Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier: C5qK1W6T9dlbwbR3em/AzqzEqZ6iUEJiipCaukkmZ88=
Subject key identifier: 8C:AA:5A:0D:96:A4:1F:35:71:8A:26:BC:46:7C:73:C9:70:09:11:6F
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial: 01992255E3C93922F17910B3B91782AE4158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number: 11
Signing time: Sun 07 Sep 2025 04:01:18 +0000
Manifest this update: Sun 07 Sep 2025 04:01:18 +0000
Manifest next update: Mon 08 Sep 2025 04:01:18 +0000
Files and hashes: 1: 7G5W8sa7fSyifeCi1ZnKppfC-do.roa (hash: cD9RHT+kmZED51KQST3KvwR9LcSJB8J5G4yP5BSC29Y=)
2: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: lH3S51lKPoTYcLQ+hhmTxVwHDyi8J6rUWYrNsI7VBE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e3:c9:39:22:f1:79:10:b3:b9:17:82:ae:41:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Validity
Not Before: Sep 7 04:01:18 2025 GMT
Not After : Sep 8 04:01:18 2025 GMT
Subject: CN=8caa5a0d96a41f35718a26bc467c73c97009116f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:51:ed:15:1a:9d:d5:c8:bf:74:5c:5d:31:
c3:f3:56:29:84:15:a8:b7:91:ea:74:e1:77:81:81:
be:b5:e3:bd:d0:62:19:fa:91:af:20:fc:ce:eb:b4:
70:9c:95:5a:a5:2a:05:3e:bc:5a:df:24:95:6d:9f:
5d:40:db:24:a1:e7:6a:c1:01:de:77:2a:fc:0d:50:
5b:30:7b:4d:f6:f1:85:0f:97:5f:67:56:bd:fa:9a:
f9:c1:1d:57:a7:08:c8:2b:b1:e8:6a:88:d6:ec:03:
4e:1e:74:90:c1:8a:0a:ff:1a:43:11:0f:76:0c:20:
6a:01:e0:be:15:8d:85:9f:66:47:70:ab:ba:25:c2:
78:0e:06:5a:c0:5d:66:b9:20:d7:f1:cf:d6:76:91:
05:32:c4:99:fc:a1:f5:2a:5f:2d:ea:fd:d8:8e:7b:
da:b5:71:a1:ba:0c:ee:ba:e2:fd:58:2b:41:89:fa:
95:67:2d:a0:c0:94:d0:df:65:eb:13:ce:e5:38:3e:
2e:b2:af:4c:5b:cf:aa:c0:4c:9e:0b:be:10:1c:68:
61:de:96:6b:22:49:ce:40:d5:62:be:a9:71:1e:fa:
5c:4e:b5:cb:1d:da:34:28:e5:87:52:68:32:7d:ae:
92:46:f2:b3:9e:ae:31:cf:59:c6:58:1e:1f:d7:7a:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AA:5A:0D:96:A4:1F:35:71:8A:26:BC:46:7C:73:C9:70:09:11:6F
X509v3 Authority Key Identifier:
keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:9c:47:16:51:c8:ce:f3:8e:cd:31:be:09:57:3f:57:c9:
f1:c4:66:58:cc:12:16:6d:c0:1a:e2:26:18:47:3b:0d:c6:75:
47:eb:d0:09:d4:98:b6:ce:da:8b:6c:73:f3:f7:01:a2:31:9a:
e2:5d:f8:50:f2:11:9b:1e:47:f7:92:3a:61:2f:ed:a3:55:5d:
40:9d:a8:a2:dd:fd:21:17:81:e8:e7:9c:6c:f5:24:04:98:16:
bc:3b:4e:39:0d:1f:53:b3:d7:8f:c1:8c:20:f2:7b:82:77:e1:
57:94:9e:e0:4e:d9:d8:b6:b4:a8:a3:f4:35:29:22:d3:a7:d4:
fe:b5:a3:f9:9b:99:b1:27:85:ed:0e:8d:80:34:d1:5b:4b:b8:
51:02:b4:fb:c5:9f:14:62:ad:25:fb:94:fa:56:4c:e9:af:8d:
38:d2:f1:af:34:cf:b4:6b:43:0c:77:63:42:f7:dd:48:85:54:
6e:f2:d1:60:37:9f:5f:3c:01:f0:35:cf:ea:60:c5:29:e5:59:
75:9a:5d:ff:59:3f:c4:8c:da:b6:93:e8:1a:39:5e:4f:4a:7b:
0e:bd:42:8f:fd:f3:05:86:c0:39:42:84:d2:f7:91:53:49:2c:
56:90:27:8a:33:28:2f:5a:cc:a7:5f:0b:57:e1:8c:9f:58:13:
f7:b4:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:56 2025 by rpki-client