Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: HSMYgwIewNaO4lVBKV/9ulIMcQzm1ViA2O0nbVUShbI=
Subject key identifier: CA:A9:06:40:CA:52:C4:00:BA:42:DB:99:3F:7C:66:FE:78:C9:C1:2A
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 0198469B3DA9FC0F90708398326C708A80A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 12:00:35 +0000
Manifest this update: Sat 26 Jul 2025 12:00:35 +0000
Manifest next update: Sun 27 Jul 2025 12:00:35 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: IMArzZ0PDOX3pJFc1zBXqqz4aooJ6PNoLPdzbmrrYTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:3d:a9:fc:0f:90:70:83:98:32:6c:70:8a:80:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Jul 26 12:00:35 2025 GMT
Not After : Jul 27 12:00:35 2025 GMT
Subject: CN=caa90640ca52c400ba42db993f7c66fe78c9c12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:c9:57:b1:08:37:43:ae:47:82:cd:19:6a:
7b:69:10:db:bf:77:87:8e:7c:e4:01:e3:0d:a9:5d:
41:40:be:46:74:f2:04:9f:26:89:67:03:ab:60:58:
31:dc:55:30:46:2f:10:81:6f:82:c1:ee:20:40:ec:
84:67:ed:4c:4b:70:34:f6:7d:ec:2e:24:4f:38:34:
9f:13:09:c2:93:18:4f:50:02:8c:f0:09:dc:71:77:
40:1d:fe:17:88:99:78:e6:08:30:87:d7:ba:56:ff:
7f:1b:50:6d:56:00:c1:3c:ec:c7:61:f9:bf:ad:81:
04:c7:be:a4:50:64:84:9e:20:fd:49:91:98:1a:47:
a8:f0:6e:62:d3:d6:fa:eb:a3:70:88:37:3d:d3:b2:
9e:08:d3:66:9e:f4:f0:d6:0f:cd:c6:e1:38:aa:f7:
11:24:3a:6c:6c:a6:86:de:5f:67:ac:8c:5a:17:31:
cc:6d:2a:d1:16:70:2c:07:19:b8:f2:c3:e6:45:86:
05:0a:8a:ec:4b:5b:58:80:a8:a2:80:c8:8b:51:34:
4e:18:8a:c5:1e:81:67:c9:00:a6:b0:bd:ff:35:cb:
82:74:dc:4d:43:80:8d:fc:a1:04:f2:da:74:b0:96:
c8:03:85:6e:c6:54:26:43:5c:eb:a8:ff:a2:e7:3a:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A9:06:40:CA:52:C4:00:BA:42:DB:99:3F:7C:66:FE:78:C9:C1:2A
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f9:bc:05:fe:72:1d:63:cd:c5:41:e0:a8:f7:92:4f:ed:77:
d4:d8:82:65:92:dc:8d:4b:4f:2c:ea:2e:a6:38:50:59:86:2f:
b2:e1:5c:33:aa:ad:f2:ba:05:58:e6:fc:10:5e:a4:3b:e3:ad:
fc:70:3f:87:59:c8:5d:71:c0:8a:8d:d9:7a:f2:52:64:8d:e5:
e8:1c:7d:93:a5:61:5c:f1:99:d4:20:59:0c:5e:a6:56:36:2e:
6c:74:6d:3b:6b:78:2b:f1:42:f5:db:e2:39:98:dd:d8:96:67:
cd:57:78:19:e7:f9:84:ab:db:d6:03:e1:50:91:b7:03:65:c0:
2b:42:5f:12:6e:60:a5:bf:23:5c:18:6c:ed:9f:af:52:69:40:
e7:52:33:15:88:8c:2f:ce:c3:02:ee:97:77:e8:0c:5f:e3:8a:
ec:dd:dd:65:43:57:0f:8f:80:89:65:4a:eb:49:69:50:d8:47:
71:7d:4d:9e:eb:a2:7d:23:2b:38:b5:cd:5a:21:97:3d:0d:4f:
7c:e4:ad:37:45:2e:43:e7:df:73:91:96:3b:ca:c0:fc:62:59:
9f:f5:54:b3:6a:2d:a5:db:f6:41:db:77:d8:76:3c:ef:26:d4:
90:18:4e:a1:26:79:15:e3:e7:88:72:39:0e:26:a1:a8:76:7c:
31:2c:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:38 2025 by rpki-client