Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File: AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier: MgClqDVtcIJMHRLgh3HWuz6A8YjECks+IzZd5eVtwM4=
Subject key identifier: 09:CF:51:E6:D6:06:03:6F:30:19:E9:CD:50:A7:7C:51:CE:C5:54:18
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer: /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial: 01983FF47C9AE41DEDCEF14182574D960013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number: 158F
Signing time: Fri 25 Jul 2025 05:00:43 +0000
Manifest this update: Fri 25 Jul 2025 05:00:43 +0000
Manifest next update: Sat 26 Jul 2025 05:00:43 +0000
Files and hashes: 1: 1-V8d9umP0McsFhAezBGsGExpglU.roa (hash: CUsrGluvA/qkzyOPwb3wxAIF8Xp3/wYNAg7YgPlNKrk=)
2: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: KsaOwBl8+tkfLMxipQNj9S/wyfK548AYFVbH1nKXXvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:f4:7c:9a:e4:1d:ed:ce:f1:41:82:57:4d:96:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Validity
Not Before: Jul 25 05:00:43 2025 GMT
Not After : Jul 26 05:00:43 2025 GMT
Subject: CN=09cf51e6d606036f3019e9cd50a77c51cec55418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:fb:ef:4b:ef:d0:ff:e6:eb:97:10:4d:3e:
47:90:93:6c:53:81:cc:47:ba:e9:4c:b9:f8:08:46:
57:11:fa:12:b6:1d:28:d0:ea:b1:c4:3f:a7:a9:72:
23:4a:3d:39:49:9a:5a:c9:d2:b7:8d:b0:c5:a2:8b:
60:33:1b:ac:3e:30:4f:92:41:01:17:fd:6d:d5:fd:
ea:95:8b:ee:6b:8c:b1:d3:f8:fc:64:45:3f:ab:41:
ea:3c:2a:69:b1:82:84:80:b5:07:8c:f7:c1:3f:1b:
5a:f1:65:fd:1d:8d:e6:f1:f0:30:e7:81:41:8f:67:
c3:b6:28:06:75:80:bd:83:a8:b2:8f:a3:77:2f:86:
b9:da:2f:4f:9a:45:44:31:56:3e:a8:60:5f:84:10:
5e:ff:4f:bd:9f:5d:04:99:52:ea:af:c2:d2:09:07:
ef:cf:37:fb:a1:76:a5:ec:54:83:14:00:fe:ca:09:
f4:ed:83:3d:7d:72:47:eb:e4:47:85:39:1c:60:82:
67:f1:27:69:29:8c:80:44:2d:c2:59:87:82:4b:47:
38:39:13:00:96:55:ff:7e:89:12:10:df:56:5c:1c:
84:b5:84:2e:80:95:46:dd:76:af:0e:28:ed:1c:db:
4a:03:27:ac:1f:78:0b:7d:ea:a6:43:5d:5e:42:46:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:51:E6:D6:06:03:6F:30:19:E9:CD:50:A7:7C:51:CE:C5:54:18
X509v3 Authority Key Identifier:
keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:31:2f:4d:56:cf:7d:54:0b:87:cd:7f:67:ab:b9:a0:e2:78:
ef:d5:59:16:af:91:ae:75:cc:03:7e:e1:93:71:bc:03:c4:eb:
ae:3d:12:01:cd:9b:de:a6:82:21:8b:86:92:21:63:33:93:a4:
26:7f:a6:ef:db:83:cf:72:29:d4:6a:99:55:f4:67:72:df:df:
a4:5e:c3:9c:61:be:71:c8:a0:32:98:79:3f:12:50:bb:90:77:
ef:c6:0d:8d:6b:ac:1c:87:f2:a6:5d:ba:35:ad:34:58:a4:8f:
e9:af:f1:52:56:4e:ec:a8:c0:18:4c:1c:ed:88:77:29:bc:bf:
e5:60:f8:c4:cc:21:09:e0:2d:81:07:f9:b1:e3:86:9d:e0:4f:
00:8d:a1:b0:f1:73:a9:ec:75:1e:a9:f1:24:32:cd:93:ca:bf:
86:37:69:e6:ea:48:32:d5:c7:eb:d9:0f:01:56:e9:af:bd:eb:
b3:1b:5c:3c:8f:32:6a:bb:2a:49:c0:81:32:62:69:63:4f:15:
71:de:ae:fa:e5:51:38:56:cf:84:ca:d1:4e:d1:24:4e:cd:45:
84:fe:f9:fc:5b:6d:d4:c0:df:ac:c7:96:77:8a:19:bb:30:58:
42:e2:ab:c1:6c:6d:c7:a1:0e:3d:48:fd:5e:14:54:8d:2e:98:
84:6e:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:34 2025 by rpki-client