Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: cMFErr4X8d00/zCtCANVNbWtKUJ4Pbz0jyAtAJreC1c=
Subject key identifier: A2:DB:E4:2F:BC:B8:53:A8:80:36:21:E6:F1:C0:A3:3B:5A:94:D6:0B
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019840CFAF2A612412C943106D4260D3428C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 0142
Signing time: Fri 25 Jul 2025 09:00:09 +0000
Manifest this update: Fri 25 Jul 2025 09:00:09 +0000
Manifest next update: Sat 26 Jul 2025 09:00:09 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: qwI0/Ux+lPG6zIBOGekzDX8WTpOEW494OrazXXEuCO4=)
2: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (hash: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:af:2a:61:24:12:c9:43:10:6d:42:60:d3:42:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Jul 25 09:00:09 2025 GMT
Not After : Jul 26 09:00:09 2025 GMT
Subject: CN=a2dbe42fbcb853a8803621e6f1c0a33b5a94d60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:9d:39:82:c0:36:5f:a8:bb:04:4c:71:d4:
0e:31:50:08:a6:62:d6:23:ff:d8:c6:c0:68:07:2f:
5b:67:0e:86:00:75:45:b4:31:37:df:85:30:94:b1:
30:1a:4c:15:23:ba:0a:0e:f7:80:dc:d0:ba:52:92:
9b:68:56:68:4b:e2:3a:e7:d4:e2:4c:46:f2:c0:a6:
b4:34:37:91:36:8b:a5:61:6d:83:52:aa:f3:72:d6:
04:d7:2b:ef:20:6e:52:19:68:f9:e3:da:2c:d1:95:
c6:5e:64:92:57:ff:f8:c6:1d:80:ff:28:d7:b3:fe:
cb:7e:6c:11:98:e4:5b:54:c6:db:05:ed:2e:df:e3:
a5:3e:2e:cd:07:d8:94:b4:e5:d4:0d:40:5d:6a:a4:
e5:28:6b:f2:da:57:5a:ad:c4:12:08:f6:8c:dc:63:
74:a7:5f:28:f8:a9:48:ea:c3:d9:05:f8:d4:04:e6:
61:4c:31:33:3b:d0:d2:b5:e5:2d:92:ab:47:21:e9:
e4:05:85:ad:b3:27:62:57:d6:ed:37:d3:bf:b5:5b:
08:7d:59:96:2c:01:63:78:2b:b7:da:df:f4:7d:1c:
17:a6:6f:51:cd:fb:50:42:9a:f3:0f:fb:72:6d:cf:
02:de:aa:14:b4:64:13:51:f0:2f:84:21:42:3e:36:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:E4:2F:BC:B8:53:A8:80:36:21:E6:F1:C0:A3:3B:5A:94:D6:0B
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7a:3c:78:df:71:7e:4d:b2:eb:6e:cc:85:a2:c8:40:38:06:
58:4a:91:fa:ad:38:f0:1b:e8:52:ee:e6:6a:85:3d:70:01:d0:
ae:68:42:07:c1:9d:ba:33:55:08:b6:fc:5b:c5:0f:9c:47:6f:
ca:46:b4:43:5c:c2:11:c5:9f:32:8f:f3:16:d2:47:cb:75:24:
04:41:7d:b8:63:2d:33:69:0a:0c:a1:1d:66:f1:c8:4f:18:3e:
66:52:a7:29:49:5d:6f:6d:e3:cd:f4:1c:60:c5:cd:0c:20:c4:
18:48:98:fc:fe:89:ad:8b:5f:3c:95:03:08:34:f9:b2:aa:bf:
3c:2b:4b:1c:8a:46:d2:8e:ee:b6:a4:75:48:a3:b2:9c:12:ee:
b3:0e:ed:ce:73:7e:b8:ae:62:a6:d7:a0:cd:4a:7a:9f:d1:85:
37:bd:b8:47:94:c0:3a:fa:68:48:48:1b:ae:19:93:ef:41:8f:
71:c6:b5:7a:6c:e3:24:6a:c6:83:f3:dd:0a:b5:6a:00:bb:b3:
51:d0:2e:60:5d:12:85:d8:9c:a2:10:bc:03:e8:bc:8f:40:7c:
8f:5c:e0:6a:b9:0d:8b:f6:9c:97:ad:eb:d7:b7:d8:e6:24:30:
07:c0:73:42:0b:fe:c0:f5:22:71:14:c8:32:e5:96:ae:56:bb:
b0:34:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:44:10 2025 by rpki-client