Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: SalsxcHG7HgTvCqF1/x87D8cLBXqf9plNFoeNCUIgA8=
Subject key identifier: 00:42:07:EE:D6:46:36:D9:88:AB:B4:93:9E:47:13:B2:03:43:86:2D
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019849665844455AA487DA6497EE1B96E1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:40 +0000
Manifest this update: Sun 27 Jul 2025 01:01:40 +0000
Manifest next update: Mon 28 Jul 2025 01:01:40 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: Mj/BXQMMkxNuXVvgdAorlMxgxJxcADqRV/9syMyUeAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:58:44:45:5a:a4:87:da:64:97:ee:1b:96:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jul 27 01:01:40 2025 GMT
Not After : Jul 28 01:01:40 2025 GMT
Subject: CN=004207eed64636d988abb4939e4713b20343862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:c2:ae:41:fc:6c:7b:a0:7c:8b:f4:8d:c0:
b3:ca:46:82:f8:74:60:a5:c1:6c:43:cf:4a:c0:d9:
90:c1:c3:bb:dd:f0:c1:10:7f:73:33:bb:71:70:09:
be:85:c5:ee:f3:68:60:86:3d:94:fd:88:a0:ff:8b:
97:d3:10:dd:48:be:9a:70:bb:fc:ca:64:b0:d2:cc:
9d:f4:41:f3:9c:86:12:fc:bf:4a:f7:9d:d3:5f:54:
d4:12:6a:05:d0:a7:cb:a5:48:fb:dd:7d:70:83:b8:
68:83:68:8c:9d:99:56:b2:6b:b0:b9:50:08:19:64:
92:97:70:52:6c:2c:a0:d3:c1:ef:59:ae:76:15:a9:
b2:c2:5b:d4:6a:0c:8b:f5:ac:a2:48:c1:dd:c0:a5:
32:85:9b:7f:d0:16:6b:a2:9e:15:ab:fd:d7:c2:3a:
2b:a6:db:a8:90:e7:f5:8f:3f:28:37:f2:91:2c:5d:
04:82:00:f9:ab:88:1f:9f:20:a3:8e:60:4a:e3:6b:
55:71:b9:5f:09:3f:08:7e:42:77:4c:32:d1:86:5d:
33:98:9f:bd:5f:72:28:35:21:b2:b0:2a:ad:53:32:
62:ca:ce:ac:26:24:fe:86:7d:65:3f:b5:b3:32:14:
56:5c:c9:a1:7e:cb:d5:0e:05:fa:e5:7d:7f:e1:37:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:07:EE:D6:46:36:D9:88:AB:B4:93:9E:47:13:B2:03:43:86:2D
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bb:d3:e3:85:f9:a2:28:6c:68:a9:53:5b:15:3b:22:59:4a:
c1:30:27:94:91:1d:78:8c:10:e6:2e:b7:a5:44:5b:ab:06:b4:
5e:31:96:a6:d3:87:d0:d4:14:4a:73:b9:39:5c:c2:94:9c:e7:
1a:ef:68:63:cf:1a:a2:73:7b:d0:46:9b:6c:8a:a3:01:02:3b:
6c:25:15:9c:22:9c:ac:63:10:4c:10:14:6e:b4:a3:84:c4:05:
bf:14:5d:18:9f:c5:7d:ac:dc:c4:38:80:fe:1d:31:ab:47:cb:
a1:af:1f:24:32:72:12:de:de:73:0a:4e:35:af:7e:3e:d4:ee:
3f:6c:8d:32:18:c6:39:08:62:a0:8b:2a:1e:8a:de:a8:88:d2:
66:4f:d4:48:cd:13:9c:9c:68:2c:79:57:7f:91:cd:da:19:a6:
e8:b5:e3:8d:b0:cf:35:2c:13:b2:9f:55:cb:78:a9:b5:43:7e:
21:f3:9a:39:b9:08:6a:a2:80:c7:45:06:31:17:2d:59:76:0c:
f7:a6:a3:0b:a9:9e:a7:b5:75:3a:db:8c:af:a4:06:86:c6:74:
41:df:e4:05:b4:9c:0f:43:03:ce:57:d7:85:09:57:49:ab:55:
6e:39:75:e3:9c:37:98:65:c7:77:d9:61:1c:ed:49:f3:d8:8b:
35:ba:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:46 2025 by rpki-client