Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File: AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier: kIFlr1i4A63KkAUuAlJovyFe3jFdg1SMQOw+6/JW9gs=
Subject key identifier: ED:33:FD:13:3D:F3:77:C1:FC:69:B9:E0:D0:C3:AC:6F:E6:F7:0B:05
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 01984DE72528AD6D2F751473511006096AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number: 1509
Signing time: Sun 27 Jul 2025 22:00:50 +0000
Manifest this update: Sun 27 Jul 2025 22:00:50 +0000
Manifest next update: Mon 28 Jul 2025 22:00:50 +0000
Files and hashes: 1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: uNudAQkNAmnLAHV+EowTZE6bCH+WAMl7hSPLUt9EHVY=)
2: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (hash: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e7:25:28:ad:6d:2f:75:14:73:51:10:06:09:6a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: Jul 27 22:00:50 2025 GMT
Not After : Jul 28 22:00:50 2025 GMT
Subject: CN=ed33fd133df377c1fc69b9e0d0c3ac6fe6f70b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:a0:5f:ed:44:f3:39:f0:7a:10:e2:7d:cb:
94:cd:8f:7e:b4:a9:41:4a:85:30:51:ad:37:5c:d0:
79:ce:65:b0:1c:70:17:39:60:6a:ea:da:71:e4:28:
ad:e6:30:9b:bb:9b:76:d1:26:6e:3c:76:62:a0:80:
d9:89:ff:e7:ad:38:32:15:ed:28:8b:2d:ae:dd:cc:
fb:5a:95:66:cc:1d:8f:ec:36:b9:d2:2b:4e:22:d8:
01:ca:71:77:93:6c:3d:7f:27:42:ee:f3:19:f8:9e:
40:dd:9f:f7:15:cf:59:45:a9:e5:57:bc:e4:96:e3:
85:79:43:73:8f:f8:49:c5:49:44:db:1e:8d:03:01:
34:28:31:20:f1:a6:0a:1d:c9:8b:e0:66:4a:81:d5:
c4:90:08:cd:f6:09:73:29:ab:1d:3c:ce:d9:b4:2f:
cd:71:56:15:81:6b:b0:8b:02:31:e1:a0:13:9f:72:
08:7a:1a:31:5f:1f:0a:e7:29:a2:c2:91:04:6c:20:
99:88:d3:d3:cc:9a:55:ca:e9:fa:65:51:5c:ab:7c:
bd:e5:cb:62:22:86:49:89:49:4a:ea:82:b8:f2:ff:
ea:f4:97:ae:89:eb:6c:45:0b:9d:7d:0e:c0:c8:1e:
0e:bd:c0:5e:49:35:c9:36:57:cc:ea:28:c3:1f:c3:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:33:FD:13:3D:F3:77:C1:FC:69:B9:E0:D0:C3:AC:6F:E6:F7:0B:05
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:13:aa:8f:c0:db:47:6d:ba:b8:66:08:a0:cc:61:ac:4f:9d:
55:28:34:47:61:8d:2c:a9:cf:12:47:a9:64:8d:74:18:3c:6c:
0a:85:b5:7b:05:60:0f:b7:63:60:b5:65:15:a6:47:c1:c9:dc:
15:a0:95:32:09:47:95:6c:b8:74:9e:0b:dd:82:f2:58:31:5a:
d5:14:f4:b7:c2:cc:b8:1a:0e:e9:3d:09:19:87:7f:39:d1:25:
bd:d5:5b:a7:13:77:88:44:cf:d8:e6:b5:6e:89:7e:1b:2b:44:
20:df:1c:af:d2:02:ee:f5:89:7d:72:b4:35:2b:9e:bf:e7:a5:
07:bd:ad:8d:ca:b5:cb:e0:f7:59:17:be:91:a0:82:d9:03:6c:
0c:c1:97:3b:60:d3:47:cb:f7:09:a5:45:65:a6:9c:89:94:19:
e3:bd:55:fb:f6:ad:e5:96:ad:aa:36:93:86:dd:47:03:5b:24:
98:07:38:cd:cf:4f:2c:05:eb:62:05:0d:fa:cd:3c:58:ba:3f:
f4:b5:70:f7:53:ad:06:86:b2:72:c0:8c:0e:7e:78:8a:08:8d:
82:03:a2:11:d4:e4:ac:8c:64:ff:6c:35:21:2c:f5:7d:18:3e:
bc:d5:fd:49:90:ea:2b:eb:6c:ca:c8:0a:d6:ba:9b:28:46:53:
f2:a8:9d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:33:45 2025 by rpki-client