Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: TYCqb8YoyI2gFZyHUTHfzGKTcVeAH/wq9QDKU273Vwk=
Subject key identifier: 80:48:AC:BD:50:D3:CA:65:2A:20:30:FA:D0:E9:3D:35:86:F2:46:39
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 0199228CE0C586099255ABA5CA3DA8CF00D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:01:21 +0000
Manifest this update: Sun 07 Sep 2025 05:01:21 +0000
Manifest next update: Mon 08 Sep 2025 05:01:21 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: yav/xo0bgZ39DWApStIXjomy9AStIIHvge9YwNHcPyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e0:c5:86:09:92:55:ab:a5:ca:3d:a8:cf:00:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Sep 7 05:01:21 2025 GMT
Not After : Sep 8 05:01:21 2025 GMT
Subject: CN=8048acbd50d3ca652a2030fad0e93d3586f24639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:cf:21:04:ab:ad:b0:f3:31:ad:fa:3c:a2:
fd:b6:f9:ff:c2:55:11:d1:13:9f:00:4f:1d:fc:54:
01:1f:1b:18:32:4c:9c:78:25:c1:e5:b8:8e:3c:0a:
36:c4:fd:13:39:98:8e:e0:c3:76:86:4b:63:c7:bd:
7b:d8:95:25:fc:8d:90:80:0b:16:f4:15:4b:f3:1f:
37:d3:98:1a:84:63:23:89:dd:5d:25:37:cc:83:83:
d7:bf:19:c0:68:e5:fa:5e:e9:83:55:e1:46:5b:f0:
8b:21:c1:df:f8:a6:25:b9:7c:f8:18:ac:01:52:c9:
af:4e:69:12:ad:7b:51:f4:d5:49:cc:e8:76:8e:ae:
54:f0:17:af:8b:61:21:48:6a:3f:05:31:55:36:39:
ea:77:ba:d4:2b:56:21:fd:b7:f3:db:29:10:8f:c0:
95:b7:9e:5e:63:c1:9f:35:6f:48:81:5e:68:4b:0e:
ca:83:a1:8c:ec:be:ab:56:12:39:6f:63:08:a1:b3:
12:b9:c2:c4:a4:3e:82:f6:ad:69:c2:85:41:1a:1c:
33:22:a0:4c:e0:f0:5d:2e:ac:07:44:b9:f1:4b:db:
03:06:08:62:96:ac:06:61:2e:a7:44:ae:c2:22:80:
7f:b3:02:2a:14:1d:6d:60:4f:2f:f1:90:cf:8c:c7:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:48:AC:BD:50:D3:CA:65:2A:20:30:FA:D0:E9:3D:35:86:F2:46:39
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9e:37:e9:06:27:54:c4:1a:c2:ac:83:dc:e7:6d:6b:c0:8e:
2e:58:a6:17:cb:82:b9:82:95:1f:d0:b9:24:4c:a8:bc:e3:6b:
ae:d2:9a:2c:31:83:5d:4c:2f:a7:11:bd:c2:b6:da:df:68:05:
7a:61:a5:ac:df:3a:b6:99:91:05:f3:b4:72:3f:e5:30:b8:e5:
3f:73:46:bb:3f:2e:94:02:a6:20:45:a2:e6:3e:03:57:f4:56:
79:46:8f:70:d8:23:85:24:4d:af:a0:c1:24:60:ef:2e:45:38:
97:03:82:a1:93:b1:a6:64:40:b9:06:d6:af:5e:9d:c8:f0:17:
21:10:c1:42:48:1b:2e:dc:ac:a9:3b:bf:5d:19:99:59:66:de:
54:7d:a2:4a:09:53:2f:93:02:fd:bb:b8:f2:25:66:4b:bc:c2:
8b:61:88:a9:2f:19:f5:60:b9:21:d6:17:dc:eb:52:b7:60:11:
10:a8:f6:f6:e4:bb:2b:5e:f0:dd:65:08:da:3d:bd:e0:dc:cb:
76:70:9a:82:07:08:ac:72:57:4a:06:8a:b1:71:04:63:45:e0:
2a:61:98:fc:a3:23:d8:d4:72:fb:d8:c8:9a:8a:82:88:67:41:
d0:dd:b6:e2:a6:2f:1c:02:ef:f2:72:2d:1f:07:c1:61:3f:1d:
08:22:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:45 2025 by rpki-client