Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File: awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier: aShnXJTzNv9yXS6OWj9my7shCRveJk0sZMshSJBdYhE=
Subject key identifier: 4E:83:69:D5:9F:E8:63:1B:94:FC:8E:19:1A:9E:FF:B4:7E:40:2D:6B
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer: /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial: 01984778189C501C5A9C194AF88D489FD683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:01:49 +0000
Manifest this update: Sat 26 Jul 2025 16:01:49 +0000
Manifest next update: Sun 27 Jul 2025 16:01:49 +0000
Files and hashes: 1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: IZ3CJpD9V2DCc6I1+r5p7jFVwKjguotryjxDJc97nsI=)
2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:18:9c:50:1c:5a:9c:19:4a:f8:8d:48:9f:d6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
Validity
Not Before: Jul 26 16:01:49 2025 GMT
Not After : Jul 27 16:01:49 2025 GMT
Subject: CN=4e8369d59fe8631b94fc8e191a9effb47e402d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:f6:b4:5c:bc:bd:33:e4:39:b0:b7:1f:c3:
de:c9:1b:0c:cd:6a:0c:85:e0:a2:b0:34:6f:1b:00:
73:95:a2:a1:3f:a6:8f:02:d5:8b:17:77:2c:e0:72:
dd:bb:f6:cf:a5:d0:b7:d7:2b:18:2d:5d:56:5e:f9:
4f:14:81:c1:61:2e:28:8f:b7:01:05:11:3c:5d:7c:
2f:21:57:aa:b8:24:8a:4b:c0:f2:dd:0a:51:a4:78:
3a:f9:cc:f7:e6:d2:78:b7:06:b4:2e:b5:47:e2:fc:
01:69:8e:fb:2b:aa:5b:82:95:31:54:96:e3:83:a9:
55:9c:3e:87:84:0b:e3:fe:17:83:52:16:0e:7a:e9:
07:76:0c:f6:20:2a:aa:b0:3c:b9:dc:09:1a:11:28:
f1:ba:03:0b:d0:ad:61:ff:34:6b:ca:35:69:40:2c:
39:95:ed:eb:a0:e3:60:2e:83:99:10:b8:78:8e:59:
a6:3c:9e:0c:bb:ae:96:b5:0a:ed:f7:46:74:d2:4c:
53:ce:db:34:79:32:90:08:69:cf:d2:fd:2f:a4:52:
1e:01:4a:02:00:ea:bf:e3:10:ef:c3:db:48:a7:63:
d5:b5:d1:2b:6b:9d:6b:c6:02:6a:19:98:78:ac:94:
5f:b5:23:46:99:1a:9d:92:ff:f8:bf:d0:1c:13:d6:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:83:69:D5:9F:E8:63:1B:94:FC:8E:19:1A:9E:FF:B4:7E:40:2D:6B
X509v3 Authority Key Identifier:
keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cf:1b:c9:bc:18:07:c1:4d:8d:4b:d4:19:e4:83:a5:de:56:
7e:4b:fd:5d:23:17:ed:42:4e:bc:34:c8:39:37:08:b6:88:fa:
df:4d:44:7d:1e:95:ae:89:e2:fb:ed:03:3f:22:ff:23:dd:87:
35:bd:48:54:e5:4a:f9:e9:d1:52:4a:a1:fe:95:3e:6d:9d:50:
49:82:eb:94:e4:4d:e6:41:4d:cd:d7:36:c9:22:82:1e:d3:de:
b5:95:12:be:54:2a:4e:aa:2b:bd:81:47:68:6b:ea:aa:a7:ec:
2d:f4:ce:40:47:b9:7d:6a:c6:25:26:01:2e:25:a4:94:57:e6:
9b:a7:e9:86:9f:bc:ca:4f:4b:ac:b0:11:f1:7c:89:6e:a4:a7:
df:48:69:a8:01:63:a9:e7:4e:19:e4:1c:fe:f4:ae:77:fb:6e:
90:44:73:ab:8c:3c:6b:b6:91:c5:be:14:45:17:38:0c:be:3b:
71:a5:c9:6f:1d:d7:10:4f:28:17:b5:2d:6d:4f:49:4b:cc:83:
dd:de:99:16:1d:29:6e:45:11:6a:fe:c5:9e:df:51:62:a2:b8:
60:f6:a8:6d:28:26:50:f3:a6:03:29:89:27:88:be:d5:b0:26:
d3:75:58:2a:fc:07:df:f2:58:c8:9a:ff:1a:4d:b2:cc:0b:ba:
d0:9f:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:39 2025 by rpki-client