Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: RoBqtCn5OgfkvFAsuC321yaaMhy31fAJOp2eDL3u4iA=
Subject key identifier: A7:5B:05:E5:FE:5D:C9:12:BB:A2:0B:66:46:9F:F4:30:A5:ED:EB:A9
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019835713C027967A240F8D51579CB080486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 126A
Signing time: Wed 23 Jul 2025 04:01:09 +0000
Manifest this update: Wed 23 Jul 2025 04:01:09 +0000
Manifest next update: Thu 24 Jul 2025 04:01:09 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: j7L0VFYpVYYlLppHm6VtRy+zjJJnOEOTZYE3uqaWN0M=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:71:3c:02:79:67:a2:40:f8:d5:15:79:cb:08:04:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jul 23 04:01:09 2025 GMT
Not After : Jul 24 04:01:09 2025 GMT
Subject: CN=a75b05e5fe5dc912bba20b66469ff430a5edeba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:23:a6:a5:8b:7c:55:cc:27:09:dd:95:c7:
b2:25:d3:a8:9f:e7:8e:8e:a0:1d:ac:8e:7a:78:06:
f5:97:e4:ee:66:ba:f2:59:d1:8c:77:e8:c8:e8:d9:
f8:83:fb:62:2f:d3:24:63:71:29:9b:59:3a:b3:15:
33:00:d4:00:65:93:a9:53:a4:54:e7:df:35:54:9a:
3d:9a:fe:8f:f5:6f:ab:23:20:b3:98:84:c0:d4:f0:
e1:30:32:2d:db:7a:ea:0d:cb:80:54:3f:ce:f8:fe:
78:fd:97:ab:5c:79:6d:23:d2:89:17:3a:35:a9:3d:
72:57:97:db:a5:7d:b8:e0:67:4e:b9:fc:5f:a8:e3:
df:da:83:16:e4:5a:4c:f1:bf:b5:95:b5:00:be:9f:
7a:9d:c7:83:6f:bb:6c:2f:01:d1:41:d6:dc:48:9c:
93:1a:00:63:98:e8:03:04:4c:51:0f:8e:0c:80:90:
60:6f:f5:ea:dc:1d:cf:96:58:18:9e:03:89:8e:b1:
cd:6a:9b:05:41:f8:a1:71:c7:31:ff:41:96:23:b2:
a6:bb:e9:c9:af:e5:a9:f7:aa:b1:11:73:0c:ab:16:
94:fe:4d:6a:14:ee:25:85:0c:b2:99:c3:ab:2d:d1:
94:0c:d6:a4:b9:07:69:da:42:a2:34:6a:5a:9b:cd:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:05:E5:FE:5D:C9:12:BB:A2:0B:66:46:9F:F4:30:A5:ED:EB:A9
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:db:f1:f2:7b:8e:22:66:f9:a5:c3:94:47:08:94:7f:79:7a:
43:44:79:14:20:59:b0:87:6d:87:55:f0:ab:d1:3b:60:6f:ae:
ec:99:08:92:e9:9b:42:16:bb:21:65:9f:4b:3c:b6:1d:13:0b:
1f:55:ff:1f:e9:f8:0a:5a:59:e2:fc:07:c3:a5:75:9a:c0:28:
6d:06:de:2a:d3:d7:b0:2f:65:88:d0:d4:79:8a:44:05:8f:5a:
1c:44:5b:30:b0:60:52:bc:f0:86:2d:c4:9f:30:ca:d2:63:cd:
d8:eb:ce:83:48:f9:e9:88:cf:67:67:82:2b:39:75:2a:88:c9:
9f:96:cd:30:9b:eb:31:24:5f:da:a7:7e:ba:79:94:84:da:3c:
b3:f2:d8:49:37:07:61:a4:34:54:27:fd:6c:45:17:7e:83:a0:
12:dd:7e:b3:db:74:46:40:93:93:33:35:95:d5:ce:e6:72:e2:
c3:f5:29:bc:7c:3d:41:83:82:f7:e1:8a:e5:55:89:c7:51:d4:
7c:28:1f:24:54:16:b0:1e:52:0b:7c:d1:3c:0c:e0:44:65:03:
6d:8d:24:72:3b:80:58:55:c4:f2:0b:89:4c:55:33:5e:ba:d1:
3d:8f:15:f8:9d:fe:01:5c:b4:8e:3d:a2:e1:48:74:11:68:7d:
a1:64:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:10:46 2025 by rpki-client