Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: B6KeUKxvsdiIDT44IUXSB9luoyWu56d+SxlwFSpiU2M=
Subject key identifier: 4A:AD:B8:E5:23:96:AB:C1:05:20:10:ED:6A:AB:91:A0:2A:F2:29:1B
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 01984A40F681ACCA37008A8BE2B239AC6D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 05:00:27 +0000
Manifest this update: Sun 27 Jul 2025 05:00:27 +0000
Manifest next update: Mon 28 Jul 2025 05:00:27 +0000
Files and hashes: 1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: MuIyuW0B5PHWY5dkDzn6TZ8OLx8Wc+Z98YRvsSrZq0g=)
2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f6:81:ac:ca:37:00:8a:8b:e2:b2:39:ac:6d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Jul 27 05:00:27 2025 GMT
Not After : Jul 28 05:00:27 2025 GMT
Subject: CN=4aadb8e52396abc1052010ed6aab91a02af2291b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:65:93:c5:34:9e:5d:87:13:fe:ea:33:8e:
88:89:a0:8b:f7:d7:b3:92:a9:d8:d2:86:2c:2a:e4:
76:8f:b7:5e:7b:08:3f:90:de:9a:08:a5:c5:24:63:
41:8f:84:6b:2f:d8:7c:8d:95:b3:cb:50:8c:55:50:
b9:3c:bb:8a:9a:77:1c:5b:66:78:c8:b8:1e:54:4a:
e9:5f:42:ef:5d:72:6d:9c:17:fa:cc:83:83:a4:16:
a5:c6:19:7f:77:48:11:4f:2f:54:df:a0:83:e0:08:
15:6b:ce:45:c6:c8:8c:77:b2:c2:59:06:e5:b8:98:
38:23:a8:6f:61:bf:14:03:99:a6:52:7f:6e:07:6c:
f8:bd:d4:b2:36:fe:b6:e8:e5:1d:49:7f:ad:62:f4:
03:e3:73:3d:28:b1:c2:a8:55:d8:79:57:5a:32:f1:
5f:1a:4c:ea:34:23:7e:fe:8a:de:53:cf:62:89:eb:
71:0b:89:35:ca:a6:0f:cb:ba:e7:ae:a7:cc:92:2d:
99:64:ac:10:77:9b:e1:d8:9e:b3:78:9c:df:df:b7:
89:54:b6:c4:d9:8e:d7:f4:ca:dd:33:cb:f7:cf:98:
63:d1:1d:46:a3:6f:1e:5d:c1:47:f4:79:0f:5e:bf:
e8:2b:ab:89:90:22:ab:52:9f:1f:c1:3d:9d:9c:af:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:B8:E5:23:96:AB:C1:05:20:10:ED:6A:AB:91:A0:2A:F2:29:1B
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2b:16:e3:6e:79:c6:aa:0c:47:c3:6e:80:1e:27:9a:7b:51:
9c:c0:2d:fb:30:43:70:37:dc:4e:e4:32:84:f1:71:00:19:a0:
ec:ce:b3:3d:f9:dc:62:fb:da:f1:63:ab:06:18:1d:62:c8:d0:
bc:dc:c7:64:40:4a:c2:8c:73:f4:e8:10:79:90:29:0e:9f:6c:
1c:3d:58:16:70:d9:00:fe:1d:a9:ff:9e:d2:c5:66:93:b6:32:
30:2a:c6:bd:29:49:7a:a8:3e:84:61:f2:7b:08:03:ed:31:ca:
87:f6:91:96:36:12:30:99:74:55:ad:cb:95:a0:e3:ae:4c:60:
80:e2:ab:44:12:b6:9d:51:da:5f:96:16:4b:f9:d3:b9:1a:13:
9f:86:46:a5:90:9a:7e:6c:3b:e1:04:f8:4e:1b:82:7c:f7:9b:
19:73:ce:bf:53:18:1a:45:3c:fc:1c:e7:16:2c:9c:e4:ba:03:
3c:68:7c:00:16:ea:55:86:82:93:8e:b0:59:42:47:9a:b2:bb:
20:f3:12:1a:ff:48:08:58:bf:7f:24:36:d6:bd:b8:22:20:c5:
b8:1b:33:2b:c0:b8:24:65:9f:a0:e8:bd:ea:f5:a8:a9:cc:6b:
a0:a0:e0:88:70:2c:cd:9d:b7:61:fe:d4:cb:60:2f:68:b0:3f:
da:06:fe:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:40 2025 by rpki-client