Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: BP8EEiyR7YVmmf1tImZDrGKvSow6j8EUAnG7JCD2mHg=
Subject key identifier: 95:C2:CD:29:FF:4E:E2:07:17:A5:AD:A2:B4:3A:CA:1C:07:00:CF:7B
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 01984A418DD429334DC53A5E44F8EE1BE994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0822
Signing time: Sun 27 Jul 2025 05:01:06 +0000
Manifest this update: Sun 27 Jul 2025 05:01:06 +0000
Manifest next update: Mon 28 Jul 2025 05:01:06 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: eSXkwVx7ZNe7RXrbZnoKz01Yt8D7ldJgh0TYHMUndi4=)
2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:8d:d4:29:33:4d:c5:3a:5e:44:f8:ee:1b:e9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Jul 27 05:01:06 2025 GMT
Not After : Jul 28 05:01:06 2025 GMT
Subject: CN=95c2cd29ff4ee20717a5ada2b43aca1c0700cf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:8e:73:db:38:c6:1e:4e:e0:43:6e:b1:c0:
53:eb:bb:0d:b2:3e:97:a8:d6:5a:b2:15:34:de:44:
5e:77:08:92:be:8d:50:1c:35:e0:cf:ba:aa:df:b8:
9d:39:62:66:35:f7:1a:4a:7a:86:e8:de:f0:48:b1:
21:0c:1b:7f:d4:8f:a2:71:d2:af:bc:6c:7f:d0:6b:
8b:0b:06:85:7d:ad:04:27:31:2e:84:0c:be:a7:53:
f8:ff:d3:ec:e2:71:f2:5c:ef:04:6c:d2:1c:34:67:
23:88:0f:13:3c:d3:05:8f:dd:05:a5:48:db:16:6d:
55:1a:87:4c:c3:e9:19:84:ae:dd:be:c5:8b:d3:11:
2f:6d:5e:80:2e:5e:01:56:ad:02:69:cd:92:5f:15:
3a:e2:07:68:1e:82:9e:ff:2b:7f:fb:54:7f:71:00:
3b:63:3b:59:9e:82:61:08:be:6c:3d:a9:4a:f6:85:
6c:06:94:ef:6b:83:b7:a7:9a:c3:2b:da:c3:74:df:
10:52:62:4a:bc:9e:35:e9:69:9f:8f:da:bf:27:d0:
c0:3e:8d:57:e4:7b:45:54:d1:4e:6f:39:f8:89:79:
a4:5c:2c:c5:73:55:ee:76:ce:3a:74:4b:b5:1a:35:
60:02:be:65:5b:eb:c0:79:1e:bf:49:a9:cf:b8:26:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C2:CD:29:FF:4E:E2:07:17:A5:AD:A2:B4:3A:CA:1C:07:00:CF:7B
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b2:6d:1a:29:2c:5b:e6:c1:20:7a:c0:54:ea:e5:ce:71:b2:
b3:78:ef:6f:ac:2c:81:e6:9b:16:50:ee:a3:93:f4:32:87:05:
4f:ba:9d:7a:bc:95:6c:89:0d:23:71:fb:b3:97:a0:97:61:05:
88:81:37:d0:8f:05:90:9e:d8:fb:a9:06:a4:f2:6b:ec:1e:b9:
43:f8:03:73:33:20:79:d1:5f:af:40:3e:68:59:fd:b4:b1:8b:
eb:e0:f0:43:a6:45:cb:11:ad:27:55:2d:15:d9:96:b1:bf:f0:
96:b4:79:8d:69:20:1e:4b:e5:62:d6:8b:fe:72:da:07:09:c7:
9c:fe:da:6e:d9:e4:d2:b6:af:a9:1f:4c:c9:11:97:98:78:e4:
65:13:20:ce:cc:51:1d:b9:ec:03:02:df:6d:ce:4f:64:e0:58:
6d:79:d5:8c:e7:77:62:9a:c0:e7:49:dd:58:c3:9c:84:96:2d:
8c:e9:cf:42:16:22:1d:08:5f:52:7c:1f:18:68:bc:7b:38:ec:
5f:e5:28:c9:05:db:3e:99:8c:28:e1:a9:e9:cc:89:7a:7e:37:
69:66:36:34:4b:3a:fe:ee:0f:22:04:95:29:84:33:49:1a:5f:
5a:5b:8c:86:58:88:93:a4:2a:e3:1a:b3:41:77:e5:47:81:cc:
3e:db:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:06 2025 by rpki-client