Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
File: aHyL8iKia_HJxmOMw1bSg1UC8tY.mft (raw, json)
Hash identifier: H4c004q0C3xFx/7OrgxIbMy+GhCXW4sjo+zrsH43VXI=
Subject key identifier: 76:17:1B:67:50:73:5D:63:FA:7C:34:17:2F:DB:AC:FF:A8:FD:C7:56
Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Certificate serial: 0198530D496A8418FAC61B6949F497507040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
Manifest number: 0746
Signing time: Mon 28 Jul 2025 22:00:36 +0000
Manifest this update: Mon 28 Jul 2025 22:00:36 +0000
Manifest next update: Tue 29 Jul 2025 22:00:36 +0000
Files and hashes: 1: aHyL8iKia_HJxmOMw1bSg1UC8tY.crl (hash: izDdhLkniZtRCKqq8CL8Zp+CTj5fN56K+Dq7h+8P4gU=)
2: szxe0DPYsGTMI_tgKM1yaWgLDtI.roa (hash: fjZgmmGMINi/iYDucRgC4NEVBx45QTUkAnBaw6M5XK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:49:6a:84:18:fa:c6:1b:69:49:f4:97:50:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Validity
Not Before: Jul 28 22:00:36 2025 GMT
Not After : Jul 29 22:00:36 2025 GMT
Subject: CN=76171b6750735d63fa7c34172fdbacffa8fdc756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:94:c0:ae:4d:e2:fa:ab:6f:da:f6:57:9c:
57:4d:db:af:c2:c6:ee:10:ec:54:8a:c5:93:b4:40:
51:ec:dc:54:9d:2a:e6:54:97:40:af:b9:e0:ea:5a:
5e:62:bd:d6:30:cb:0f:e9:42:ff:16:65:3c:63:c6:
4e:33:b9:c8:84:10:7b:cf:a3:a2:20:74:62:ca:a5:
10:03:8f:4c:bb:bb:17:4d:ab:fb:52:17:db:79:39:
6a:c5:05:09:ac:d2:22:92:08:52:d1:82:8e:fc:52:
d0:a1:eb:bb:86:8a:34:de:5b:20:b7:86:98:ef:c2:
e1:92:b9:01:1e:17:84:ee:ca:81:0e:fb:d3:35:04:
48:3b:71:5e:e0:8e:37:07:b7:3c:05:5f:20:91:b4:
fe:2f:cc:81:d4:ba:3e:b1:63:32:64:32:66:c6:35:
01:e2:af:b4:17:05:be:db:d1:46:d9:88:9f:3a:3d:
f3:7b:57:06:be:1f:3c:c4:d7:fc:49:1a:dd:b3:34:
27:08:35:91:26:e3:fc:6a:6a:4c:02:f5:f7:c1:b9:
a5:20:34:f3:d6:65:a7:89:99:da:64:51:10:40:45:
b0:46:67:6f:59:de:9c:61:3e:13:aa:72:02:f5:02:
82:16:ce:32:06:ea:f8:e0:f9:1b:27:85:45:d6:40:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:1B:67:50:73:5D:63:FA:7C:34:17:2F:DB:AC:FF:A8:FD:C7:56
X509v3 Authority Key Identifier:
keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5e:b5:c2:97:7f:5f:c2:fd:c2:3e:b1:28:42:3a:e9:8a:85:
9f:3f:50:d2:2a:c2:eb:df:4f:ea:a5:79:15:d7:e6:51:a0:7c:
f3:de:50:84:cb:68:d2:49:45:91:50:26:74:91:bb:9e:15:be:
e9:13:64:71:b0:3a:a1:da:ac:be:4d:00:ee:de:60:c5:cb:d8:
7f:ff:22:87:8e:82:12:7e:3b:ef:98:52:7e:75:5a:f4:0e:89:
53:92:21:ad:bb:a4:e6:28:ac:c9:d4:c7:4d:14:ad:bd:6a:33:
e4:4a:af:5c:41:f9:bb:52:ec:8e:96:f3:88:ff:ef:e5:6d:85:
a4:56:57:03:e6:40:df:e0:f7:f3:74:81:a6:da:1c:be:5d:fa:
da:c2:08:2b:46:9b:9f:d0:f3:3a:a2:35:43:07:0e:73:26:d5:
a2:f6:64:fc:a8:3c:fe:de:54:10:f9:0f:a8:6a:df:d4:9c:8c:
2b:34:f3:a0:08:4b:7a:c0:39:6b:13:28:a9:ab:62:83:07:32:
53:0d:6b:9e:79:ba:d8:fa:d9:8b:2b:9b:ba:7b:d7:68:cf:f2:
2e:e7:41:25:ea:3f:35:3f:c4:46:b1:19:1f:d0:75:2e:36:84:
e5:22:4f:3e:ed:76:a0:42:ec:7c:a4:41:80:a1:b7:43:a6:f1:
ba:cc:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:18 2025 by rpki-client