Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier: /aAN0UvUkWpO/haWNNJ5Z1FOWaTii6lOYt7NWiVoKhk=
Subject key identifier: F3:28:A4:A6:9F:F7:04:2F:8E:EC:B1:87:70:5F:C5:28:90:9E:C9:D6
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 019922FA110F367F3EB8ECD36993B30F9B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number: 024A
Signing time: Sun 07 Sep 2025 07:00:37 +0000
Manifest this update: Sun 07 Sep 2025 07:00:37 +0000
Manifest next update: Mon 08 Sep 2025 07:00:37 +0000
Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: eB1G+v8auAmbUOBkgQdiD395qYtPvU23jGvqk+pXM1Q=)
2: uFe0wHxAH2UJDFtywnXN56bE3x8.roa (hash: 9rxLZS+5H9kGmYpmtTMn6ZZUIBXYa1LvDlimXlk6PXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:11:0f:36:7f:3e:b8:ec:d3:69:93:b3:0f:9b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Sep 7 07:00:37 2025 GMT
Not After : Sep 8 07:00:37 2025 GMT
Subject: CN=f328a4a69ff7042f8eecb187705fc528909ec9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:fc:27:08:af:5f:a3:48:65:ee:5a:de:a2:
79:db:db:a0:d5:84:f1:aa:84:d0:4c:7d:91:33:29:
3b:0c:98:78:db:f9:a5:20:5f:0e:dd:7d:f3:06:40:
cc:17:44:37:20:a3:cf:b7:af:b9:31:8a:0f:34:33:
cb:d5:27:b8:55:0d:0f:01:05:66:da:42:a9:de:b2:
87:1d:7b:a6:3c:0b:90:30:c9:8b:ee:fd:8a:34:7d:
d9:c4:ab:e7:e7:d8:32:5d:86:33:65:5d:0d:d6:8e:
e4:d3:66:61:06:7b:b4:4c:98:a7:b6:ac:6c:a0:6e:
c0:e4:c6:d7:88:74:9d:0b:a3:4c:15:1a:fc:20:8c:
40:ff:d9:ef:8d:16:65:9a:ec:da:a7:33:82:5a:62:
d1:c5:8a:80:88:9e:ca:ab:4b:9b:8c:e2:e3:cd:ea:
01:1d:70:29:04:7e:b9:82:25:46:40:2e:1e:9b:dc:
77:8e:30:19:9d:20:f2:bc:01:6a:87:db:0c:fe:af:
a1:80:58:f9:2d:6f:9f:8c:6b:41:10:dc:e3:8e:98:
32:f9:de:3c:fe:8b:e6:bc:e3:ed:13:12:98:93:8c:
f6:71:af:f5:0f:23:ae:2a:cf:b3:b5:f3:eb:6a:ff:
f3:d8:e0:67:49:18:56:81:7d:29:f5:12:cd:e0:2e:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:A4:A6:9F:F7:04:2F:8E:EC:B1:87:70:5F:C5:28:90:9E:C9:D6
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0b:eb:d5:5d:12:a8:4a:e2:9b:a1:fc:fa:6b:bc:65:63:45:
aa:12:85:c8:85:4e:b4:de:ae:f0:fb:b7:84:d8:f0:ea:e8:f7:
5d:93:1a:7b:f4:2b:e0:63:77:c0:42:19:0b:04:14:47:a0:10:
f2:43:ff:8d:ae:29:db:de:f2:1e:74:11:48:9c:c7:7c:5f:f7:
e0:67:d1:78:56:41:0c:b6:cf:8e:82:e8:17:66:ec:0d:9d:3d:
2e:b3:3a:4e:3b:04:f3:34:c4:62:37:58:e3:5d:0f:e2:78:a1:
99:94:93:d9:fe:c5:01:b1:fc:5e:7c:33:78:49:32:87:03:ec:
ce:c8:c9:b7:34:aa:7b:a7:35:fb:99:fa:c4:c8:5a:2f:31:b0:
01:72:40:ac:59:83:66:0d:45:17:43:20:3c:c6:73:f4:1b:01:
26:00:ab:6b:27:dc:27:c1:e2:88:3f:67:4d:bc:04:46:eb:72:
2d:31:a1:4f:20:0a:05:07:fd:f0:dd:d7:a8:3f:5c:1b:16:cd:
00:17:25:13:1e:1e:c5:ab:ca:e1:15:00:68:7a:a9:d0:c8:da:
37:14:82:22:a9:30:95:6f:f0:62:32:3b:51:38:50:ce:07:f4:
46:f1:5a:58:8b:92:bd:0c:08:04:d0:7c:3c:9f:9f:b2:ca:4d:
1d:27:5c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:23 2025 by rpki-client