Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
File: AlO5GdddwgTZyjjbeyihdINLOz0.mft (raw, json)
Hash identifier: Qk1TQxyhPemkEyMxfY8Tq1pydd2ZH3MrcFm/ln0gUFE=
Subject key identifier: 83:21:EB:59:33:BD:F9:D8:A1:FD:63:69:52:4D:03:40:CE:F9:F1:A9
Authority key identifier: 02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
Certificate issuer: /CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Certificate serial: 01984778696D35761CFF10338538C7493618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
Manifest number: 0620
Signing time: Sat 26 Jul 2025 16:02:10 +0000
Manifest this update: Sat 26 Jul 2025 16:02:10 +0000
Manifest next update: Sun 27 Jul 2025 16:02:10 +0000
Files and hashes: 1: AlO5GdddwgTZyjjbeyihdINLOz0.crl (hash: RGDMOEHcap+uQ9rGRljG8grQg8/TtqqFYU7crEln8do=)
2: I1gkA5k4uMZob0hM5xQHdEl5cUo.roa (hash: EhH3dWMV5US/hFp8+LiY1Hpa7FxODhxAHT3s3CfUej8=)
3: V0uScWgIlxby8-atCI31gs7gIls.roa (hash: N1Pj+HryVhCS5We4uz7FXYt4pnqlzxV+cQWuG5ETX4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:69:6d:35:76:1c:ff:10:33:85:38:c7:49:36:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Validity
Not Before: Jul 26 16:02:10 2025 GMT
Not After : Jul 27 16:02:10 2025 GMT
Subject: CN=8321eb5933bdf9d8a1fd6369524d0340cef9f1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:dc:b7:6e:3b:d4:ca:a3:49:17:37:ba:35:
4c:a2:fc:7a:e1:ab:77:8f:8e:9f:4a:7f:ca:9b:fa:
91:2f:1f:0d:c4:c2:b4:6e:b9:7d:49:e5:3e:58:30:
84:a6:8f:f4:0e:0d:29:37:f4:77:e4:ca:b0:bb:23:
dc:c0:09:3c:ba:3b:37:ba:e4:57:b9:54:0f:ed:be:
c4:a1:e5:30:84:c7:3c:27:f8:30:2b:64:80:74:60:
46:16:40:a5:94:2e:5e:d5:ad:2c:3e:6c:1c:81:aa:
06:83:28:9e:13:62:b5:18:21:e7:46:41:95:d8:4c:
3f:f8:94:e2:ee:dd:bb:f5:0c:d7:69:eb:aa:3a:75:
0e:9c:cd:82:53:63:73:d0:d5:2a:ee:d5:eb:de:d4:
4e:09:61:42:de:d8:a7:46:ad:71:bc:eb:88:16:51:
23:28:e7:dc:07:d8:d5:5d:21:63:8d:59:4b:99:89:
f8:9a:b4:a5:96:4b:7c:96:f2:b4:ad:02:eb:d1:93:
58:6d:b2:ef:f3:32:2c:6b:62:b6:2f:17:a6:9d:d9:
2b:5a:1b:01:ab:93:e2:d8:41:6d:e5:17:11:68:8c:
be:e1:58:dd:b4:c6:98:64:40:ea:3b:b6:37:b8:65:
c6:81:4f:4c:18:fb:6c:ee:06:f1:18:e9:67:b2:3b:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:EB:59:33:BD:F9:D8:A1:FD:63:69:52:4D:03:40:CE:F9:F1:A9
X509v3 Authority Key Identifier:
keyid:02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:3c:c5:8e:17:a2:80:22:0f:22:40:0d:e7:29:6e:26:0a:
e0:26:8d:f8:65:f5:90:1b:c2:90:7c:19:26:78:e7:20:b0:d3:
36:aa:f8:36:05:0d:e6:dd:bd:51:94:ee:bd:2e:53:0e:bb:81:
1c:a4:61:12:a1:9c:e5:23:9f:a8:5e:07:1e:5c:77:5e:15:7b:
c2:22:70:28:be:5c:c4:56:f2:35:c6:26:67:ee:09:dd:fd:71:
37:5e:a6:ce:1f:ad:18:b6:c8:c7:68:ce:c2:d9:c8:81:8a:bd:
66:d3:3d:97:be:97:7f:c7:0d:f9:87:01:8c:60:c2:5f:d7:30:
58:e5:2c:6a:88:05:01:90:c6:eb:1d:c1:8b:31:4d:d9:48:34:
7f:46:21:ff:6d:be:1b:ac:7a:4e:1a:e0:13:76:03:90:50:16:
c0:ee:92:57:b3:3c:60:53:62:14:4e:0b:dc:07:07:bb:51:76:
30:75:3b:59:18:77:82:1e:4a:51:3d:3e:3f:15:57:e7:f4:5e:
e7:bd:ca:04:70:e1:f3:0a:c4:55:09:20:a6:73:4d:6f:99:36:
2e:18:fc:bf:bf:6a:28:89:e5:04:46:ae:e5:30:7f:e3:51:3a:
ed:3e:42:af:c6:4b:c4:58:dc:0b:61:18:0c:c0:7f:f6:e7:69:
7f:ed:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:39:16 2025 by rpki-client