Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: oKX43pxzT999mZAcjgwa2nRP4yBXaAuHSZAc8WY/z4c=
Subject key identifier: D5:79:38:25:23:4A:03:8D:BB:69:C5:3C:50:03:61:71:3D:60:5B:CF
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 0199228C561B66A5EAF433F2EE08DF8C239E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 10FB
Signing time: Sun 07 Sep 2025 05:00:46 +0000
Manifest this update: Sun 07 Sep 2025 05:00:46 +0000
Manifest next update: Mon 08 Sep 2025 05:00:46 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: 23WsoN+yUL7SUcFQvcvxOULakqo7vBmU8eZvMTZz1ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:56:1b:66:a5:ea:f4:33:f2:ee:08:df:8c:23:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Sep 7 05:00:46 2025 GMT
Not After : Sep 8 05:00:46 2025 GMT
Subject: CN=d5793825234a038dbb69c53c500361713d605bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:00:bb:a5:49:7a:cf:af:ea:30:3a:91:a3:09:
87:9c:63:a1:d0:fa:9d:31:82:92:73:a7:a7:51:f8:
f5:05:0a:f2:66:f0:b3:2e:25:a3:6b:5b:a3:45:a5:
51:74:f3:7a:cb:f7:8b:47:92:99:f4:9e:a1:4c:a7:
27:dc:38:79:03:65:2b:ab:fc:b1:c6:53:45:57:11:
34:94:8a:d1:43:dd:77:49:7e:c0:6f:a6:9b:68:5b:
ef:5b:c9:5a:91:98:ea:80:cd:a5:0a:0e:88:7f:9b:
ba:f9:cd:89:44:94:f8:19:7f:69:5c:28:ef:f3:4b:
e4:9e:fc:20:2a:de:a4:ef:c4:bf:f3:28:1e:d3:8d:
c7:15:f7:76:db:dc:31:42:a1:1e:83:91:e3:c4:fd:
b9:0c:3c:0e:f6:d4:34:99:dc:c7:ed:2a:f4:92:52:
02:f2:2e:d3:44:c5:bc:0e:ae:4f:88:7d:a6:07:4c:
17:b8:86:eb:1a:66:6f:e2:85:7d:f2:8f:c1:ee:ab:
74:f1:4c:c5:bb:ef:da:16:09:a3:e4:1c:36:ab:d5:
e8:c2:f0:aa:6c:d9:f2:9f:c4:47:61:0e:d3:fe:06:
e0:3c:25:9b:57:c5:e4:5b:26:e5:4a:15:db:8f:55:
e1:cf:9f:fb:40:86:2d:72:ae:13:9b:60:33:f9:92:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:38:25:23:4A:03:8D:BB:69:C5:3C:50:03:61:71:3D:60:5B:CF
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1b:c4:6c:35:a5:f0:ee:e7:71:ca:1c:5a:51:ed:c0:b6:b7:
09:3d:e7:77:d8:cf:7e:31:98:e3:d0:89:9a:30:33:6b:d1:48:
65:5b:95:ec:07:51:b2:25:bc:de:d0:89:fc:aa:b9:72:86:b0:
0b:7c:69:23:8f:49:ae:92:d5:28:97:8b:cf:27:17:8d:17:d0:
15:61:12:13:ba:97:e0:63:54:ea:19:f7:db:0b:d7:0b:91:f7:
7f:d6:f2:0e:39:21:33:87:bb:8d:3e:a8:d2:e0:1a:df:66:88:
4a:5b:7a:78:cf:8c:c1:33:f0:a7:49:2b:03:03:dd:73:fb:34:
0f:1f:02:73:c8:af:3c:16:a4:ff:69:77:01:8e:f1:06:a9:4f:
8d:85:6c:2b:3c:be:e3:e8:7c:a2:59:df:55:e2:4c:1c:3a:f1:
b8:dd:c0:73:bb:bb:55:1f:bd:32:64:34:62:4a:59:fb:61:87:
c5:79:3f:9e:d9:60:6f:07:fd:8d:a3:89:84:a9:51:69:35:b1:
8e:c6:30:e8:c4:6d:c7:9b:fa:20:89:9f:72:f6:4c:28:e5:a8:
5b:7b:e9:59:73:fa:a5:a1:33:ef:f0:3b:52:b2:af:be:d5:64:
d8:44:19:48:21:c8:ba:48:76:e9:9c:8a:63:2e:77:63:89:c9:
87:fa:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:30 2025 by rpki-client