Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: jWitWXB/77Lg2pG5pEfsSziRrPb5z5ckDFO6+7BHSto=
Subject key identifier: 32:2D:92:4D:2C:32:5A:CE:B7:67:47:89:03:E3:5E:C0:02:42:5A:14
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 0199334968FDE62048B9AD3015AAD657140C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 129D
Signing time: Wed 10 Sep 2025 11:01:13 +0000
Manifest this update: Wed 10 Sep 2025 11:01:13 +0000
Manifest next update: Thu 11 Sep 2025 11:01:13 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: 8iaMwwbKOvlZjpa5HHsfWorTmFQI3yTQd+8z6arrI9o=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:68:fd:e6:20:48:b9:ad:30:15:aa:d6:57:14:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Sep 10 11:01:13 2025 GMT
Not After : Sep 11 11:01:13 2025 GMT
Subject: CN=322d924d2c325aceb767478903e35ec002425a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:c0:02:a0:62:2a:48:5b:b6:46:b5:fe:01:
7c:64:dd:c8:7e:b2:3f:cb:82:09:9d:ae:de:5d:e7:
75:df:94:49:7a:6e:28:76:47:0f:fe:79:bf:8d:6d:
b5:11:32:02:5d:91:47:6c:47:c1:9d:12:ab:6e:9c:
48:07:0c:c2:93:dd:f8:00:12:a3:33:4d:9a:06:cc:
4e:87:59:71:38:8f:e3:22:66:00:82:cd:a2:c6:52:
f0:aa:48:1b:d8:2e:eb:5a:7c:0a:db:a1:41:82:38:
19:27:aa:8b:e8:45:16:7b:5b:d2:cd:eb:b7:cd:34:
3b:1e:11:81:03:9c:81:d8:79:ed:f3:2a:62:cf:b4:
c6:62:0b:b7:5a:65:9c:b6:68:8f:37:9e:be:04:0b:
72:e7:4f:3f:84:8b:85:83:94:0e:ee:d5:73:99:a4:
39:01:0a:39:5e:48:ba:e3:b0:34:67:ae:3d:42:1d:
8e:59:d1:25:2e:68:46:a0:11:5d:ae:b4:74:b1:fd:
2b:16:ef:7f:8c:1f:27:8e:a3:5f:26:af:b8:b6:d0:
ae:7b:4c:7f:94:52:25:e0:4e:ec:13:a0:c2:75:74:
7e:dc:0d:f2:f9:99:28:fe:f6:1d:44:f4:ba:b9:c7:
2f:c4:10:d0:1e:82:7f:22:96:1b:50:87:2a:ee:24:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:92:4D:2C:32:5A:CE:B7:67:47:89:03:E3:5E:C0:02:42:5A:14
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:27:39:51:07:27:b8:9e:77:68:b1:a7:84:a2:e8:a6:2f:1f:
d7:6e:d3:ef:a1:e1:f8:13:03:10:8c:3a:ea:e3:5e:8a:d7:6f:
48:fc:8a:52:10:f3:2d:15:0a:f8:08:e2:53:5d:36:33:a1:cd:
6e:8e:7b:4a:ee:76:76:bf:d2:20:ec:c2:d7:00:7f:cc:22:87:
2a:a8:63:3d:b2:30:39:dd:7a:a9:eb:4c:80:5e:b9:44:71:98:
97:bd:41:0d:0f:5f:d2:f9:f7:0f:ca:86:f3:6e:34:e1:01:84:
7d:0f:6c:2d:13:b7:c7:06:cf:90:59:4f:9a:22:04:8c:c0:0a:
bf:8b:fc:f5:33:02:91:de:8c:1c:23:66:c7:91:90:a2:44:48:
2e:b7:3f:a5:1f:89:08:68:b8:e5:fc:63:50:a1:45:cd:6d:40:
6b:7b:84:c6:ac:7c:1f:38:3f:11:97:aa:45:43:67:4d:a2:ad:
3c:c4:2a:7b:22:a2:7e:7c:2f:ee:34:f3:b3:a1:46:88:07:31:
fe:75:ce:17:bb:9c:97:e2:5a:da:ec:36:97:90:72:54:3e:c4:
f0:5f:92:8a:e5:66:af:03:9d:80:ff:4a:8c:50:6a:01:32:b8:
14:13:04:54:74:4b:8c:78:01:63:6f:54:30:5e:e1:22:d2:e9:
c9:ab:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:32:49 2025 by rpki-client