Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier: W8CmnRh3AwlboOMLnZDKIyov9gWSasFeMQ/OCEDykpU=
Subject key identifier: 2B:1B:CA:92:13:9B:C7:60:3E:19:2F:E2:3A:ED:61:97:CB:8C:6D:5F
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 01984A40FC9B0DD1F5BB34D2B9E39021CE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number: 0BCC
Signing time: Sun 27 Jul 2025 05:00:29 +0000
Manifest this update: Sun 27 Jul 2025 05:00:29 +0000
Manifest next update: Mon 28 Jul 2025 05:00:29 +0000
Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: KeC7413b347/duua3UOgLcLhWYPRRCNeWYdtePrQvHk=)
2: c2eVtCtVjsi6i3vPHgLATuNVfoM.roa (hash: tozwRqmwgoJZSoOdc4bKHZ1xB9xQYRcf64jJhmtl4S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:fc:9b:0d:d1:f5:bb:34:d2:b9:e3:90:21:ce:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: Jul 27 05:00:29 2025 GMT
Not After : Jul 28 05:00:29 2025 GMT
Subject: CN=2b1bca92139bc7603e192fe23aed6197cb8c6d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:7d:2f:10:27:6f:df:d3:b6:ef:00:b8:b9:
28:e4:8d:47:4c:c1:b6:40:56:33:59:05:10:18:3f:
cf:6a:f9:ee:04:c0:ba:4c:12:a8:57:ff:04:62:29:
89:ce:df:65:61:bf:b1:55:40:e0:97:79:cd:76:47:
00:fa:18:0e:03:f4:94:74:12:be:a1:96:d4:59:3c:
cb:83:78:14:4a:97:0b:91:9e:2b:32:37:75:3a:02:
f1:8f:ad:ac:b2:e7:c1:ce:b3:c3:55:7f:c8:37:5f:
88:8c:fc:13:88:45:6d:2c:e3:13:af:bd:ca:56:f7:
74:c9:11:73:ba:2f:b5:39:f9:a0:f3:52:1b:44:76:
34:38:48:be:c5:db:30:6d:27:58:c0:19:e6:6e:b6:
b2:eb:f6:12:da:3a:dc:5a:ef:c4:b5:01:7b:a4:84:
cd:fd:55:0b:7e:23:e9:44:49:c4:45:84:84:c2:30:
5d:9e:df:b5:aa:3a:ef:4e:45:68:4b:bf:ad:b0:4a:
f4:ef:31:ce:b6:6d:de:e5:68:bd:9a:08:ff:23:91:
c5:fe:b5:db:ef:c7:4f:38:9f:dc:d5:84:ab:6f:42:
29:dc:0a:0f:d8:a9:44:f3:7e:6b:69:a4:37:53:d0:
7a:59:aa:af:53:d9:d4:21:3f:7e:91:20:6a:91:ea:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1B:CA:92:13:9B:C7:60:3E:19:2F:E2:3A:ED:61:97:CB:8C:6D:5F
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:97:b2:ca:24:88:e4:27:09:d3:ae:49:1c:2b:eb:cc:33:9b:
f3:db:2e:bb:ef:96:e6:48:35:e6:fd:53:dd:64:e9:f2:6a:4e:
dd:ec:13:28:95:3a:c9:bb:18:c4:ab:d5:54:17:24:eb:18:99:
73:a4:dd:41:36:fa:83:63:42:12:45:cc:e8:8e:e1:88:ec:d9:
2a:21:69:24:39:5e:a5:10:50:53:88:36:f7:1b:fc:89:d6:ed:
78:02:ed:3d:90:66:94:3d:a3:0e:37:49:66:3d:5a:02:6e:ec:
ae:6a:0e:ff:c4:1b:c4:31:2e:22:6c:aa:fe:da:67:8a:50:a4:
d3:bd:23:0a:fa:8f:1b:05:55:d9:e8:41:8f:3b:bf:60:7f:e2:
47:94:22:a7:8e:82:9f:19:53:e3:22:ce:3d:bc:f5:a4:24:93:
e2:f5:8a:ef:d0:6b:cb:33:03:95:3b:f3:26:c8:92:98:6d:54:
c1:58:aa:3b:85:4c:1c:9c:c6:52:77:d0:95:3f:65:1d:2f:b6:
34:65:96:39:eb:eb:c3:88:a1:6c:c9:39:2a:40:3f:fb:26:f7:
3f:58:0f:e0:75:88:59:9e:af:f7:c9:34:39:e2:a2:f2:27:97:
ea:b6:82:c6:ab:85:fa:08:7b:c1:52:b4:ba:94:5c:93:12:e5:
a0:a4:c3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:33:53 2025 by rpki-client