Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: MV2+OLRJzkpyZlN7EF8dbfpcrrQ1nortwaTd/4Ykwxg=
Subject key identifier: 72:7D:E4:04:9F:CA:F7:D9:97:E5:9F:E4:78:0C:77:7F:16:F6:3D:3D
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 01984AAF0276C7CC1A60C06C4247AA938ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: VNzG3ccHyaf-Ofv5con_nysGgHU.roa (hash: 2VzIYqdKT2jmdmX+vgJ//7c0c5nGJoT0dOFUmm0WlfQ=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: aDCglvZOGFgilQe5nhXmz0ue+pTQgf1K3pi9ZsNVo5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:02:76:c7:cc:1a:60:c0:6c:42:47:aa:93:8e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=727de4049fcaf7d997e59fe4780c777f16f63d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:33:dc:a0:9a:fd:bf:86:09:7f:8d:72:1f:
e6:c0:d3:dd:d8:3e:7f:8c:77:16:da:55:97:02:0a:
fe:68:0b:4b:d3:17:ab:fa:13:0d:e8:e6:41:c6:bb:
ca:89:6d:c0:90:64:26:b8:e3:aa:fd:65:6b:71:6b:
4f:d5:be:69:a9:39:53:f8:27:6b:81:00:c6:5a:0d:
01:c8:ea:88:de:3f:1a:c1:e4:22:6f:4e:5c:15:9d:
d1:1f:fc:54:64:08:6d:55:bc:7a:d3:c5:00:8e:9c:
f1:bf:52:c1:50:c1:a4:69:6b:54:24:9c:11:80:96:
d0:e8:55:de:8f:c9:dd:43:d9:a5:26:7a:dd:3a:97:
58:c8:a9:59:92:53:4f:89:5a:da:de:20:71:b7:7e:
ff:f7:b4:3d:5c:7f:eb:77:e4:b9:95:e1:cc:8a:2f:
ae:cb:1a:67:cf:ac:39:07:be:53:ab:9c:57:41:c4:
a4:3b:d4:3a:a1:cd:2b:77:88:5a:46:a5:ef:78:c3:
af:49:57:55:85:c0:de:e2:97:b7:af:1f:d7:de:59:
77:df:3f:c8:7b:63:37:d8:48:7b:58:0c:48:46:14:
46:69:ec:08:37:b7:8a:91:a0:c5:c1:b8:2b:bf:32:
c1:f2:f9:11:82:4c:b3:68:ad:9f:73:62:d5:b3:4c:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7D:E4:04:9F:CA:F7:D9:97:E5:9F:E4:78:0C:77:7F:16:F6:3D:3D
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:85:49:72:e8:ff:82:75:50:41:00:ad:06:8b:0d:23:85:7c:
b8:17:fd:ab:8a:43:0d:4c:7b:22:66:a4:7f:0a:26:55:a8:91:
e8:5d:cb:9c:1c:a3:80:f3:58:3d:87:59:32:a6:39:05:9b:ea:
a1:5d:ae:5c:7a:a1:da:24:d6:65:b8:0b:ed:b7:fa:d4:94:fb:
54:f7:ac:f1:ea:b9:df:2a:9a:99:b0:ff:53:d8:77:e9:d4:17:
eb:d9:cc:db:05:dd:22:aa:c5:42:37:9c:ef:43:80:3b:a7:59:
61:c2:53:41:f9:eb:10:43:2d:e3:f6:2b:13:89:81:27:a2:41:
e9:70:81:29:45:5f:0b:9e:99:13:7d:89:5d:27:29:73:ea:59:
69:87:e4:96:95:68:8e:03:45:08:a9:73:0f:13:78:f3:9b:ae:
3b:da:f4:98:f5:41:84:96:30:8c:ae:37:7e:14:ec:3d:a7:c6:
5e:f1:ee:f5:7f:3b:d3:a0:ae:14:4d:cc:70:84:d0:c2:b3:00:
db:db:78:96:a2:d8:36:0e:55:11:a9:ae:40:27:dd:56:c9:dc:
b7:e5:c6:44:79:e4:3f:d8:b2:23:0c:bc:17:0c:76:18:63:03:
78:62:95:e2:88:ad:de:90:7c:cb:ea:a3:d4:ad:9a:24:0b:2b:
69:52:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:17 2025 by rpki-client