Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json)
Hash identifier: +pudaTRkuzxUHArH7SkV2xiQxasGMqNaNzfMN81yXoA=
Subject key identifier: 16:6C:AD:CE:0E:A2:41:BE:7A:19:E5:AA:FC:EB:A4:FA:28:2E:F5:92
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial: 0199225594B5B7F28B96D572B7495594DA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
Manifest number: AF
Signing time: Sun 07 Sep 2025 04:00:57 +0000
Manifest this update: Sun 07 Sep 2025 04:00:57 +0000
Manifest next update: Mon 08 Sep 2025 04:00:57 +0000
Files and hashes: 1: SGExsZYw7zZNQMmCejqPLZCEzR4.roa (hash: lywDbb/BT202qwVyQW4Rrl3AkbHkGjJUpz5yvpYCOaU=)
2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: cRjpjiKERSWBWIOOs6sETowbRTiFQnwR6YygBayZe48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:94:b5:b7:f2:8b:96:d5:72:b7:49:55:94:da:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
Validity
Not Before: Sep 7 04:00:57 2025 GMT
Not After : Sep 8 04:00:57 2025 GMT
Subject: CN=166cadce0ea241be7a19e5aafceba4fa282ef592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:fe:67:6b:2d:a5:be:2b:24:a6:ec:72:60:
63:19:3e:87:60:12:00:d5:ff:d1:fc:98:33:5e:31:
6a:e4:d3:97:b8:41:d7:59:f1:a5:82:7d:19:46:fe:
a2:7c:ce:c2:8b:25:4d:b5:df:66:f9:eb:41:66:0f:
c2:d0:ff:6d:1c:eb:48:b3:8a:67:35:29:90:19:a7:
29:ca:26:64:a4:4e:00:b3:d5:f8:5d:fe:af:64:1d:
06:d4:f0:54:08:1f:1e:a3:63:33:9c:9c:6a:b2:d5:
14:c8:1e:40:3f:32:b4:5a:e0:cb:08:f8:b8:a7:51:
6a:32:2d:e5:c6:49:68:4f:3e:7f:24:7b:20:57:7e:
b9:f7:33:75:e6:81:b7:21:2a:01:ae:76:99:8e:ea:
64:7a:8c:06:19:f5:3c:0c:ad:d8:48:00:ea:89:31:
2b:7f:dc:57:4c:8d:dd:67:4a:f8:46:de:4f:44:60:
a5:fb:99:fc:ec:91:f9:f6:d6:aa:68:6e:ab:07:a0:
e2:01:b1:ff:00:6f:1a:96:8d:04:99:eb:37:69:02:
2c:20:83:6b:71:69:66:5f:3f:c3:fb:91:c5:07:60:
06:bd:34:20:00:98:60:87:36:c1:b9:dc:7a:05:e2:
2d:0e:83:d8:1d:e6:cd:9e:b3:70:36:37:a9:ea:9e:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:AD:CE:0E:A2:41:BE:7A:19:E5:AA:FC:EB:A4:FA:28:2E:F5:92
X509v3 Authority Key Identifier:
keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:36:0d:1b:fb:2e:9a:ec:1e:b5:0e:00:dc:cc:ad:19:ce:
f7:fb:aa:d6:e2:65:9a:2d:8e:9a:59:d5:d2:9c:d8:a4:5d:dd:
08:c2:42:e0:5f:0c:c2:b9:b3:a3:11:4d:95:92:fd:75:11:4d:
4f:3a:79:14:71:ac:c6:77:9d:a9:8c:7f:7d:4a:11:e2:a9:f8:
59:d0:22:ba:3c:25:6b:48:d1:83:c4:e9:c7:54:7e:52:3a:9f:
b4:78:d5:4c:d9:a7:53:ee:79:d1:8f:41:c5:41:e1:99:21:18:
93:4f:ac:8c:d8:15:7a:2f:e1:fa:86:a3:b3:f3:5a:e5:b0:cd:
41:a1:f6:52:6c:a0:76:9e:69:b8:25:83:27:69:cf:57:46:5a:
65:4a:89:0d:32:99:b0:6e:8d:3a:93:55:84:52:07:54:db:eb:
d2:eb:7c:53:49:80:73:10:0f:d0:97:6b:58:6c:5e:7a:b8:34:
93:a5:64:6b:b7:85:6b:c3:d7:99:38:01:0b:0e:89:4c:55:36:
f0:03:4e:95:6a:42:16:fe:ce:18:1a:f3:e1:05:8b:69:ef:ce:
d3:63:b8:f7:db:c0:b6:b3:a2:25:d7:f0:52:eb:c6:4b:19:cd:
88:8d:d9:6a:92:e8:e5:3e:42:31:d3:ba:63:4e:2c:f5:11:28:
03:9d:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:36 2025 by rpki-client