Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: YCJqFv8HuIkpfM/L3fJP5nqjJ4NI3voT2gsTnZEbOro=
Subject key identifier: 7E:28:EC:CA:75:3E:52:CC:46:14:8F:3E:0D:E6:1F:01:30:6A:57:B3
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 019845898C8F3E97673A5F444FCD03B3352A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 113D
Signing time: Sat 26 Jul 2025 07:01:38 +0000
Manifest this update: Sat 26 Jul 2025 07:01:38 +0000
Manifest next update: Sun 27 Jul 2025 07:01:38 +0000
Files and hashes: 1: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: bouC7qGrMcpePfB3ucMRBY5ukjKLISimqMmXSBjYFuE=)
2: lx4r-_of66D7nj4_JxEX4B7iGSo.roa (hash: nBmUpTvMg37xBiu7Iw7rIz0CmSBaScYekCzZq9oCvAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:8c:8f:3e:97:67:3a:5f:44:4f:cd:03:b3:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Jul 26 07:01:38 2025 GMT
Not After : Jul 27 07:01:38 2025 GMT
Subject: CN=7e28ecca753e52cc46148f3e0de61f01306a57b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:5a:4c:43:0c:ca:39:50:cc:2f:29:7f:48:
55:89:6e:e8:67:53:8e:e4:da:0e:29:f6:6f:5a:08:
53:bb:72:e9:cb:df:f8:5d:ad:7e:2b:af:12:a9:f8:
38:52:7c:70:bf:f3:20:d3:44:b1:3e:f8:74:39:7d:
9a:43:15:32:99:53:ce:24:4a:1f:b5:fe:57:9d:be:
d7:1a:4f:2f:99:82:dd:6a:55:d9:00:f8:2a:6a:e3:
ea:ab:01:50:c7:b0:15:37:a6:f1:95:d0:55:97:da:
54:74:43:68:16:47:5d:c2:33:f0:a2:14:65:dd:0c:
4a:93:b8:03:02:b3:32:f8:b4:52:34:38:7d:e8:82:
b1:6d:ad:2a:54:3b:e8:96:71:44:8e:56:e3:67:dd:
ca:07:b6:7b:56:0f:b1:9a:b4:6c:8a:32:26:05:bc:
c2:cb:35:59:84:69:59:be:06:e4:64:4e:e9:40:ec:
b4:cd:6d:ea:8d:6b:69:f4:64:9b:08:0c:cb:a5:4a:
3f:dc:b8:55:dc:ac:27:8f:64:da:c0:09:f5:2a:bc:
f4:68:98:43:ed:c0:8e:a4:ff:74:4c:e0:ff:65:0a:
43:0a:a1:cc:79:98:a6:ec:e2:e3:b2:b9:77:a1:f2:
16:d8:80:5a:65:99:0c:85:e1:3f:96:29:95:06:85:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:EC:CA:75:3E:52:CC:46:14:8F:3E:0D:E6:1F:01:30:6A:57:B3
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e9:b6:a1:e7:bb:53:fe:78:94:95:04:43:97:f2:d8:a1:a7:
43:d5:67:15:6c:75:de:e2:e1:52:c1:a6:af:27:42:67:71:20:
82:64:b2:d7:9b:3a:f8:8b:1a:1e:de:3d:ff:c1:50:45:47:39:
be:83:17:b1:9e:77:42:1c:c1:53:4d:e6:ef:e2:f1:18:e1:e3:
75:4d:35:32:73:f1:cc:13:28:64:10:5f:ce:70:80:4d:7d:fc:
62:35:98:a4:bd:e7:25:8f:d8:cb:bc:3e:f7:78:60:bc:0f:1c:
ca:e6:28:dc:d5:ed:30:be:fb:fa:7f:ac:1a:19:e2:4e:37:c4:
84:b7:87:fe:24:ca:34:1f:5a:dc:a4:78:08:39:3c:a9:b3:db:
b7:56:e6:a6:ae:6a:23:98:37:51:d5:30:ba:d8:f2:eb:5d:55:
d8:d7:d0:0a:7d:b2:aa:d0:11:ae:47:f0:84:c4:cb:e7:23:fe:
e1:12:12:78:12:66:10:6b:5f:c9:77:59:d5:88:e4:ff:ab:69:
59:23:8c:e7:bb:0b:01:ec:ea:80:ca:a4:f6:55:72:d4:c2:df:
ef:21:38:eb:cb:0c:8f:17:16:c1:25:c6:6b:21:d0:3f:df:74:
9c:3d:7e:b4:0b:7b:97:8e:d3:78:44:3a:63:15:6a:f8:d6:35:
5f:e9:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:57:50 2025 by rpki-client