Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: RwfZP7N773Tpp+8Jgh70Q+4NPj5dZknThukuV7GzEDQ=
Subject key identifier: 5B:3A:D7:30:61:BC:1E:8A:C7:74:5D:28:12:E3:93:5D:82:F9:B2:41
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 019855DF32E3672D5B44A28B5FE2339B471B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 15C2
Signing time: Tue 29 Jul 2025 11:09:07 +0000
Manifest this update: Tue 29 Jul 2025 11:09:07 +0000
Manifest next update: Wed 30 Jul 2025 11:09:07 +0000
Files and hashes: 1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: hAIkpcTqBrTwoYA2O5cJA9uAGrNvc3P7U6414wfDWPI=)
2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=)
3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 11:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:32:e3:67:2d:5b:44:a2:8b:5f:e2:33:9b:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Jul 29 11:09:07 2025 GMT
Not After : Jul 30 11:09:07 2025 GMT
Subject: CN=5b3ad73061bc1e8ac7745d2812e3935d82f9b241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:d4:5a:61:56:ed:68:21:e2:34:16:f3:eb:
39:fe:b6:7f:11:02:be:8f:f6:67:3b:be:2f:59:75:
7b:66:68:54:10:d4:d8:52:58:16:35:75:f0:a0:c0:
85:f2:0c:11:9b:e2:47:6d:3a:a1:ad:15:bd:28:d1:
7e:c4:5b:7e:93:9e:66:13:2c:36:4b:aa:4a:34:71:
ee:78:1f:ae:37:b2:f1:4d:d1:60:43:8f:22:7e:a8:
bb:a8:e3:ab:43:68:82:06:0e:cd:db:fc:25:ab:c1:
10:96:64:af:7e:65:fd:d4:bd:d6:9b:a4:ce:d8:01:
f5:4a:c6:ab:7a:2f:28:a1:01:70:d2:4a:8d:07:4f:
c3:89:f3:50:b4:b9:fd:a8:9f:55:5f:cb:8b:42:d1:
d1:db:8f:6e:87:76:d1:a6:aa:4f:dc:b5:05:89:a8:
0b:cd:ae:14:de:cd:b4:9f:f7:ca:c9:c2:74:31:74:
a5:08:c6:52:ee:56:b1:56:7e:99:be:67:4d:4c:8d:
a2:ce:99:5b:18:76:32:33:04:79:fd:6b:1b:7a:9c:
6e:d1:82:00:8f:4b:3b:bd:7e:10:5b:4c:49:f3:2e:
09:32:47:0b:fe:44:05:d8:87:cd:c5:2c:ea:0e:e7:
01:39:b6:ee:b5:f4:2c:29:06:92:7d:6b:cc:aa:9d:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:D7:30:61:BC:1E:8A:C7:74:5D:28:12:E3:93:5D:82:F9:B2:41
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d8:6d:d9:47:0b:ba:29:53:ff:de:72:a2:43:8e:dc:75:6f:
85:21:ee:69:77:4c:4b:a4:79:43:de:b7:4d:fd:45:30:16:84:
1f:3c:e5:a5:6a:3d:3d:7a:e9:88:3b:73:cb:23:9b:61:4a:5b:
da:3b:db:1f:83:0a:45:b2:e7:27:7b:1f:4c:e5:62:19:5d:a8:
57:36:f9:b0:ab:f9:f4:aa:b5:36:0c:b1:56:73:3e:d0:ce:34:
07:29:95:69:2a:60:dc:c9:eb:2d:59:ca:d0:92:d9:d8:09:2e:
bb:f7:99:6f:83:3a:45:d4:b7:a6:4a:96:87:fa:b2:63:ba:70:
57:75:72:80:26:ad:9a:05:65:e5:e4:2d:41:a5:da:19:c7:c5:
00:dc:c0:a9:c4:b0:54:57:84:bb:cf:4b:07:d0:b8:cb:ba:ea:
d1:3c:32:fb:ac:49:71:06:e5:b6:90:93:97:19:43:7c:d5:61:
5d:78:3c:bc:6b:4a:11:9a:74:4c:26:51:a4:30:bf:da:0f:d9:
09:5e:e8:e5:18:e7:63:e6:42:2b:dc:a4:5e:30:3a:4f:70:9d:
f8:e7:fd:1d:aa:3e:72:32:99:ab:67:dc:c4:95:c6:00:e5:73:
c4:f9:bd:e4:ff:e3:56:27:49:50:82:c6:37:8e:a9:75:9b:b5:
c8:1d:82:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:37:32 2025 by rpki-client