Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: v9uYmz5LgNuV3w7X8k3mCjssNS85EK74knSAuE0oFVU=
Subject key identifier: 65:6A:A5:A9:95:FB:45:AF:8F:11:73:2C:9E:42:B7:F2:82:1C:39:53
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 0198529F4EB7FC798FDBAAA6DD6FB3FA3D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 12D3
Signing time: Mon 28 Jul 2025 20:00:28 +0000
Manifest this update: Mon 28 Jul 2025 20:00:28 +0000
Manifest next update: Tue 29 Jul 2025 20:00:28 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: fbhV5hyQHOy2hgNSgwcVZrUy5shzr+Spx9TCEU+VcJc=)
2: hqWXJdixoyBrN6tefJIPGEJ4XNw.roa (hash: jM1EQVCCuIqaZA8YHmIHlFvXnaAVW3MrjR0+9kCFwLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:4e:b7:fc:79:8f:db:aa:a6:dd:6f:b3:fa:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Jul 28 20:00:28 2025 GMT
Not After : Jul 29 20:00:28 2025 GMT
Subject: CN=656aa5a995fb45af8f11732c9e42b7f2821c3953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:2b:62:6b:2a:70:31:a3:4e:2b:01:4d:e9:
f1:75:f5:ad:f1:87:45:aa:c0:45:53:ba:e3:7d:cf:
0e:fd:ed:1e:2d:35:55:91:7b:01:81:dd:c9:aa:c0:
0e:eb:8f:5f:18:67:5b:44:93:4c:11:f1:0e:b8:de:
70:44:ce:a5:66:9c:c5:5e:f5:54:cb:31:15:0d:55:
05:9d:71:1d:8d:79:3f:56:88:6f:51:08:47:ff:ec:
4c:dd:59:54:72:63:c2:d3:f8:fe:e2:fe:ed:b6:9b:
2f:73:52:ae:67:59:a4:5e:d1:b8:ed:0d:43:e4:40:
40:45:93:bb:5f:1a:f0:ec:16:11:30:66:46:b2:82:
b2:b6:12:b5:1b:25:62:82:28:fe:c4:08:d4:0a:59:
2f:cd:d5:c2:07:26:78:d4:70:90:c9:e5:de:1d:89:
86:92:26:89:af:b3:56:8d:77:bf:dc:63:fd:af:75:
c1:b6:f4:f4:65:74:9f:65:c1:d3:59:5a:ba:57:c1:
75:32:fd:1a:2c:7d:b5:9d:18:5d:31:56:b8:4b:e4:
38:c9:86:38:cb:a6:c7:f7:37:07:ed:fc:f5:6c:68:
5a:d1:2f:f8:97:51:d7:36:71:ff:ce:49:b3:70:b1:
42:b4:f2:55:1d:50:58:08:68:fa:5f:6d:48:56:01:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:A5:A9:95:FB:45:AF:8F:11:73:2C:9E:42:B7:F2:82:1C:39:53
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6b:49:ee:f4:fc:df:83:e2:90:2a:fe:0a:f1:fc:26:7e:8a:
1c:96:04:8c:4b:e0:73:31:e5:a4:c8:ca:dd:27:69:56:a8:6b:
16:3a:24:ea:ff:80:16:f9:00:6b:67:52:85:51:50:c3:99:ba:
00:c6:f8:84:0e:f0:e1:11:c6:fa:19:9e:b6:9f:e0:69:70:9b:
27:f8:83:81:62:c2:16:43:3c:0f:dd:00:e0:2e:b8:52:8c:38:
14:26:7e:c3:6a:07:3a:31:70:80:58:d6:41:4d:ae:12:9a:b0:
03:a8:5e:56:d1:b3:f4:bd:ab:63:c4:e5:96:0e:b1:9b:a2:5e:
77:b3:99:d2:fb:8d:e3:77:b0:c3:5c:4c:16:bf:44:72:9e:9d:
5c:58:f1:59:15:f3:db:cb:7f:39:d2:39:2b:67:47:07:9d:9b:
ad:a1:8c:13:d6:6f:89:bf:4f:83:55:c1:ae:09:41:7c:17:a9:
52:b0:ef:8a:3c:4f:0d:d1:59:70:b3:24:3f:13:0f:01:3f:e0:
64:91:32:73:7f:8d:47:12:f4:ba:49:31:87:30:4e:79:0e:20:
0b:a5:4d:a2:a4:23:a1:ce:fe:7e:6e:e5:af:ca:bd:42:03:c9:
71:95:36:20:57:8f:35:5d:f3:0b:cb:c0:36:05:b6:66:1b:2d:
14:1b:f0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:32:35 2025 by rpki-client