Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: jK8iPGXGhMysK3quQfkXyPZF22/pJS1fcXr2gmhMFAQ=
Subject key identifier: 8E:9B:87:41:DD:16:9F:D9:A9:55:F3:54:44:42:E5:A8:05:36:6A:FC
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 0198496647EE524B70075EA5BA78592EF4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 01:01:36 +0000
Manifest this update: Sun 27 Jul 2025 01:01:36 +0000
Manifest next update: Mon 28 Jul 2025 01:01:36 +0000
Files and hashes: 1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: VcXFod6VupFlicIusyAITIkeyKpsqZV/JRfQSV3ymUM=)
2: koGXGlmTeestynS-D79F1iRgKe8.roa (hash: t/wGg6Ba4t68swMex8wPDhVXcBtDTQUAFrp4xf0H+oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:47:ee:52:4b:70:07:5e:a5:ba:78:59:2e:f4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Jul 27 01:01:36 2025 GMT
Not After : Jul 28 01:01:36 2025 GMT
Subject: CN=8e9b8741dd169fd9a955f3544442e5a805366afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:9a:47:71:62:39:17:9e:34:d9:1a:45:5f:
47:87:3d:2d:66:47:51:3f:ae:92:82:c8:c7:68:02:
9e:41:dd:3e:2a:cf:87:b9:a9:1e:28:e5:40:76:ce:
02:8b:6b:03:eb:e4:55:70:1e:59:71:f1:23:8d:2f:
8e:4a:25:3a:e4:d3:24:d4:11:77:e2:4d:d8:eb:23:
e7:17:a1:5c:d6:46:14:e4:d6:fb:91:4c:43:14:61:
28:40:19:21:b2:bb:65:64:a8:57:a8:b1:f5:4d:8b:
a7:6d:d9:c0:b1:ab:eb:82:be:9f:ce:be:61:1c:42:
a3:bd:c1:3e:fe:a2:4a:fa:9f:3b:87:42:5d:2a:f9:
61:5d:1a:f8:48:32:8e:e7:0e:4b:a4:9d:84:ad:6b:
43:51:e7:ec:5c:61:ca:01:06:5c:dc:e8:70:8d:b8:
dc:d8:3c:5f:31:14:ec:38:06:e1:86:c4:bb:57:70:
2c:ae:90:1e:01:d6:06:08:41:dc:18:62:2a:54:f7:
dd:e6:31:28:12:7c:06:81:6c:c3:b4:fe:36:ee:76:
13:e8:24:6a:a3:29:0c:1f:32:94:8d:a6:f2:27:ac:
7c:8d:f1:48:33:52:aa:3f:a8:51:8c:db:ee:1b:59:
77:1a:e7:88:c4:9e:c5:e1:49:09:b5:cd:33:08:65:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9B:87:41:DD:16:9F:D9:A9:55:F3:54:44:42:E5:A8:05:36:6A:FC
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:83:b2:4f:36:b4:c8:90:60:bf:9c:77:e7:bc:6f:b3:e1:7c:
97:52:ea:dc:82:19:b2:9d:aa:f9:e9:2d:66:93:fb:d4:cf:b6:
dd:10:c0:d4:0e:c0:fe:60:b2:ff:58:3d:4c:83:d5:9f:33:41:
d9:b2:96:9c:9d:f7:e3:89:01:f1:60:1b:53:d1:9a:93:01:d5:
11:38:dc:64:41:29:ed:12:a4:5c:87:eb:b3:e5:1f:8e:ae:29:
f7:93:9a:bc:f9:9f:88:0c:9c:b1:af:28:8a:25:ce:af:f9:70:
3a:16:a6:5c:5b:d0:50:61:f9:77:ad:e6:02:50:12:c0:fb:e2:
fa:c9:05:a0:dc:20:e3:81:76:36:22:b5:e8:5e:8a:e0:31:48:
33:73:68:ac:0b:3d:81:07:3f:f1:e7:37:a5:d2:f6:fb:46:1a:
6a:63:5f:b6:3a:93:32:3f:b1:6c:82:e1:42:98:53:92:3c:cb:
e0:26:43:16:ad:ed:f3:1c:7d:bc:b1:40:3b:07:70:21:fa:1f:
6b:51:c0:20:f1:1f:20:44:01:e1:dd:d5:59:85:9f:17:29:df:
96:e8:22:68:3f:94:d3:df:89:fe:e1:0a:35:2a:a5:61:a7:2c:
3a:4a:ec:38:0b:72:ed:56:e6:e8:d1:38:8b:f2:64:4e:b1:a1:
a8:57:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:49:14 2025 by rpki-client