Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: uvUy+IeEfW/4/SSz/JUnW/mPZwG+6s6XVe9kogPx+4Q=
Subject key identifier: 0C:F4:19:35:73:38:66:DC:62:F1:BD:A5:13:15:0E:C5:C7:D2:D6:F9
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 01985042DF7CEEB2004F15AC428F40BD76CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0CA5
Signing time: Mon 28 Jul 2025 09:00:16 +0000
Manifest this update: Mon 28 Jul 2025 09:00:16 +0000
Manifest next update: Tue 29 Jul 2025 09:00:16 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: tZxeexhsLpGPEemaHu3YCpRTL2vf+X5EtyFdYTu/aas=)
2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:42:df:7c:ee:b2:00:4f:15:ac:42:8f:40:bd:76:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Jul 28 09:00:16 2025 GMT
Not After : Jul 29 09:00:16 2025 GMT
Subject: CN=0cf41935733866dc62f1bda513150ec5c7d2d6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:ee:cf:0e:7b:c6:71:6c:51:e1:66:d9:59:
54:57:eb:58:02:4a:66:f6:c5:61:5b:6a:5d:6c:c9:
8b:31:01:4f:cd:42:6a:ee:08:5c:c0:14:dd:e2:d4:
86:b6:82:84:78:4f:44:d8:36:4f:c9:d0:82:0c:ec:
50:ed:76:e1:62:fa:b2:f6:19:30:2e:68:a6:91:5a:
4a:d9:c8:b0:de:a3:04:68:da:1f:a7:57:fb:db:56:
32:93:ca:de:46:2d:69:86:38:35:cc:1a:2d:85:5b:
6d:cf:b1:97:2f:9a:b7:07:15:4b:08:86:1e:16:99:
ed:94:80:a8:6e:33:60:bf:bd:f6:0d:51:cd:6c:46:
c1:a1:6e:ef:bb:73:11:1d:ce:8c:31:fb:12:11:a2:
6a:58:6f:90:01:8b:48:a3:ae:b3:ab:ed:2b:b6:ec:
c3:1e:b0:f6:dd:22:76:ba:ec:f7:66:90:af:d9:07:
1d:b2:33:d2:9c:f8:b7:0d:5a:40:88:d6:7a:cc:23:
86:cc:3a:ad:7f:ff:09:a6:21:eb:8f:6d:a5:94:89:
ce:e0:f0:a6:d1:08:07:88:64:bb:b8:89:66:d2:52:
dd:a5:66:05:bc:2a:85:82:2a:3b:28:31:0b:67:a0:
f1:bb:83:43:f0:f7:d3:b4:8e:69:a6:d2:6c:cf:91:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F4:19:35:73:38:66:DC:62:F1:BD:A5:13:15:0E:C5:C7:D2:D6:F9
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ef:b8:52:c3:4d:6b:4b:d4:52:d7:e2:9d:34:2f:c6:02:31:
1b:7d:14:13:b1:ea:2e:2f:d4:1c:51:19:cc:22:77:11:14:b4:
93:23:18:54:6b:29:d8:81:6f:77:53:69:09:f6:42:96:65:3d:
cf:cd:d8:00:dc:cf:6e:01:83:0d:9d:1a:21:6f:40:ce:e6:18:
9c:63:31:eb:21:6e:14:66:3d:42:39:08:b4:46:c1:f3:2d:a9:
06:a7:a0:ea:bf:09:1b:74:b6:39:4d:5e:7a:82:09:52:97:72:
bc:bd:d4:59:e1:e9:2a:8f:41:c2:3d:8d:67:0f:43:7d:d3:fa:
6d:fc:76:0c:a6:1f:b3:b9:c7:ab:81:81:5c:2a:b5:f9:6e:92:
d1:93:55:08:72:87:c1:01:ef:38:86:f7:b2:eb:83:8b:53:46:
93:90:94:81:af:1d:83:a8:b0:9a:49:f6:0f:a6:01:c6:dd:f5:
23:ef:fb:0a:6f:b0:2e:85:cb:44:a7:3a:c0:95:04:33:f8:26:
ac:3a:26:d4:a8:ca:41:74:a6:db:f3:56:81:54:71:03:b5:81:
f9:97:2b:bb:d1:4a:49:1c:00:13:5e:bd:5f:db:25:00:00:15:
1c:50:68:99:20:12:2a:6e:e8:54:6f:4d:fb:79:49:c4:c6:26:
d4:87:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 11:04:50 2025 by rpki-client