Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: gavs0oUrQIe5ITXzUpsiB/0CjKLN4E1lLXS2jWZShVw=
Subject key identifier: 00:23:66:4E:A8:FB:85:39:B3:E0:88:01:CF:56:9D:3A:82:51:88:3A
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 0198D5BC00DAEDD9C291B1305A8CB11596DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 05B4
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: AJ5wMI6kFAAGgXfPHZAVtLCSnP8.roa (hash: O5F5OKdgmFhYvl6NemyAslo9muG5v3CdZb38avB1q8I=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: 92xFZCyx3rWLQQoCg/4FYzkqiQEmFceUTTzN8hVwv38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:00:da:ed:d9:c2:91:b1:30:5a:8c:b1:15:96:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=0023664ea8fb8539b3e08801cf569d3a8251883a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:b5:67:36:ce:96:50:bb:db:55:0b:b2:65:
79:3a:72:51:25:0e:7a:a0:e5:f1:fb:db:2a:84:be:
c6:1e:98:c2:38:bf:52:0f:29:91:64:39:97:f0:99:
31:5e:d7:ba:ab:f2:07:e2:5e:ea:ff:9f:fb:78:d3:
22:68:e3:22:40:4f:b8:f6:5e:71:95:73:2b:b9:d6:
01:ff:80:95:8b:88:f7:0e:f9:a6:6e:1e:ee:63:a9:
f9:2f:99:46:40:68:e7:cc:d2:d9:dc:77:ea:1d:91:
91:4c:f8:c3:31:a4:9d:eb:89:ac:b2:ef:c6:ee:6d:
e2:2d:40:05:a2:b9:2d:2e:fb:00:62:92:92:cb:6f:
39:2b:ce:e5:44:d8:00:7e:60:ed:6c:58:72:45:ba:
18:ba:87:99:58:d9:3e:41:5a:6b:5b:e2:c5:46:c3:
db:e8:88:fa:bf:70:7f:24:9a:7c:34:6c:22:49:00:
b0:69:be:7d:d0:c4:48:ec:d9:12:ea:72:e1:f6:8b:
36:64:00:ff:61:2d:66:af:dc:48:15:4c:e8:d9:db:
d8:cd:ab:61:10:f1:83:7d:77:82:7e:44:89:d0:07:
cc:3e:35:e0:d6:f3:dc:37:9d:2f:96:58:1b:61:1d:
ed:5a:08:92:ef:00:01:64:b2:fe:f5:86:00:f4:50:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:23:66:4E:A8:FB:85:39:B3:E0:88:01:CF:56:9D:3A:82:51:88:3A
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:89:b7:5e:ca:93:33:9c:a0:69:33:5e:23:bf:84:43:73:25:
6c:14:83:06:c4:65:b6:52:57:32:72:e0:b3:71:90:36:18:4d:
b7:df:79:ba:a8:75:3d:b9:0d:aa:a0:8e:1b:74:98:e6:85:c6:
80:c0:a4:1b:84:6f:f7:16:02:a5:dc:dd:96:02:f5:00:4f:73:
22:fd:3c:e5:ce:a9:7d:1a:fe:8c:fe:1d:64:ec:9e:00:0a:03:
91:5c:36:2d:5f:5b:b8:3b:40:4b:6c:dd:2a:63:ef:6b:af:e6:
2b:40:9e:b0:48:83:0d:b2:a7:80:5c:3e:44:9a:ef:8f:ae:60:
f4:6d:92:89:a6:e3:d9:6a:04:44:37:aa:b2:fd:5c:e6:98:e2:
35:3c:ad:a0:c3:6e:7c:95:88:48:56:33:73:29:a0:c5:00:39:
45:a6:08:fe:d8:cb:8c:97:89:5e:21:8d:68:27:e1:23:96:b2:
fe:85:c5:5a:79:83:42:a2:5d:b7:6c:93:7e:7c:b7:c4:25:a8:
10:a9:fd:0c:a9:ae:33:eb:e6:5c:0a:f7:c4:c8:54:12:bf:8a:
da:68:54:87:92:12:40:64:51:04:56:d6:ef:0d:c1:62:3d:0f:
84:8a:5d:01:cc:54:34:05:e6:e4:a7:57:a1:2e:ce:b8:f0:43:
c8:28:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:53 2025 by rpki-client