Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: RkO8lX5cVBBVxUxGWqlB+S+LJLDipJmMVIC0j6a1bCc=
Subject key identifier: 37:0C:FA:DB:78:82:A7:D1:C3:B4:B3:2B:7C:B8:48:7B:AC:34:D5:F1
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 019843D0EE0AD8977A49EFED03980F523F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 1221
Signing time: Fri 25 Jul 2025 23:00:22 +0000
Manifest this update: Fri 25 Jul 2025 23:00:22 +0000
Manifest next update: Sat 26 Jul 2025 23:00:22 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: i1fTfzVB9lfJOO86N0mXbnAN6C4X3BSzQ1zQoe9CO0Y=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d0:ee:0a:d8:97:7a:49:ef:ed:03:98:0f:52:3f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Jul 25 23:00:22 2025 GMT
Not After : Jul 26 23:00:22 2025 GMT
Subject: CN=370cfadb7882a7d1c3b4b32b7cb8487bac34d5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:58:17:df:3d:b9:89:6b:93:b7:e3:0a:3a:c6:
00:c8:7c:70:e7:c9:22:66:a1:47:72:76:a1:cb:c7:
97:24:cd:8a:0a:ba:98:3d:2a:59:f1:c5:3c:be:b1:
71:24:c5:cf:10:44:b9:99:db:30:af:fd:de:0f:3f:
45:6f:cb:9a:fa:38:9e:6a:50:ce:56:46:0d:f8:96:
0f:81:b4:4f:fc:c8:ff:18:ae:d6:5e:37:62:de:20:
c0:5f:63:5d:32:b8:83:3d:3f:e2:bc:53:fd:2f:c3:
d2:3e:02:35:8b:0b:f0:6d:ce:ba:95:ac:be:25:50:
e2:bf:9d:d8:ce:e2:7d:64:ee:05:d7:9f:50:7e:27:
97:6f:fb:ec:4e:0a:88:e3:24:75:32:90:78:8f:76:
25:2c:76:6d:19:6c:2e:93:aa:90:9d:15:81:dd:75:
ee:fa:02:9d:9d:b2:0b:d6:6c:dc:a1:a2:c1:3b:f7:
ad:12:d7:20:4f:5d:6e:29:0a:bf:85:d0:95:08:de:
5d:af:e4:25:cf:a5:02:fe:57:29:54:77:e0:66:91:
55:86:f0:56:32:e9:4b:60:e4:55:83:22:f8:c8:db:
df:a5:4b:49:5f:c8:c3:25:61:2d:c1:af:31:e9:f1:
33:c3:c4:13:42:00:c3:01:86:6b:9a:71:23:d2:c9:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:FA:DB:78:82:A7:D1:C3:B4:B3:2B:7C:B8:48:7B:AC:34:D5:F1
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f5:53:f4:af:56:fe:1d:d2:41:66:eb:9d:b9:75:ca:e0:02:
c4:e7:a4:79:4b:cb:c5:38:21:69:5d:0a:27:1d:7a:04:50:51:
99:e4:b5:db:8a:92:ed:1a:a3:4b:35:76:70:e9:7f:81:9d:9a:
24:71:64:af:34:ab:f1:15:41:16:ba:7b:75:69:a9:3d:16:64:
35:a4:48:28:e2:5f:22:60:b4:25:8d:ff:2e:dc:ae:c8:67:55:
bf:06:4d:8a:80:a8:67:5a:8f:48:f6:a2:4d:68:bd:04:4d:d5:
fe:75:de:d0:ab:72:ee:34:a7:04:8f:11:ea:87:d6:94:e6:b6:
4c:6a:c5:a1:2c:a9:22:95:cf:38:02:62:26:5f:f4:30:02:81:
a6:29:e0:a2:49:a6:6c:85:02:f5:f3:57:fb:cd:6d:e8:00:ef:
1c:5e:20:12:d1:4c:dd:28:8c:a8:af:05:02:cf:f9:af:30:b5:
51:54:0f:99:b5:85:62:f8:2d:a5:93:68:80:5a:45:e8:a8:dc:
07:ec:3c:c1:1a:06:45:d4:60:07:0b:6c:a7:b6:9a:cc:eb:be:
bd:bc:56:10:1a:66:09:f3:e8:98:f3:f6:a0:e5:a9:09:12:b5:
ee:bb:4b:6f:0b:a6:ca:23:7d:0e:9a:42:d4:4c:46:98:5f:d1:
04:ef:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:45:30 2025 by rpki-client