Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: S41Rbm9+RlMH1Jv5Q37pcoU3wAcOO1ucw1kDoR9tvJo=
Subject key identifier: A6:D4:3E:51:00:C7:F0:37:52:16:87:F9:1D:CB:56:56:A1:07:E1:D0
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 019845F62E72D16BCEEFF034731BCA2FF17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 03B7
Signing time: Sat 26 Jul 2025 09:00:18 +0000
Manifest this update: Sat 26 Jul 2025 09:00:18 +0000
Manifest next update: Sun 27 Jul 2025 09:00:18 +0000
Files and hashes: 1: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: KC6B5s2o20V71XntQ4zW9LzsO3d5VSRUTqeREJsrM6o=)
2: vKytNfbEF9joRT3eNK0fcMnnPsw.roa (hash: QRCmo7hQ15OJ3mq9udqpHVMqzKuvB7Gd74/Bu3ia9vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:2e:72:d1:6b:ce:ef:f0:34:73:1b:ca:2f:f1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Jul 26 09:00:18 2025 GMT
Not After : Jul 27 09:00:18 2025 GMT
Subject: CN=a6d43e5100c7f037521687f91dcb5656a107e1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:f5:0c:55:a9:7f:e6:54:f3:6d:9a:a8:4d:
48:08:4e:ba:c6:47:16:d9:34:ca:79:55:21:38:f5:
31:0b:85:a6:43:46:e1:05:6a:ec:f2:73:6a:35:f2:
8f:2d:17:c9:04:ee:6e:fa:86:3e:77:58:45:41:2e:
71:82:b8:87:17:dc:a2:2b:c7:bb:c2:f0:95:c6:ab:
fc:83:b2:ca:a8:6c:ea:11:11:83:e2:aa:0b:13:0f:
09:45:84:98:c6:cb:e1:b1:c5:d4:74:e4:02:ee:4f:
26:4f:9c:4a:76:f2:b3:a7:87:5b:8f:3c:e5:25:24:
54:90:8e:22:88:87:20:ef:0a:63:fe:80:e1:81:d7:
83:5e:65:c9:9f:d4:96:58:5f:1d:15:f3:f5:d8:c7:
fc:f6:26:73:7a:1b:f5:2d:36:b4:25:22:80:24:09:
2e:bb:ec:48:76:9a:0f:c7:1d:d7:cb:31:e2:03:d2:
7a:6d:29:de:8c:dc:5b:7b:5c:d8:ab:dc:3d:ce:5d:
da:98:ef:83:83:3c:8b:08:12:78:16:37:bf:c0:80:
9c:c8:49:97:35:f0:2d:c3:36:39:48:94:85:b6:e6:
c1:53:e2:c3:3f:86:de:61:59:21:a6:20:52:90:45:
64:16:2b:05:64:71:3c:37:e4:18:13:0c:53:6c:24:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:3E:51:00:C7:F0:37:52:16:87:F9:1D:CB:56:56:A1:07:E1:D0
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e7:d1:00:32:ee:af:00:c6:40:08:45:d2:bb:a0:3a:9c:b1:
64:43:81:1d:ba:f0:4b:10:f8:fe:8b:87:76:75:c3:aa:85:90:
ed:bb:67:5b:38:21:01:19:77:e4:20:be:84:8b:b6:22:c4:4a:
2f:90:83:28:a3:e1:d5:f5:43:2a:54:e2:9c:f1:b3:c7:bb:fe:
44:6a:bb:f3:6c:d7:d8:64:e8:4f:8d:b6:b1:71:df:06:35:3b:
3f:51:14:b7:56:23:b1:ea:0f:37:89:9c:ed:ab:3e:e1:d9:6c:
0c:2c:cc:8a:46:40:86:9e:23:96:6a:17:5c:fd:e1:d1:44:ea:
39:fe:ba:8d:aa:12:9d:d0:a0:d9:ad:fc:ba:30:32:8f:4a:04:
bb:a1:4f:cb:30:59:8d:5d:10:0d:cb:2b:c9:15:de:ee:61:71:
c2:19:03:7f:c9:cc:ff:8e:39:7b:de:86:6a:24:29:82:d8:4a:
40:f9:a2:e0:08:e2:4d:6d:51:3d:6b:54:15:fa:01:18:ee:42:
aa:ef:2b:e0:e7:10:bc:a1:af:6a:ba:92:2e:b2:c9:36:ee:d9:
dc:b3:02:88:00:34:07:da:dc:97:f9:e1:38:30:78:24:d2:0e:
97:ce:de:26:f6:04:e8:44:55:dc:9c:65:bd:2f:f5:60:a4:aa:
4b:a9:f6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:15 2025 by rpki-client