Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: F4REvkNTHLSrzKLcdSixlE0pczZZJ9q+YEVufF524to=
Subject key identifier: A7:BE:92:E2:91:B5:D5:D4:19:CD:95:1E:44:EF:F2:E3:C1:79:89:8C
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 01984106AF3599C08E1432C4CD2534450B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 1600
Signing time: Fri 25 Jul 2025 10:00:13 +0000
Manifest this update: Fri 25 Jul 2025 10:00:13 +0000
Manifest next update: Sat 26 Jul 2025 10:00:13 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: wkFnistXdZunzbJ+OCoirG44HBhrXvsHSjNETcud2iI=)
2: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (hash: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:06:af:35:99:c0:8e:14:32:c4:cd:25:34:45:0b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Jul 25 10:00:13 2025 GMT
Not After : Jul 26 10:00:13 2025 GMT
Subject: CN=a7be92e291b5d5d419cd951e44eff2e3c179898c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:71:a3:bf:14:01:74:9a:0c:36:0a:bd:c6:
97:0d:a5:cc:ca:0e:1c:b7:63:5d:12:ee:6a:5c:3c:
65:e4:1d:4b:e9:ed:78:43:36:fb:29:cb:b1:05:af:
d9:90:18:00:f1:cc:f9:9a:fe:47:b2:a9:00:0d:c1:
b0:d4:50:a6:57:1d:9b:17:6b:77:6b:64:49:6e:9c:
71:3f:1e:91:86:91:36:ad:a2:df:f0:b1:29:e1:53:
c8:b4:12:d7:86:3c:d0:67:f2:bc:53:f6:eb:72:ae:
e9:14:a3:50:a4:6e:cc:ca:a3:c0:19:b6:30:ca:97:
8b:8a:83:be:9c:79:d8:ac:6e:24:b8:a4:a6:c7:ce:
63:f0:8c:f6:f8:0b:3f:2e:1f:91:1b:ce:99:f1:07:
f1:b6:53:d3:48:c6:65:0a:5a:55:e2:67:59:dc:ce:
40:25:35:21:c2:eb:e0:51:20:d5:5b:ee:a9:a6:0a:
dd:26:04:a6:3c:a7:d9:b3:49:23:3f:6b:37:c8:81:
5d:70:7f:7f:7d:94:a9:cc:a3:21:fa:d0:fe:c3:6e:
89:4b:a6:4f:fd:48:80:7a:40:29:8e:9e:38:7b:d4:
fa:0b:9a:46:dd:0c:f0:43:6b:53:6b:3a:5e:60:46:
1a:65:27:c4:84:98:b2:a3:aa:f3:3e:46:e9:58:3f:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BE:92:E2:91:B5:D5:D4:19:CD:95:1E:44:EF:F2:E3:C1:79:89:8C
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d9:87:ed:d8:5b:8c:00:83:99:ac:e4:f9:89:63:9b:0a:11:
3e:ac:22:07:47:d0:f7:05:4b:8a:ab:47:02:4c:2b:e9:b8:b4:
21:bc:29:0c:f9:d9:9b:c1:ba:0f:93:2e:8c:0b:d7:2a:6c:92:
34:33:49:08:10:3b:a9:22:bd:3e:97:49:18:30:9d:73:52:44:
97:13:9d:79:f3:55:98:9f:dd:4e:10:7f:fe:8a:d0:96:86:f8:
01:2c:cf:f8:43:37:dd:97:46:a2:21:50:90:00:fc:02:16:58:
a1:7a:0c:24:c4:0a:b7:c4:00:31:81:cf:ed:12:2d:80:89:a2:
e6:d5:6b:14:5f:cb:d4:08:73:80:2d:8a:07:5f:47:6e:35:aa:
5a:38:37:05:51:d4:f1:13:80:66:bd:82:07:09:2e:58:3e:16:
e5:05:0d:b3:0b:fc:aa:98:8b:2a:0f:e7:80:a8:e7:27:ee:da:
17:66:3a:77:44:f6:73:7b:28:39:f2:a6:43:12:c1:0b:99:c6:
27:6f:d6:7e:13:28:60:89:20:7f:15:d1:bf:3d:11:17:2c:93:
f0:e9:c7:bc:3e:1a:69:d2:e2:e2:51:8d:ad:02:90:4c:bb:2d:
69:d4:a5:a9:ec:66:83:ba:64:76:58:6a:7a:d9:49:6d:16:b0:
6b:12:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:39:38 2025 by rpki-client