Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: sI53rjVj1N8YbdJmxPwKPJq/ggzqD7dKj7jhIvsrroo=
Subject key identifier: D2:09:95:4F:8E:04:F5:8B:32:BA:A0:F5:C4:59:9B:FB:60:DD:45:E4
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 0199364A3F20735FB60F25196AAF8A01F064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 0569
Signing time: Thu 11 Sep 2025 01:00:59 +0000
Manifest this update: Thu 11 Sep 2025 01:00:59 +0000
Manifest next update: Fri 12 Sep 2025 01:00:59 +0000
Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: pfESVlHJOVPS4cY3Ja0cDhF1mbEPENu+I/dgR+OMlgk=)
3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:3f:20:73:5f:b6:0f:25:19:6a:af:8a:01:f0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Sep 11 01:00:59 2025 GMT
Not After : Sep 12 01:00:59 2025 GMT
Subject: CN=d209954f8e04f58b32baa0f5c4599bfb60dd45e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:da:32:f7:ba:a5:7b:f6:ec:96:46:9d:2a:
b6:ea:df:19:eb:4d:52:7f:26:1a:8a:a2:10:d4:f2:
82:cf:6e:1c:ea:92:96:d6:5c:47:17:d9:e2:23:5d:
fd:e2:58:06:a5:c5:08:2b:d7:37:68:65:13:06:3f:
83:f8:84:43:0d:83:0a:d0:ab:25:ee:f5:2c:08:74:
b2:c3:a3:2c:e8:4d:ba:69:cf:35:69:43:09:8e:31:
94:23:29:c4:45:13:57:c4:fe:48:24:6b:71:9f:89:
21:36:3b:b8:0f:6f:39:0c:a4:e1:dc:78:5c:77:8f:
ad:ce:ed:02:ed:0c:40:83:69:5e:16:a8:d3:63:7f:
ec:ed:6a:7b:03:39:bc:c5:a6:07:be:53:4d:61:e6:
0a:60:d8:0a:0e:35:8a:8a:1b:55:5d:f2:b8:ab:6f:
61:03:16:d8:11:4a:02:76:21:68:cb:7f:51:8c:e8:
33:1e:fd:6f:22:85:e5:24:24:5a:f2:4a:c7:ce:34:
a9:51:45:c0:87:8e:ad:2b:91:f8:19:58:b4:ff:75:
f3:82:36:ba:2c:14:06:9d:52:9f:2d:45:02:11:9e:
4c:ec:ca:f4:a5:d6:be:77:37:ad:18:10:d9:47:f3:
08:37:a6:f5:49:d0:72:08:55:dd:72:a5:a2:68:ed:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:09:95:4F:8E:04:F5:8B:32:BA:A0:F5:C4:59:9B:FB:60:DD:45:E4
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dd:25:bf:74:d1:73:d4:b9:5f:bb:ec:62:d2:0d:36:b7:c1:
5c:b0:4a:1b:a8:d9:c2:86:09:8b:91:b9:63:73:2c:d9:f7:f4:
26:31:58:56:c5:f1:e0:a0:b2:90:61:e3:a7:a3:96:3c:89:d1:
82:e8:a6:f8:9b:dd:ae:91:b4:96:0b:44:99:88:04:bd:87:de:
ef:d5:64:a2:dc:1f:1f:98:53:b7:8e:c4:32:5c:ec:70:4e:47:
b5:85:7c:22:a2:2b:50:dd:a9:9d:6f:15:c2:a6:74:e0:e2:d0:
67:97:49:92:00:32:c5:4f:62:91:da:f6:6a:9d:73:40:01:04:
ae:b6:9d:e8:84:7f:6b:7c:cf:1b:4f:c5:70:5b:43:08:ad:35:
36:f6:4c:57:d4:2b:55:de:c5:f6:bf:ff:17:3f:79:75:e9:16:
15:25:0c:e7:67:64:5e:5c:ac:7c:fe:11:77:3d:18:b4:e9:21:
e4:29:1d:86:de:91:b9:fa:56:fa:7e:e4:37:bc:df:02:47:37:
bb:85:a2:f8:3f:23:5a:83:20:79:18:c3:a2:7e:45:c0:31:3c:
cf:b2:12:94:c8:a6:d4:cf:e6:83:42:24:2a:27:6a:13:21:91:
ba:8e:96:cb:d2:54:e2:f8:d0:63:bd:a5:16:41:6a:04:c3:6f:
48:a8:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:18:50 2025 by rpki-client