Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: ayJijvsSF4NXUGvhBcm31iz0X9gngnKW9tXTryy9X5M=
Subject key identifier: 7B:E9:D5:83:A7:3D:8B:CF:67:EA:D6:9A:F8:4B:BA:83:AB:3F:F3:13
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 0198481B6154D8FA1DC7F9EB0CD2062B889E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 0124
Signing time: Sat 26 Jul 2025 19:00:10 +0000
Manifest this update: Sat 26 Jul 2025 19:00:10 +0000
Manifest next update: Sun 27 Jul 2025 19:00:10 +0000
Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: hPxdrrPZTCHY9Gp6wb0Qzu1+Az3J9A2MDmw42FM0OIE=)
2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=)
3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:61:54:d8:fa:1d:c7:f9:eb:0c:d2:06:2b:88:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Jul 26 19:00:10 2025 GMT
Not After : Jul 27 19:00:10 2025 GMT
Subject: CN=7be9d583a73d8bcf67ead69af84bba83ab3ff313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:f3:7e:d3:a2:dd:fb:56:8a:99:8f:bb:ed:
8d:9e:c4:3a:36:7c:21:fe:f4:24:6c:cb:6a:cb:25:
5c:48:4e:cb:83:bb:f0:2a:06:82:94:22:58:6b:e4:
19:90:6d:41:62:63:6a:8f:82:a1:9d:c1:31:43:5c:
74:f7:44:9f:82:e2:62:02:08:f5:0e:ba:9b:3b:14:
b3:e4:c7:65:c5:43:02:55:8d:09:7b:99:59:66:75:
90:a2:87:cb:00:d6:f0:42:ef:96:aa:02:0b:dc:b0:
82:3a:81:ff:73:60:59:4c:4d:31:32:b3:8d:73:9e:
ec:97:23:c4:c2:a0:fb:79:19:f0:3c:ea:36:79:58:
ae:7b:65:b6:25:6a:e3:92:fe:52:e3:ce:fb:fb:bb:
19:df:42:97:d3:be:dd:1d:81:23:fa:17:a7:27:be:
09:c8:1d:2e:72:45:d7:b4:30:32:60:22:70:cd:ae:
bb:49:6a:cd:76:68:9b:f8:2a:d3:fa:d9:c7:ee:17:
ef:ec:26:0a:a6:50:f5:a9:c6:68:8a:11:3d:1c:53:
94:5c:74:fb:c8:c3:8a:c1:2f:ff:c0:d3:b9:a8:42:
b3:dd:07:03:82:7a:cd:52:da:3f:b0:72:22:92:6f:
5d:4a:91:63:97:71:78:2e:6a:39:d5:45:3f:4b:6d:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E9:D5:83:A7:3D:8B:CF:67:EA:D6:9A:F8:4B:BA:83:AB:3F:F3:13
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:94:8d:8a:52:1f:42:75:c1:2a:54:fc:37:7b:9e:9b:54:00:
2d:4d:22:aa:05:4a:5e:1a:98:c3:de:be:0e:da:f9:f4:57:c5:
02:91:6e:36:28:91:d9:49:f4:33:db:a5:0e:4b:6e:58:71:b4:
d3:6a:04:44:e4:13:a4:3f:57:da:cf:3c:e7:25:cc:0f:d6:e1:
58:01:c2:2b:31:f3:c1:fe:e3:d0:49:c3:0a:b1:7a:7f:cc:3e:
4a:c7:b7:89:8b:c5:eb:18:62:a6:1e:80:ad:81:f4:da:43:78:
55:ae:b5:2b:f8:b1:46:27:0f:76:cf:c8:90:e8:68:33:c2:bc:
0c:7e:72:19:b1:d0:1c:0d:9c:df:1e:a6:33:1a:8d:5d:ae:67:
ba:61:8e:68:7b:95:32:4a:6e:98:1c:80:4f:76:74:36:59:5b:
a1:4e:21:c8:cd:6c:90:78:73:2d:e5:cb:b8:c1:a3:07:2c:1f:
e2:f2:16:2b:57:59:fd:9e:4d:cc:69:f1:c4:09:94:1a:6f:fc:
5e:ad:97:89:84:ce:6a:34:4b:9a:f7:70:59:79:df:73:85:f9:
ce:4c:59:30:75:b7:f6:27:f1:1a:7b:f9:aa:95:ae:2f:97:d0:
b0:bf:1e:9c:00:4b:0b:69:27:bd:ca:5b:ef:c8:de:9f:07:60:
b6:f5:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:04:03 2025 by rpki-client