Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: F59Fj0Y7Ob7YThia33h89lp8bKeTPZ9tWDDbYm3FL00=
Subject key identifier: AD:C8:72:DB:03:9D:8E:70:F5:BF:69:A7:69:26:83:B8:3E:D3:3E:4A
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 019849D3349252B7EBFD491D35B98F6E4ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:34 +0000
Manifest this update: Sun 27 Jul 2025 03:00:34 +0000
Manifest next update: Mon 28 Jul 2025 03:00:34 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: WHW18OT5LwZUAeRaah/JbKrpe0uPWXh5K9np2VXziP4=)
2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:34:92:52:b7:eb:fd:49:1d:35:b9:8f:6e:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Jul 27 03:00:34 2025 GMT
Not After : Jul 28 03:00:34 2025 GMT
Subject: CN=adc872db039d8e70f5bf69a7692683b83ed33e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:0c:aa:9d:21:85:6f:3d:d7:54:93:55:d6:
a6:c0:9e:8b:d1:e3:b8:42:43:b5:f3:45:28:b7:38:
d3:13:a7:30:d2:61:7d:3b:ae:be:72:21:b5:8b:3c:
b7:2c:2b:5e:eb:b3:87:4e:ed:69:9a:0a:db:2a:d4:
16:be:76:e1:d5:93:42:3a:58:ed:d0:d8:33:7d:c0:
d0:56:5c:42:30:b9:21:f2:97:90:fc:50:3c:ee:8f:
98:49:b1:f6:e4:6d:48:f2:00:ba:29:69:aa:17:df:
21:06:71:3a:b7:27:68:5c:30:2f:be:3a:ae:94:b3:
01:f9:81:ab:cf:71:97:3c:c7:08:1b:e2:58:6c:96:
46:fd:8c:52:c4:58:0b:5c:9a:71:e0:34:39:98:25:
b2:03:4c:01:12:97:37:74:49:f3:80:74:93:1a:e3:
eb:c3:3a:1b:be:c4:d6:50:be:aa:08:89:4d:df:aa:
38:5c:29:ec:ad:2a:2e:05:7e:71:bd:01:a2:03:60:
c5:5d:52:9a:c2:2b:1f:87:93:02:4f:41:6c:14:fb:
0a:c5:d9:56:da:8c:6c:10:1d:b7:e6:fd:ef:be:3d:
82:72:3a:02:41:60:d9:21:ab:bf:98:11:03:d6:af:
b4:4b:0e:6c:76:88:7b:6d:e1:5f:58:27:69:c7:90:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C8:72:DB:03:9D:8E:70:F5:BF:69:A7:69:26:83:B8:3E:D3:3E:4A
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:3f:5f:20:53:f7:aa:6d:50:5e:e4:d0:7d:e3:8a:5d:b0:97:
d8:51:d6:f3:3e:4f:53:c2:e6:ea:28:d5:05:cc:0c:4a:22:bc:
3c:69:d0:ca:4c:1f:74:f2:52:08:74:bd:3b:0b:e5:20:5f:a8:
ac:8f:11:18:0e:d9:bf:87:51:5a:c8:90:18:a9:64:e8:99:27:
75:a7:10:a7:15:c6:1d:20:2a:a4:63:11:e3:a4:9a:d4:aa:bc:
38:a6:e4:6e:53:6f:5a:b2:83:ca:f6:e8:26:34:51:2e:fa:41:
37:76:04:2a:4c:5a:50:4b:0d:29:8e:e6:08:d7:2a:5c:f9:d8:
c4:b2:03:26:c2:98:eb:7d:4b:6b:df:90:4f:10:f8:2d:24:9e:
40:58:70:72:f9:85:43:51:77:3c:a4:8c:d8:08:37:cf:1f:96:
d7:c9:ca:d1:42:38:26:b9:5b:84:68:b2:57:9a:88:a4:6e:37:
c0:4b:90:2d:25:6e:16:c3:5d:10:cd:bc:f6:a2:96:f5:a4:c6:
b1:39:6e:ba:ba:33:9a:f2:14:ea:50:02:95:41:1c:db:9d:fc:
9a:b8:ab:b4:26:24:a1:d0:82:56:e8:68:d7:9f:f7:b6:2a:57:
4f:b0:48:41:cc:4e:4f:45:40:f9:96:90:94:b7:32:33:47:ab:
33:a2:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:00 2025 by rpki-client