Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: eGugL6tKeosqflm6KwI3Jw8lKhA6H6efTONvT2qduMg=
Subject key identifier: 28:6D:AA:1E:89:76:6E:FB:9A:37:5B:B7:FA:23:58:10:07:91:C7:E6
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 01992255D32DCD8AF350B85844CD91AF9256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 146D
Signing time: Sun 07 Sep 2025 04:01:13 +0000
Manifest this update: Sun 07 Sep 2025 04:01:13 +0000
Manifest next update: Mon 08 Sep 2025 04:01:13 +0000
Files and hashes: 1: aYzSzZFLqdVEPKpQk5EWoehSNEw.roa (hash: AM/5zmNZPmTunUEdZ9JbOQ5FfrgajVTJL4TG99J5meg=)
2: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: azGXergyhroLnr0RpxiM2mD+FW/j4/P8uga4bYAA0CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:d3:2d:cd:8a:f3:50:b8:58:44:cd:91:af:92:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Sep 7 04:01:13 2025 GMT
Not After : Sep 8 04:01:13 2025 GMT
Subject: CN=286daa1e89766efb9a375bb7fa2358100791c7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:f2:7b:ee:b7:e5:13:75:7f:33:9a:d4:d3:
4e:e7:19:85:75:10:33:ff:b3:e8:68:78:8a:61:6e:
ef:70:21:5f:1c:a0:f3:3d:a6:0f:c5:b3:17:36:94:
01:4d:fc:63:dd:81:dd:9d:e8:a4:9b:36:dd:95:4e:
7e:ba:a6:96:07:36:74:ee:d4:cb:c3:ec:bd:c2:d2:
8e:f2:1f:da:a4:0d:34:fc:10:aa:5d:8e:b9:99:5f:
f5:06:e6:b7:b3:85:c5:80:b6:40:19:99:4d:64:8a:
41:f5:03:2b:4f:d0:72:bb:39:fe:94:cd:fb:11:c6:
ff:eb:2e:41:fa:9c:ac:b7:a2:64:cb:d4:12:08:d9:
47:d6:2d:58:b5:9f:cc:54:57:9d:56:cf:35:98:31:
52:8d:17:6b:a8:57:12:83:77:78:61:4d:b5:95:7e:
f7:eb:e6:ec:87:3a:c4:2e:e5:0d:95:11:12:b5:cc:
47:e5:9a:81:85:12:90:8d:fa:16:73:78:dc:b9:da:
65:05:bd:f8:31:fe:ba:ea:0b:05:05:ba:2d:16:a3:
14:b1:2c:84:01:94:1a:3f:5a:78:b2:97:aa:f4:ce:
91:0b:77:32:3b:1b:15:af:56:93:b6:60:87:99:61:
b3:b8:82:c1:03:c9:0d:f5:b0:a6:51:98:06:75:a9:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:AA:1E:89:76:6E:FB:9A:37:5B:B7:FA:23:58:10:07:91:C7:E6
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:44:36:2b:b5:38:fe:78:e0:7b:34:d7:1f:e1:29:65:f9:dd:
60:5f:f4:c4:95:68:db:90:d7:80:40:81:67:35:8b:2b:d6:1f:
b2:9e:41:f9:8f:3d:9c:6b:6b:20:7e:28:49:a0:49:db:36:7e:
92:93:33:a0:2b:3b:5b:9d:a4:0f:92:d9:d1:b2:fb:ef:72:fb:
83:5a:77:de:e0:7c:09:e5:0b:49:0a:46:18:ac:37:03:a0:7c:
23:b4:81:35:82:c8:c2:91:d9:67:4d:e9:a1:28:1c:1e:1b:76:
56:4b:f9:4f:b3:ac:1c:3f:53:94:ef:1c:77:5c:55:ec:e3:66:
bd:fe:0e:c0:70:52:13:d4:d7:70:bd:86:57:cf:3c:ac:62:be:
26:04:31:4e:9f:b9:f3:d7:6a:df:09:d8:e6:77:9c:bf:7e:a1:
68:e6:24:5e:c6:9e:18:30:68:5b:0c:12:be:a1:21:5a:1b:29:
dc:27:95:25:10:e2:da:8e:8c:4d:cf:16:60:cf:1c:8f:3e:b3:
8c:8e:9e:5e:67:bb:a6:4b:86:5a:cd:37:49:2e:c0:ed:63:b4:
1e:7e:e9:37:5a:3a:7f:45:9c:9f:a0:e1:ae:ed:70:a7:4a:83:
bd:27:37:e5:60:68:09:69:ae:cf:2a:21:e6:a9:89:b7:ed:84:
9d:9c:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:37 2025 by rpki-client