Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: 1yp2GjZEZpnK219GDPk0yGg2PmU84skiRHCZqrk02CA=
Subject key identifier: 99:F8:E6:87:F2:77:31:B5:30:54:9E:5C:2F:72:12:12:6F:C4:89:13
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 019921E7E668318E220E52E5B25EF1FB504A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 11B0
Signing time: Sun 07 Sep 2025 02:01:09 +0000
Manifest this update: Sun 07 Sep 2025 02:01:09 +0000
Manifest next update: Mon 08 Sep 2025 02:01:09 +0000
Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=)
2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: Dyek8QATqv2E2bFKSV5NHCqAGOp7HqzghI7PmSvFNZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e6:68:31:8e:22:0e:52:e5:b2:5e:f1:fb:50:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Sep 7 02:01:09 2025 GMT
Not After : Sep 8 02:01:09 2025 GMT
Subject: CN=99f8e687f27731b530549e5c2f7212126fc48913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:87:d7:e6:88:14:0a:d2:cf:b1:8d:a2:de:
1b:ed:35:ee:4a:53:65:7d:75:3e:30:38:0d:d6:93:
b4:30:62:2d:6d:72:ad:60:21:6c:ec:12:96:7b:d5:
56:38:22:b6:7a:ff:f9:33:b4:b6:05:7d:9b:24:f0:
32:54:f3:7d:f1:88:6c:4f:9b:36:55:fb:c9:49:ae:
73:3a:66:1d:2b:d8:31:9a:e2:5f:45:f4:08:4a:cd:
5f:40:71:89:d8:53:d8:2a:95:9f:ea:46:bd:4d:a9:
4d:6e:3f:a4:92:bd:63:55:a0:22:21:f5:f7:84:f9:
8c:a5:21:01:93:2f:ab:92:7f:18:aa:30:38:0e:2b:
72:21:cd:77:38:cb:e6:9d:4f:28:eb:cd:0c:1c:3e:
ff:c4:cb:fc:57:77:66:0b:a4:ae:5b:ee:7c:ff:cb:
92:37:00:1e:45:c0:ab:e3:e5:49:71:59:f8:38:ca:
1a:7e:2f:35:0f:f5:a4:20:01:06:f8:dc:e7:3e:c2:
b0:56:fd:eb:c7:17:54:4d:11:54:ff:88:df:98:61:
d0:4b:88:f3:bb:55:dc:b8:37:72:bd:47:e0:2d:7d:
16:2f:b0:53:ff:95:53:b4:db:ff:0b:08:d6:a2:e1:
1d:4c:b6:77:27:d5:b8:20:d0:20:69:da:a5:20:6a:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F8:E6:87:F2:77:31:B5:30:54:9E:5C:2F:72:12:12:6F:C4:89:13
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ed:28:d4:6c:73:8a:63:a5:e1:9a:a2:20:10:d4:95:be:3d:
4f:14:86:bd:b3:a7:52:dd:cd:4c:93:1b:b5:9f:93:c0:41:42:
2e:83:12:41:5d:11:c1:7d:21:7e:40:79:2e:ac:85:71:3b:7d:
e9:7a:6f:b0:02:55:2b:17:6d:f2:26:da:29:74:3c:c2:37:a6:
1d:5f:6f:17:c3:ef:eb:b1:13:97:0b:d2:73:56:30:fa:f6:1a:
ab:1e:96:e0:5d:e9:0e:19:28:9b:f5:7c:82:f2:be:46:1a:02:
64:57:25:68:65:44:15:9e:1c:f1:ba:10:22:f8:e1:5d:94:e5:
a7:dc:68:ce:30:aa:2d:2d:fe:3a:c8:ff:29:5b:b9:d2:53:e1:
91:b7:fc:ab:f0:87:d8:01:ed:d4:eb:17:17:04:38:bf:0c:9f:
83:27:0c:19:e5:bb:8b:35:9b:fc:14:9c:4e:81:09:3a:36:c6:
36:d8:f2:33:05:d0:73:ce:4c:a8:3e:fa:2b:d4:02:23:59:89:
0c:20:21:18:10:c3:29:c8:9f:0c:a6:f5:7e:0c:ba:95:89:a5:
88:fb:5f:5b:3f:aa:1c:7e:d6:64:81:02:ee:ba:77:38:49:96:
ee:74:90:2b:a2:ef:e4:8b:d6:31:45:73:cd:8d:c2:18:ec:77:
14:18:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:12 2025 by rpki-client