Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier: u8toqVWn3rY/yojbAMjHawfWTk6g6eGr7yUEmI1rigc=
Subject key identifier: 7F:5D:AE:7E:33:99:C3:A3:36:AE:AC:73:FB:53:87:88:EA:5A:DA:44
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 01984A779E74CD44F2E552AD49CBB0DF386C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number: 0AF6
Signing time: Sun 27 Jul 2025 06:00:09 +0000
Manifest this update: Sun 27 Jul 2025 06:00:09 +0000
Manifest next update: Mon 28 Jul 2025 06:00:09 +0000
Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: 3bHndpsQhfjFeOgKEATjVBC8J/RDsNLvWPMs6vTIlHc=)
2: vSD8XToST3_PVTIy1XwVerhMPWI.roa (hash: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:9e:74:cd:44:f2:e5:52:ad:49:cb:b0:df:38:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Jul 27 06:00:09 2025 GMT
Not After : Jul 28 06:00:09 2025 GMT
Subject: CN=7f5dae7e3399c3a336aeac73fb538788ea5ada44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:ba:e9:f2:c7:ea:0e:3b:87:bb:f6:07:95:
78:99:68:25:79:57:72:d9:12:1a:28:a1:f8:9f:f1:
9f:dc:a3:2c:bf:42:dd:c4:1f:b1:80:8c:fa:4e:b1:
4e:89:e7:7d:af:c3:81:26:19:a0:e7:34:18:c7:71:
bd:c6:d9:a9:4e:4b:46:25:47:34:41:e3:68:ea:3d:
d2:55:d4:a9:34:19:a7:17:25:c3:31:07:c6:b0:56:
a0:81:0b:8b:1e:59:f7:e1:4d:b2:4f:6a:21:46:e0:
2b:61:90:11:cb:5f:83:ba:e1:3e:94:98:01:ed:df:
99:b8:e2:ad:3e:a4:6e:52:6b:7a:37:32:cf:66:3c:
52:d5:a9:37:e1:48:78:25:e1:84:c8:f7:f3:69:56:
b1:1c:39:1e:e4:5c:ba:51:a8:b7:79:0a:dc:0b:b1:
23:79:d8:40:f7:94:0b:6f:f3:0f:38:21:00:22:e7:
e4:39:22:90:cd:b3:bc:90:dc:c2:5e:25:0a:70:95:
00:a5:75:71:39:95:d8:6e:5a:fe:90:a9:e9:e6:de:
31:e7:da:52:6e:e4:a3:92:2a:f2:d3:eb:13:60:c3:
dd:db:7d:13:76:f3:ab:68:54:2b:d5:3f:8f:4d:f2:
f3:90:f8:00:81:0a:8b:b5:ab:56:a8:8e:a7:02:7b:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:AE:7E:33:99:C3:A3:36:AE:AC:73:FB:53:87:88:EA:5A:DA:44
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:2b:d6:d2:b1:52:b2:9c:ea:19:4a:b0:d2:19:7d:70:da:
fc:aa:da:c8:9e:40:bb:56:69:58:51:1d:79:bf:bc:41:3b:c2:
0a:0e:02:40:f3:a9:85:b4:01:28:d8:04:63:b7:b5:03:b4:de:
a5:fe:d6:97:32:90:45:22:2a:df:6c:c3:4a:c3:88:69:da:34:
91:d5:9c:26:4f:50:0b:1e:1f:83:80:36:bb:84:6f:13:01:b2:
e1:9a:43:06:ac:a6:a0:89:00:fc:3d:de:12:2f:82:74:c1:3a:
c5:4c:d9:e8:f1:ac:ae:43:0d:e0:97:4c:f8:24:b4:db:1e:b2:
b0:ac:9a:0f:5f:15:6d:98:8a:5a:b9:98:e7:f5:c0:e4:b8:03:
2c:fd:33:37:83:98:af:a9:2f:32:87:2c:16:df:40:08:bc:ef:
87:32:9a:5d:45:09:44:a7:77:81:bd:b7:9b:77:06:02:c8:40:
64:46:54:f4:c3:c3:d1:21:32:b6:36:c3:1d:52:ed:24:09:9e:
ec:45:3c:e3:e1:5f:66:eb:60:7e:cf:13:fb:1d:2d:ea:4f:c8:
58:9a:fc:0a:86:1e:c8:e9:54:54:27:6e:8f:fb:21:ca:22:b1:
79:7b:be:6f:9b:1e:53:c5:b2:1c:54:b7:54:ce:8d:58:a6:0d:
98:15:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:33:49 2025 by rpki-client