Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: Ty+5KyguuW7wX2IC4MGo/8flQJARq/zgOCou0GjaWIg=
Subject key identifier: D1:CE:29:D8:CE:0C:87:18:67:B9:90:3A:C6:42:6E:61:47:BC:CE:C6
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 0199228CBE5AC304E20EF9B96E53C9ADE0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 05:01:13 +0000
Manifest this update: Sun 07 Sep 2025 05:01:13 +0000
Manifest next update: Mon 08 Sep 2025 05:01:13 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: jFOp+WKSun+Zf9AFL8KTQ2Ymbgf1y33kpSdumHuEhKc=)
2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:be:5a:c3:04:e2:0e:f9:b9:6e:53:c9:ad:e0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Sep 7 05:01:13 2025 GMT
Not After : Sep 8 05:01:13 2025 GMT
Subject: CN=d1ce29d8ce0c871867b9903ac6426e6147bccec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:8e:7a:3a:1f:59:d0:1d:d8:87:89:05:62:
39:0e:80:bf:6a:c5:13:e6:e5:1f:df:48:93:77:43:
3c:3e:c5:9a:24:85:b2:71:89:0d:43:4e:25:d3:ac:
7a:83:5d:6b:9a:a0:87:b4:cc:8e:18:02:8b:06:4f:
97:6f:50:7d:c1:14:88:4f:60:f3:6f:7c:25:8b:45:
b0:6d:ad:4c:03:54:0e:58:e8:f0:68:19:bc:8f:b4:
68:47:d2:92:dd:0d:a8:64:76:a5:9c:88:ab:52:6b:
e1:99:75:28:7f:30:28:90:d1:c7:43:00:a7:1e:c1:
d9:52:26:bf:9e:68:ac:8c:be:a1:0d:b3:95:d5:2c:
5e:cb:12:30:19:13:ad:f5:db:c0:f4:ec:4b:2b:19:
ad:00:69:3a:df:7f:46:4d:95:8f:24:e4:a1:cd:b7:
bd:ce:fa:33:9b:1b:db:19:10:f8:5c:7c:c5:06:09:
7e:f9:e3:fd:85:df:56:fa:f5:35:f1:20:33:e4:ff:
93:bf:8b:e0:e7:6d:09:4f:80:77:72:24:d3:fe:60:
d0:1b:e9:8e:ef:71:2c:bd:b4:37:e1:79:63:9f:b3:
a7:33:4a:fb:ff:32:f6:7a:24:2c:47:d4:4e:eb:16:
fe:d2:75:f9:1c:56:74:2f:6d:5e:63:3c:8e:47:cf:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CE:29:D8:CE:0C:87:18:67:B9:90:3A:C6:42:6E:61:47:BC:CE:C6
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a7:c0:3d:5a:f8:5a:d0:16:a2:51:bb:0f:36:55:13:31:2c:
7e:33:81:25:69:96:b3:aa:c5:e0:5d:70:08:b4:42:44:65:97:
90:ca:7f:be:9a:31:36:49:02:9e:46:89:f9:bf:bf:b1:30:ca:
db:ec:e2:83:6e:8a:78:16:72:a5:bb:de:44:70:0b:06:0c:14:
24:69:de:a1:52:e7:1c:d0:1b:26:9c:c5:91:7c:d1:07:d8:2f:
11:81:24:ef:2a:5b:29:ed:72:6a:bc:0e:a9:9c:fa:25:04:db:
9b:88:1c:97:6f:e0:eb:95:78:be:06:69:6d:49:ce:f9:bb:ff:
d0:56:53:b7:0b:59:a4:da:c0:79:02:85:27:58:cd:c9:fd:87:
10:fc:da:ba:d5:81:38:fd:ad:2a:88:3f:8f:84:b8:56:91:19:
4c:cd:19:70:39:6b:cb:48:f9:74:61:05:0e:d5:58:8f:02:ac:
d7:97:ea:37:fc:ef:48:ed:e0:0c:69:b2:aa:1e:2a:67:f7:0d:
60:03:b5:c0:7f:81:dd:1b:90:0b:77:ff:e8:ec:82:da:ea:33:
a9:e7:49:b7:e5:ce:b4:c8:a2:fa:43:4f:e3:be:39:aa:ed:e2:
ad:b6:e0:ba:b0:86:39:7a:66:f4:32:5a:22:a2:ac:54:b7:6f:
ec:a5:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:47 2025 by rpki-client