Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: vMj7BrDMMhuMr0sjTj5X6qUdyHvOfZkH4WO15VDOhi8=
Subject key identifier: 34:49:3A:E0:82:47:FA:5C:5E:37:23:5B:1B:00:5B:5D:F3:9A:AD:A1
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019926D709F549A2406B31C5A74FE0A12005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 12E7
Signing time: Mon 08 Sep 2025 01:00:50 +0000
Manifest this update: Mon 08 Sep 2025 01:00:50 +0000
Manifest next update: Tue 09 Sep 2025 01:00:50 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: KCebB+fI6nkTZM0r2Mp3LkvKJkIgtJuqYfJnVLCo52g=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d7:09:f5:49:a2:40:6b:31:c5:a7:4f:e0:a1:20:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Sep 8 01:00:50 2025 GMT
Not After : Sep 9 01:00:50 2025 GMT
Subject: CN=34493ae08247fa5c5e37235b1b005b5df39aada1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:70:5e:ed:6c:78:07:fb:b8:e1:37:98:58:
75:1d:9e:08:7d:89:ed:bc:2b:8f:f0:4b:90:fe:07:
b4:43:8f:dd:e6:f7:12:b3:e8:c1:8b:4c:59:d0:e8:
0d:26:8a:cd:39:a8:89:3f:05:4b:90:dc:10:aa:e0:
e3:33:69:66:01:13:b8:f8:15:69:89:29:9a:37:e1:
96:01:49:ad:38:24:61:92:25:60:40:1a:98:4a:4e:
88:5f:2a:05:bb:71:1d:19:3c:6d:4e:fc:20:d0:61:
26:4e:1c:9f:61:7e:7f:05:90:da:1e:a8:78:5a:4d:
03:4b:51:32:98:fc:2d:62:d5:6d:0e:27:00:01:6d:
a0:06:3c:0a:78:a3:5e:02:aa:f6:5f:fe:0b:7c:4c:
e1:dc:c1:72:09:5e:73:dc:7d:12:05:5c:38:90:98:
c4:5c:7f:6e:e5:6a:49:6c:c8:68:05:d9:ee:d4:ae:
32:1d:51:e2:19:2a:42:36:fe:53:77:a0:c6:4f:eb:
8e:44:e7:30:16:e0:3e:2c:54:b7:f0:3b:08:b6:f7:
4c:98:f0:6f:bc:87:22:0c:53:95:d6:25:18:e8:96:
32:e0:bb:2e:eb:c6:dc:30:4b:10:a1:5d:5a:79:4f:
c3:4f:d4:81:9f:87:2a:77:ad:2b:87:10:a6:c9:23:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:3A:E0:82:47:FA:5C:5E:37:23:5B:1B:00:5B:5D:F3:9A:AD:A1
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:be:de:48:3e:b7:0b:f5:71:a8:c3:10:e6:e1:b1:8a:2c:17:
bf:8f:90:07:cb:25:e2:c7:b8:ad:8d:8e:7e:a4:99:07:0b:2d:
95:47:70:80:ee:06:3a:2b:d0:1a:9d:90:8d:07:1c:a2:1b:a4:
37:db:c9:90:11:0f:0c:40:20:9d:4b:f7:14:5a:ee:f7:8b:eb:
a9:fe:ac:cd:b6:f5:5a:98:69:7b:61:68:3f:8c:e6:08:ec:cb:
00:10:4c:45:07:b0:41:9a:46:1f:4e:82:99:49:af:2b:7c:a4:
26:b5:27:1f:3f:32:03:f6:ca:ef:da:b2:07:0a:76:d3:6b:75:
4c:b1:6b:57:ac:b6:ba:18:2a:c6:6e:90:78:17:45:ba:ba:cc:
4c:61:eb:6a:f4:5e:34:5c:c6:8f:5d:d3:93:3e:1c:b1:8c:ab:
da:37:5f:33:ae:d9:a0:d3:bf:84:61:ac:d4:fd:31:61:0a:90:
8f:d5:51:a5:34:66:04:60:34:6b:27:89:8b:4b:a6:40:76:32:
fa:ca:8d:dd:1b:62:bd:2b:21:6d:0c:62:4a:2a:3a:9f:15:f4:
91:0c:09:b2:c8:92:9f:77:6c:22:46:f3:46:82:52:3b:c0:94:
0c:e1:d4:ce:fa:b9:de:93:df:b2:2d:f7:e0:b8:a2:d9:03:d5:
26:f9:eb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:22 2025 by rpki-client