Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: B4tKu7hLNLXAB8/EMgu0wCv8lpQB9BHFVynDNZjKD5g=
Subject key identifier: 61:EE:87:94:A3:F5:98:9F:97:4F:57:99:97:C1:A5:0B:8D:F8:E4:27
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 01985268BB896777769562EBDF0451E3DF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 06DC
Signing time: Mon 28 Jul 2025 19:00:51 +0000
Manifest this update: Mon 28 Jul 2025 19:00:51 +0000
Manifest next update: Tue 29 Jul 2025 19:00:51 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: eB0cC1NEwQie2RxZWVy7x6wPw5vkGFn4Yed8N9a4xV0=)
2: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)
3: USUwNqXAmKM8gCgpmaifdth2hJ4.roa (hash: dUbC8Qp7CGpNXjvMgeVikpMPAaWUU03LQwDK+csc06U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:bb:89:67:77:76:95:62:eb:df:04:51:e3:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Jul 28 19:00:51 2025 GMT
Not After : Jul 29 19:00:51 2025 GMT
Subject: CN=61ee8794a3f5989f974f579997c1a50b8df8e427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:73:58:06:a8:28:4d:92:7d:4f:d2:e0:62:
9a:df:e1:e7:7b:38:9f:94:4c:1a:83:fc:60:7a:7e:
ea:4a:78:4b:b2:7a:83:36:f5:6c:95:06:69:af:ff:
d5:35:b5:f9:93:01:46:90:57:b3:69:2d:0b:a3:13:
bc:44:5f:92:8a:87:67:f1:36:2a:45:76:fa:e8:a7:
c6:0e:49:0c:db:a4:ac:69:fa:25:1d:25:5c:1c:53:
60:6c:59:63:8c:58:a4:18:ce:fb:e2:38:a4:9c:84:
e9:96:86:1c:f3:48:8b:50:96:64:df:57:be:d7:ce:
d6:35:57:72:a2:11:33:bb:f7:10:d4:26:1f:73:9a:
f3:1a:b8:cd:51:a7:77:8b:bb:d1:48:b2:ea:f1:59:
5d:f6:b1:e8:09:c9:40:ff:13:e4:73:b1:52:5b:bb:
c9:b1:49:98:8a:39:a6:d9:97:98:3f:b5:e2:cb:a2:
be:bb:87:82:4b:ee:d2:44:7a:4f:d2:af:09:fb:a1:
81:9b:db:03:e9:58:aa:af:6d:40:11:cd:24:8a:5b:
b3:4d:40:aa:66:f2:25:9b:a0:b1:98:e2:a0:e6:ac:
b3:2d:1b:30:41:be:56:34:f7:49:51:53:30:4b:37:
d1:f0:d0:0a:a1:d9:c0:3d:70:35:ff:f9:19:86:ad:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EE:87:94:A3:F5:98:9F:97:4F:57:99:97:C1:A5:0B:8D:F8:E4:27
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fd:9d:e1:49:1d:33:ea:07:30:95:5b:e5:72:a4:ca:5e:61:
48:49:b2:7b:66:f7:a8:61:5d:4c:a7:1b:bf:2d:3a:0f:37:0b:
c6:23:68:33:99:e2:cd:a0:fa:b8:a5:80:ee:16:3b:96:6f:14:
d6:5d:09:36:25:7f:22:7d:79:53:13:2b:8f:b8:f6:9b:09:97:
ca:b0:68:80:20:20:02:61:a4:86:3d:7d:02:93:3b:48:ec:80:
8f:76:88:31:ae:52:7d:55:8e:df:bb:96:d1:1c:08:c2:70:f5:
ef:d4:0d:79:8d:4d:3b:f2:b2:55:b2:64:f6:7f:3a:7a:39:e6:
58:3f:5e:99:37:ea:d3:37:79:db:06:57:07:a7:62:6d:d7:1e:
44:98:61:ec:41:68:f9:6a:ef:3f:ea:b2:81:ed:49:34:b1:2c:
85:83:01:4a:8f:f8:69:97:74:6c:0a:8d:fe:77:25:d1:58:52:
01:14:9a:d3:b8:1e:a0:2e:56:27:0a:cd:28:28:78:e3:18:3f:
6c:59:1b:2e:d8:5e:3c:12:38:e4:9c:41:0c:4c:b4:42:2f:cd:
82:56:4f:8e:44:2e:76:99:92:ae:c0:2b:75:89:71:bb:52:3a:
e3:fe:8f:a1:b4:cd:4d:f7:bf:e0:6b:41:1b:70:a1:72:b3:7b:
a7:19:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:33 2025 by rpki-client