Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: BRP5G3jw172DAzuHV2TGa2Cete5Ops3zX84opTKdczI=
Subject key identifier: 37:D6:E5:DD:EB:39:59:BE:80:7B:5F:FD:6E:59:40:78:8A:70:33:CB
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 01992331658DA2CC9C41CA5DA0690752EE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0BE6
Signing time: Sun 07 Sep 2025 08:01:03 +0000
Manifest this update: Sun 07 Sep 2025 08:01:03 +0000
Manifest next update: Mon 08 Sep 2025 08:01:03 +0000
Files and hashes: 1: 7TO4e8lijWMlxMa1DByMrXD5jOw.roa (hash: cDwhkc8bh/DTSiy1V4KBQ3fFakHZ/iT/sbs5LQBmNws=)
2: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: MG+m5Kb7093SxRAY7BjNPG+1KoC0tGiqcqUzgILa4/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:65:8d:a2:cc:9c:41:ca:5d:a0:69:07:52:ee:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: Sep 7 08:01:03 2025 GMT
Not After : Sep 8 08:01:03 2025 GMT
Subject: CN=37d6e5ddeb3959be807b5ffd6e5940788a7033cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:7d:db:ac:bd:07:2d:8d:61:55:42:9e:b8:
6f:f0:11:90:4d:ad:15:c5:07:3e:72:73:74:7b:26:
c6:84:64:75:f0:bf:75:2d:f5:93:38:ff:00:45:17:
de:22:5e:37:cb:e4:ce:dc:48:6b:49:3f:ae:b5:2b:
21:81:19:50:fd:e1:c2:5e:3b:91:36:6b:75:e8:d8:
56:25:fd:5e:f9:1a:d9:6f:39:58:98:3a:3e:c0:02:
00:b5:2a:97:4d:96:09:8e:4b:a4:8d:9f:14:56:d7:
0a:ab:05:13:ce:12:5b:de:30:ad:dd:06:f3:c3:88:
a9:e1:4b:a5:bf:b3:74:5c:e4:61:af:0e:30:23:2d:
9d:2e:72:ae:ae:77:f1:2a:77:14:45:06:b9:a3:2b:
f4:98:84:a1:12:24:be:98:cf:aa:56:2b:99:4d:d2:
e5:80:28:81:a5:b7:f0:b2:e9:61:e6:fd:d1:1a:f6:
e8:48:e9:71:d9:bc:cc:9f:0b:91:2f:69:a2:c7:56:
3f:00:88:6f:73:06:e5:10:04:cd:c3:80:ea:5a:6c:
7a:aa:7f:a9:7a:36:4b:eb:06:48:b7:42:f8:c5:4e:
e7:5f:0a:53:5e:05:75:25:fc:bf:cf:e1:cd:af:01:
0e:dd:f5:74:61:31:bc:fa:a8:f0:d3:4f:de:a2:a9:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D6:E5:DD:EB:39:59:BE:80:7B:5F:FD:6E:59:40:78:8A:70:33:CB
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:78:63:46:09:1e:8a:2c:86:87:09:d0:44:fa:dd:c0:6f:f6:
dc:b8:94:13:22:49:c8:51:60:e3:da:1a:64:1a:75:df:82:73:
17:0e:78:b6:57:e5:1b:de:3d:64:ed:00:01:41:cf:21:69:5f:
e0:32:bf:63:1b:6a:d9:c3:ee:ee:5f:be:76:0a:5e:10:f0:f8:
b9:02:8b:52:2f:52:2e:8c:e3:bc:f7:35:27:41:9d:90:cc:32:
90:1e:b1:d8:7a:6f:71:ac:6a:69:ed:b7:58:f8:98:64:31:bc:
dc:f5:01:98:18:a1:a1:77:87:6e:70:75:68:86:8c:27:0e:6f:
5d:c2:b7:98:26:87:72:6d:63:f7:ee:16:d3:19:c0:b2:12:39:
87:c7:b1:af:ae:52:36:4e:5b:fa:e2:a4:24:de:4d:8b:b3:cd:
3d:73:9e:56:db:09:c1:e8:12:59:c1:91:d8:06:e5:16:9b:3a:
d2:0e:ed:2e:a0:75:a6:a1:93:38:92:5e:bd:41:a6:77:97:37:
05:c7:be:3f:ee:e2:d4:de:88:e6:75:da:af:c2:79:c4:0c:62:
1d:26:13:0d:e2:dc:d1:9e:a1:11:5e:a0:53:30:46:5d:19:64:
66:c9:48:cd:16:a8:c3:c6:e2:3d:54:d5:23:6f:b9:57:68:5e:
67:d4:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:16 2025 by rpki-client