Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
File: aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json)
Hash identifier: lREuWPIl8Nia5u6iwYm6qGjbCuMRLfXAN1dtK91M4Jw=
Subject key identifier: 60:AA:32:6D:86:93:AA:DD:8E:EA:9F:3E:9A:2C:08:15:A5:C6:18:05
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial: 0198D5F12DC392FD18CED9FDC1E3C74B8443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
Manifest number: 046A
Signing time: Sat 23 Aug 2025 08:00:09 +0000
Manifest this update: Sat 23 Aug 2025 08:00:09 +0000
Manifest next update: Sun 24 Aug 2025 08:00:09 +0000
Files and hashes: 1: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: QsuPi1jdYHTngj7yGDxhGTvBiCZuMAF4VYuOGpp4SDM=)
2: jlBmv3dPRy-aCAm4zGP5hP0eED4.roa (hash: x5w57iUiMtF5F3KiCgNFCVpxtjw/vaZ568ZRMFNq7qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2d:c3:92:fd:18:ce:d9:fd:c1:e3:c7:4b:84:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Validity
Not Before: Aug 23 08:00:09 2025 GMT
Not After : Aug 24 08:00:09 2025 GMT
Subject: CN=60aa326d8693aadd8eea9f3e9a2c0815a5c61805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:44:f1:ed:bf:b1:e1:4c:30:71:22:a2:4f:
8f:a5:cb:42:34:7a:e8:e5:41:3f:12:bb:0a:21:da:
3c:f1:86:52:db:ff:0d:3d:54:7b:a5:36:48:2c:29:
63:00:bd:a2:0d:db:a4:b0:b4:30:ca:6c:9c:85:b8:
51:d9:52:00:13:be:a4:ee:ba:a2:92:d0:a8:d0:76:
e1:ce:86:c0:c4:7f:4c:7f:3a:a1:31:e9:69:72:62:
55:41:c9:e3:2b:c1:8f:84:ca:23:c8:cd:bf:06:37:
51:0f:6a:78:25:34:47:3e:82:3a:fa:98:cf:ec:fe:
45:e5:9b:c8:d5:f9:62:2b:0e:73:98:f8:69:a3:0e:
ea:92:26:d6:e9:1d:bf:ab:30:76:a0:ad:b1:89:ff:
56:44:67:fc:77:67:19:60:cb:c7:3b:60:89:80:b8:
74:27:83:7b:7b:ea:95:2c:52:7e:b3:eb:1e:d6:73:
32:e1:13:70:56:e1:ce:e8:02:91:cb:1a:44:91:7c:
b1:86:9a:15:6b:07:f1:7f:c2:be:d4:b8:55:c8:ef:
d5:ed:d1:7d:84:6a:aa:3c:6f:0f:1a:07:43:ea:15:
bc:97:46:1f:40:7f:f4:57:af:e0:83:63:07:d1:3f:
37:b4:b1:e8:3f:81:16:85:cf:6c:2d:f8:c9:fc:fd:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AA:32:6D:86:93:AA:DD:8E:EA:9F:3E:9A:2C:08:15:A5:C6:18:05
X509v3 Authority Key Identifier:
keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dd:ea:52:17:e3:8b:12:63:99:99:9a:f2:fd:39:7c:9b:c1:
e6:2d:68:d3:09:96:a9:be:fd:95:55:31:f1:94:36:f9:fc:82:
50:dc:a9:f7:0c:56:4a:05:87:01:db:f2:ad:84:b0:70:b6:69:
b6:2c:94:ce:4b:5b:db:6c:c8:1b:71:28:1f:81:c1:e6:14:6e:
ed:51:c6:ae:ef:ff:ef:cb:e9:b4:d4:92:83:76:cc:e6:65:7e:
39:19:9a:c2:96:44:d1:1a:e0:24:1d:64:8e:28:3f:46:fd:41:
25:6b:00:71:f2:9b:1c:80:c7:33:0a:51:d2:36:fe:90:fd:79:
62:5b:6d:af:3b:dd:97:33:28:1c:59:3d:cc:e6:a5:c4:08:07:
20:b3:a3:e1:cd:3f:02:56:5e:b0:14:c7:c9:0d:7e:d6:8f:29:
cd:73:37:74:26:e4:2a:2a:87:5a:52:7d:3f:f6:7a:62:32:6f:
37:1f:47:4f:70:e4:8c:78:26:ef:e9:49:ec:09:70:b2:0b:ce:
5d:21:47:7d:5f:43:98:dd:8a:de:90:91:46:23:c6:13:ac:dd:
d2:23:cf:77:89:73:c2:09:c0:dd:66:63:a1:b3:36:cc:9b:03:
d6:72:bc:71:ad:63:cf:77:44:62:ab:1e:85:9a:90:75:12:93:
4c:28:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:12 2025 by rpki-client