Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
File: ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft (raw, json)
Hash identifier: N3XJZF0MtVH9dpaxhlaKxW3OH4YRB5hd4xIJmzY/vLo=
Subject key identifier: F3:3E:4F:7B:0F:39:1E:2B:6D:E8:93:46:11:C0:7C:F6:0C:BD:24:2E
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 01984A0A5DA073E44163FF6F0AA4D7C7204A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 04:00:50 +0000
Manifest this update: Sun 27 Jul 2025 04:00:50 +0000
Manifest next update: Mon 28 Jul 2025 04:00:50 +0000
Files and hashes: 1: ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl (hash: 8Hu0tW/DqlOVJ/sXnURP/W/15OC2OtX5gRMS6/N0ckY=)
2: o_9E0nw7QGxoWCZk4QqgNmZyf9E.roa (hash: 1PmMo5WtlImsrpdUj9rWhTyVCZubOTGK5D/YW7g4Mss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5d:a0:73:e4:41:63:ff:6f:0a:a4:d7:c7:20:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Jul 27 04:00:50 2025 GMT
Not After : Jul 28 04:00:50 2025 GMT
Subject: CN=f33e4f7b0f391e2b6de8934611c07cf60cbd242e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:03:18:f5:df:c2:83:a7:a6:a7:57:8b:b5:
3c:22:73:33:fa:84:09:83:ed:5f:cd:2b:1b:7a:76:
5c:22:59:5f:e6:1d:ee:31:99:8d:9b:94:ac:e4:f7:
5b:45:3a:8f:2d:0f:7b:ca:e9:40:51:0a:35:7e:0d:
fd:cf:a4:fb:ca:01:fe:0e:90:7b:35:46:a9:69:c5:
13:ee:7b:5f:ac:37:04:52:ba:8d:58:9e:36:7a:99:
2c:3b:32:00:55:51:16:81:49:2c:1c:f2:6c:60:a2:
a5:54:3a:83:0c:71:70:05:d2:d6:29:25:f2:5c:12:
d5:a8:4a:74:fb:2a:98:a6:ea:9a:58:04:b7:31:b4:
a5:aa:e0:e2:f2:30:8b:13:e5:45:c2:3d:f8:ef:c3:
2f:80:71:da:6c:09:19:4e:d9:06:09:a4:68:b7:c0:
8d:94:d4:e0:fa:c0:95:e4:9d:41:05:79:5a:5a:69:
2b:67:68:8d:7b:82:89:c1:3c:30:cc:fb:03:71:81:
99:b2:8f:c0:3b:b0:97:74:a7:10:2d:62:b8:a2:d7:
e3:5d:63:a4:3a:31:7d:60:10:da:cb:ea:39:f5:9d:
2b:bd:9e:eb:67:66:98:11:ed:f7:a2:b7:96:39:aa:
8d:78:1b:45:c1:a7:09:eb:12:c2:fd:7e:e2:5a:5e:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3E:4F:7B:0F:39:1E:2B:6D:E8:93:46:11:C0:7C:F6:0C:BD:24:2E
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:53:38:4f:06:96:2b:9f:61:c8:5c:0f:7a:2b:87:c1:69:7b:
27:bc:4c:33:8f:ed:1e:c8:bb:5a:ac:05:15:95:0d:79:0a:62:
42:ee:f4:0a:f1:5b:5e:aa:63:bb:5c:3d:b4:de:9d:ab:23:d9:
62:b3:6c:24:45:82:76:02:80:3d:56:e1:17:5c:06:f7:ea:f2:
36:70:f1:21:02:17:fe:8d:49:48:ae:83:26:ab:8d:f5:de:7b:
b7:55:0f:32:c1:5d:2c:fd:b1:70:57:46:ab:e4:3d:e7:1d:cd:
3a:23:96:a9:0a:80:c0:f0:28:9e:f0:d7:25:2b:66:90:37:bf:
5e:48:57:b5:aa:34:fe:bb:70:66:1b:d4:ec:6f:f6:2c:9e:94:
73:e9:6a:8b:e0:d2:f0:16:7f:52:f4:d8:fb:2d:48:2f:4d:5e:
4d:cf:51:56:35:fd:2f:8a:e0:8f:84:e0:56:31:93:7b:a0:7b:
e3:cc:75:7a:d8:3b:4a:f8:ff:a2:b3:b9:4f:43:34:81:58:64:
6e:f1:6f:e8:b5:b6:66:f2:9a:55:a2:22:c4:d6:8b:2f:d9:87:
45:f3:82:b8:cc:2a:98:10:43:7d:cb:79:f2:19:86:2a:45:26:
d1:15:d2:8a:44:64:0d:3a:b4:29:e8:9a:06:07:b3:b3:0e:0b:
68:ac:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:13 2025 by rpki-client