Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier: nc4dtTINn93ueKHNxYFLldkU9SynClk8Wg45pYl4CLg=
Subject key identifier: 5B:31:DF:14:42:E3:33:4A:BC:25:78:F5:EF:F3:0B:1A:32:3B:4B:C5
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 019921E78AE8C3ED894330C22796059693F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number: 0134
Signing time: Sun 07 Sep 2025 02:00:46 +0000
Manifest this update: Sun 07 Sep 2025 02:00:46 +0000
Manifest next update: Mon 08 Sep 2025 02:00:46 +0000
Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: 4uHRHloub3XL3n1rpDV8rO+LMyDhdm2nPcuLKc9LOYE=)
2: tFY_1oU9xNxzF5JnlbdrLi4cQ9A.roa (hash: Sxl+M0Cfp0KqUWFjQhEzTtXSwHwXwN4AdOusnlZXPTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:8a:e8:c3:ed:89:43:30:c2:27:96:05:96:93:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Sep 7 02:00:46 2025 GMT
Not After : Sep 8 02:00:46 2025 GMT
Subject: CN=5b31df1442e3334abc2578f5eff30b1a323b4bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:d4:aa:c5:14:f5:5f:bc:02:9b:be:0f:d2:
50:70:f7:22:47:81:70:54:00:ba:35:64:c0:3b:d9:
28:1a:0f:bb:2f:d0:a7:17:e5:1b:6b:b8:c5:5e:6e:
7c:08:13:fe:0d:90:ea:51:cc:ec:13:25:2d:73:70:
de:15:6c:bb:2f:6b:63:ab:c6:59:3a:82:7a:12:dc:
a8:79:7f:20:91:f8:03:ea:52:04:7a:e6:b3:96:eb:
12:4f:1f:43:a9:4a:e0:93:f1:c2:61:6a:61:a0:fb:
32:bf:e9:4c:2f:ae:51:b4:4d:8e:f8:ed:cf:b8:f2:
c7:97:9e:6e:d9:e2:9e:6b:49:11:cd:e5:b0:b8:62:
11:87:b0:f4:63:6c:d9:69:2e:1c:67:7d:99:21:39:
a7:62:4b:d2:9c:14:19:af:42:ee:3b:6f:63:f6:fd:
f6:83:dc:ab:ab:0c:49:43:98:21:a1:cb:4d:55:01:
9d:8c:09:64:5e:80:0a:a0:a4:2c:97:5e:93:2c:3c:
7c:45:27:48:d3:cb:c7:20:a4:26:59:4b:cd:db:9d:
65:82:38:32:0d:dc:1a:c0:95:e8:7b:6e:0b:2a:41:
e8:ff:de:a0:fe:c8:d3:60:2d:36:ac:82:8f:e9:f7:
c2:34:f9:ae:19:57:0b:e9:fd:e6:f1:be:41:48:1d:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:31:DF:14:42:E3:33:4A:BC:25:78:F5:EF:F3:0B:1A:32:3B:4B:C5
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b7:f7:67:e9:a1:4e:44:2e:d7:68:6a:b8:cf:6d:a1:1f:56:
19:4a:de:0e:06:7e:5a:12:bd:47:61:41:d4:bc:69:0d:ba:06:
4f:90:50:fc:12:2e:bf:76:cf:e2:f9:19:a2:86:26:87:1c:43:
e2:58:e4:38:22:8b:c1:6e:fc:e5:b9:5d:53:ad:6a:1e:f3:a6:
5d:fd:56:85:47:bf:69:e4:f6:6e:e8:d9:5e:dc:ad:5c:e6:90:
4f:0b:44:b1:81:06:23:ba:ca:bf:96:d9:5f:53:c6:e3:f8:fa:
38:42:87:f3:fa:3a:8b:af:63:5e:84:03:1a:f3:ed:e9:d5:59:
58:bd:c6:9f:60:84:35:99:cd:45:d6:63:da:a6:e5:d6:13:74:
cb:38:50:13:f2:dd:5f:7b:99:be:1b:df:16:42:73:91:47:c8:
53:a0:7a:88:2d:12:0b:91:9d:83:e8:53:25:8e:54:7c:a4:81:
45:de:67:d1:b6:6d:0d:5a:97:3c:71:78:b2:96:e4:ca:36:fe:
f2:02:64:12:ea:3f:ab:18:fe:d9:06:e1:e8:74:5a:c6:53:e9:
a0:f8:a8:3e:9b:d9:6f:3c:bd:65:a9:82:7a:36:7e:b6:34:8b:
84:85:06:bd:ed:93:fc:2c:bb:32:cd:5b:9f:b5:75:68:74:1b:
7e:48:a6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:50 2025 by rpki-client