Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File: aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier: Udk981ib3CyfuMbxCCA2DVmEsIJdPelCkqCgX9M8sEQ=
Subject key identifier: C5:38:AB:B3:CA:5E:5E:EC:67:97:C7:FC:36:7B:3F:DF:AB:47:D0:BE
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial: 01984AE5FFAD6B56F2F4783A58750E709868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 08:00:43 +0000
Manifest this update: Sun 27 Jul 2025 08:00:43 +0000
Manifest next update: Mon 28 Jul 2025 08:00:43 +0000
Files and hashes: 1: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: WqYTVnx6umJhm4HzKLfuPPueIZa49m8KYNIOXJHL3Q0=)
2: k8TvgiNHhv0gMh1GPOWO0OlVTqY.roa (hash: NYQN/yytkqzN4XlRmytmTH29q1AoSwj6G4FODHWQARM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ff:ad:6b:56:f2:f4:78:3a:58:75:0e:70:98:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
Validity
Not Before: Jul 27 08:00:43 2025 GMT
Not After : Jul 28 08:00:43 2025 GMT
Subject: CN=c538abb3ca5e5eec6797c7fc367b3fdfab47d0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:f1:60:86:ab:6f:26:d5:c4:52:cb:83:c4:
fe:d1:d9:ad:21:ab:ec:40:92:7e:0b:cb:fa:aa:83:
2c:e6:95:80:32:bb:07:28:44:1f:75:15:dd:02:4c:
f8:fb:8f:1e:bb:cd:b1:e2:28:35:f2:fd:e5:ea:1d:
14:5c:6f:3b:cd:c7:36:84:a3:b9:7f:30:cf:78:80:
bf:e8:74:97:34:e9:62:7e:53:60:44:ca:5f:59:22:
36:db:0d:8f:79:11:65:45:5c:28:47:88:02:63:b7:
5b:87:7c:03:57:11:97:d5:18:05:fe:ab:e5:89:b7:
3a:d9:bf:54:c5:19:af:ff:23:13:66:95:ca:62:60:
b4:a1:88:2a:29:78:24:fd:c3:6f:5a:87:1b:12:2f:
c0:29:2a:2e:35:34:95:df:3c:a8:42:55:01:31:90:
5a:fd:d0:1c:03:1f:19:3e:b3:c2:42:32:16:2c:d8:
d9:0b:f3:fe:2b:fc:3e:47:cd:e6:06:77:9b:98:36:
2e:3d:df:65:87:28:79:42:bf:0a:2d:8c:1f:64:df:
3c:f7:c7:d8:52:ec:c5:5b:62:83:fe:20:73:51:87:
ed:b7:2a:36:0d:89:78:30:4b:83:30:57:8b:6c:5d:
6b:89:c0:e6:9c:1e:88:98:43:29:80:1c:39:90:65:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:38:AB:B3:CA:5E:5E:EC:67:97:C7:FC:36:7B:3F:DF:AB:47:D0:BE
X509v3 Authority Key Identifier:
keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:04:e4:71:8b:5a:2d:2a:9a:94:c8:48:25:09:19:fa:bd:
fc:05:0a:e1:cd:6f:4b:98:35:25:44:2b:3e:70:89:32:ff:cf:
95:f4:0c:2d:c6:5b:4c:ce:c0:52:28:86:83:3c:9e:8a:96:21:
67:ad:37:44:91:97:e1:dd:9f:41:d2:4d:77:ed:09:08:b0:b2:
fb:85:af:48:94:c0:73:98:f1:56:69:0c:2c:a1:3d:44:c9:95:
94:90:2f:6e:95:f1:02:3f:81:70:d4:83:85:7d:74:b7:cd:10:
ba:3d:e5:7c:61:88:86:91:72:e3:e8:40:9e:ca:d4:8c:10:e5:
53:39:f4:9f:c3:70:05:ed:43:33:9f:f3:ab:7e:10:48:f8:65:
36:ca:c6:7f:54:4d:d2:3d:36:de:6d:ad:e0:f0:68:af:f0:c2:
8d:6e:bf:14:dc:61:97:70:db:dd:e9:4e:b9:9b:11:c7:53:78:
1b:9f:c0:50:45:46:9b:12:b8:92:b5:10:00:4e:76:8c:91:48:
47:91:8f:db:92:89:b3:f5:e2:e0:63:12:26:de:5e:e1:da:e1:
f0:e9:98:c7:ef:3c:07:91:24:5c:ff:1c:ed:03:3a:67:42:bc:
eb:8e:2f:82:cc:9e:07:2b:f0:00:26:63:58:ca:44:ec:9e:26:
55:b3:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:44:51 2025 by rpki-client