Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: DLA3Lsz7F9LeA+KHeuSqp9tyZPKe5wXbyzBVpWuRq4I=
Subject key identifier: 6F:EF:8B:53:3B:E8:AF:33:26:4F:80:11:93:2F:34:26:D3:60:C6:F6
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 019845BF8EEFF8ED6681CDD89502C3AF8E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 07D8
Signing time: Sat 26 Jul 2025 08:00:38 +0000
Manifest this update: Sat 26 Jul 2025 08:00:38 +0000
Manifest next update: Sun 27 Jul 2025 08:00:38 +0000
Files and hashes: 1: aHJU3TtGM9M9L2c33hiqaeAD6-M.roa (hash: Jnk6c3GJ5E4y6b+inckEyRoPVADxMl1TsyYlid/Y0Y0=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: Pm5LOun/q4VfryuDX27fdpatGUuXxCixHcFzVU+uGL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:8e:ef:f8:ed:66:81:cd:d8:95:02:c3:af:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Jul 26 08:00:38 2025 GMT
Not After : Jul 27 08:00:38 2025 GMT
Subject: CN=6fef8b533be8af33264f8011932f3426d360c6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:f6:a2:12:ac:d8:f0:b6:af:36:4b:90:58:
65:23:ad:17:04:16:65:8e:6d:4e:44:2a:84:da:5f:
2e:ee:10:72:35:2c:1f:24:03:5c:ab:b4:77:3c:77:
71:b3:a8:65:95:cd:f3:cf:1d:cd:cd:22:ba:c3:19:
b9:b8:31:f1:8c:39:35:ed:60:4c:65:34:09:89:9c:
45:01:11:b7:d2:20:22:eb:c6:92:ac:69:9d:92:c4:
c2:de:98:f1:09:2d:0e:41:e4:2b:2f:e4:e3:a1:82:
cd:63:13:bf:f8:ce:ff:41:35:f1:aa:89:eb:8d:18:
fb:93:6b:1f:f3:45:1b:85:10:60:03:5d:50:f8:46:
47:16:12:42:3a:bf:71:97:cc:0b:b6:91:07:55:e4:
b3:3a:f0:27:41:bf:a8:21:39:ed:9c:fc:87:78:02:
fa:54:99:4d:12:03:99:f4:42:06:bf:29:ac:5a:c5:
86:9d:9a:7b:ef:27:2f:ed:0f:05:12:f1:c0:33:5e:
24:66:94:75:14:8a:34:b9:18:e4:9e:72:f6:d4:84:
88:ff:6c:da:ec:d0:f7:20:c7:8d:d6:7c:7a:fb:d3:
3f:88:39:5e:be:84:52:50:28:16:b3:5e:78:54:85:
24:9f:bc:fc:8b:21:12:5c:56:fb:e6:51:61:05:c2:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EF:8B:53:3B:E8:AF:33:26:4F:80:11:93:2F:34:26:D3:60:C6:F6
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2a:23:c5:0e:89:9a:1c:38:5b:3d:07:19:24:5b:bf:b2:e6:
5c:dd:e8:95:e5:39:ba:ff:28:4c:d5:ec:d8:d5:80:78:2a:64:
15:90:f6:cf:c8:c5:8d:82:d1:3a:6a:da:52:ca:35:8e:f8:bd:
6d:65:43:c8:fb:27:23:9e:7a:45:f2:d2:f1:3e:fe:3e:72:4a:
f0:0d:af:81:04:a9:91:83:f0:ca:ab:39:4c:8a:50:67:9a:af:
07:66:33:eb:79:bf:dc:c3:93:59:1e:3a:b9:93:07:89:e8:9c:
88:78:6c:71:8f:a9:84:2e:0e:b8:01:b1:d0:51:d1:95:9f:75:
34:40:64:6f:0b:47:bb:d1:fe:ae:c8:0f:f1:a3:1b:39:5c:82:
c4:99:ca:cd:85:0f:2b:10:c5:49:28:65:24:81:ca:e6:fa:08:
9a:85:39:55:f6:8c:d5:b6:22:68:70:c4:c7:90:13:e5:71:a0:
cc:73:80:e5:c2:64:dc:9b:53:02:4d:4f:27:72:17:6d:bd:69:
d0:a2:f9:c2:e1:b4:e6:1b:35:75:8b:ba:ba:d4:a4:cd:ed:3a:
b7:72:50:87:52:53:6e:f9:ff:34:f4:92:08:ae:9d:3d:57:27:
4e:4d:b6:03:fc:26:fe:6a:48:ee:26:aa:75:9c:cb:47:22:65:
e7:b1:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:17:23 2025 by rpki-client