:7d:5a:a3:8c:f5:e2:8d:d9:16:
4a:e7:a7:68:38:88:5b:09:52:97:65:85:2c:54:32:
d6:31:28:91:74:80:f4:fc:00:b6:89:ac:29:69:53:
d8:e3:b5:d3:37:2a:e7:dd:c2:95:e5:77:6c:4d:72:
10:5c:90:ec:a0:40:04:14:2a:ba:14:a7:39:44:90:
70:ef:16:8f:26:8e:32:55:c7:2f:37:39:ef:8c:cb:
cc:40:6f:4a:ef:ea:f0:fa:16:fa:58:7a:28:7c:f3:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:E8:73:FE:6F:EF:AD:3F:B2:72:F9:C8:4D:05:F6:6E:DA:01:C3
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:21:f6:fb:4c:b6:c5:12:b0:6c:30:9c:41:89:32:b3:00:f3:
88:fc:8c:c2:e8:d6:da:9b:c0:e0:14:09:29:4a:9f:01:38:1c:
9b:0e:c7:85:92:68:14:97:ea:42:f9:1b:99:c7:af:03:d8:4b:
0e:68:fa:2a:2d:47:e4:2c:09:b5:31:d2:22:97:96:96:21:eb:
5f:ff:f9:ae:fe:5d:df:ee:53:94:a5:ee:bd:d9:b9:1f:45:2a:
47:0f:19:46:f1:30:fc:f7:38:db:fd:4d:5a:a0:9d:93:e6:b1:
ba:95:3d:86:7b:71:f3:30:6c:10:d8:e3:05:d3:9a:88:6e:30:
4e:c2:e5:f3:99:74:87:3c:56:8d:66:b5:ac:82:8f:97:44:bf:
8e:08:f4:66:5b:52:c4:0c:6e:08:af:54:33:7f:77:49:4f:92:
45:19:b6:78:82:22:4c:30:49:fc:b9:6d:42:1c:a8:b2:dc:29:
4e:ee:04:7a:0a:fa:64:0b:fe:b4:17:e4:dc:53:0e:fa:88:2c:
3c:bf:eb:3f:1f:08:4e:be:cf:04:a6:f7:34:21:9c:4a:9f:81:
6d:b2:c5:40:24:f4:87:d6:46:cb:aa:0a:2b:fb:dc:52:ed:4b:
3f:5c:57:54:b2:bd:03:74:ff:8e:7b:3a:e8:1f:74:ab:c3:e1:
69:b5:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:40 2025 by rpki-client