Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: IVJLSAD1gC0AB2W4oTpV8zDr/N6nmTBszKtWZUBv2Tk=
Subject key identifier: 28:D6:1B:E0:BE:BF:1D:1F:77:AE:C6:EF:4A:09:30:0E:E2:DC:9E:88
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 01992255E880D88C564F3C48D3676A5027B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 1308
Signing time: Sun 07 Sep 2025 04:01:19 +0000
Manifest this update: Sun 07 Sep 2025 04:01:19 +0000
Manifest next update: Mon 08 Sep 2025 04:01:19 +0000
Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: JdnC3GutFO2ni6dY2LF9Jr2aL0zd66DlArURD93X1FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e8:80:d8:8c:56:4f:3c:48:d3:67:6a:50:27:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Sep 7 04:01:19 2025 GMT
Not After : Sep 8 04:01:19 2025 GMT
Subject: CN=28d61be0bebf1d1f77aec6ef4a09300ee2dc9e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:0d:ab:56:c5:f6:36:27:09:72:ea:ac:9e:
31:97:c6:1e:ad:e5:34:8c:77:c0:12:99:b0:08:db:
21:00:36:72:0c:c0:30:c7:00:fb:8b:1e:0e:68:60:
ba:84:e5:ce:23:04:ce:cf:29:07:ed:a4:61:cf:10:
c2:aa:68:39:f3:57:2e:ce:db:6e:ad:19:2a:c5:ee:
e1:82:ff:91:b5:77:3e:02:33:ce:c2:97:b3:92:5c:
6f:a0:e0:3e:83:c0:7b:cf:3e:36:3c:75:0d:b9:63:
20:8b:65:4a:64:62:5d:25:ad:2f:9c:e8:29:41:2e:
45:c3:97:1f:8d:a3:23:78:a4:de:fa:51:fc:c4:68:
3a:ab:b4:1e:18:a2:f4:72:1a:ef:bd:9e:c1:5e:95:
dd:64:5a:26:c8:26:30:ba:24:ca:03:aa:65:38:f6:
d6:89:05:fe:2f:a5:01:d4:03:a9:86:4e:a3:1a:a6:
f4:0a:3c:c6:b2:31:5a:6c:7f:ec:45:1b:65:6c:31:
64:72:be:03:fd:6b:07:a5:27:c2:3e:7b:79:7d:76:
cb:f1:d6:46:31:98:35:b2:b3:c0:01:87:b7:c9:30:
10:7e:4d:20:5c:9c:9b:c0:ff:3b:be:54:cb:79:bf:
18:0a:de:a6:63:96:e2:2a:c0:12:57:ea:c9:20:39:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D6:1B:E0:BE:BF:1D:1F:77:AE:C6:EF:4A:09:30:0E:E2:DC:9E:88
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:23:74:2b:4c:34:b6:27:0e:e5:aa:e3:e0:a3:53:24:02:d8:
82:55:37:4f:1e:90:c9:5f:07:a9:09:10:e1:d9:fa:29:89:51:
98:e9:76:37:92:2e:cd:b7:21:da:9e:e1:cc:4c:c7:6f:0a:d5:
81:8c:bc:82:39:18:e5:89:be:62:fb:6c:d4:ac:9d:a0:47:60:
83:6d:48:e8:d1:39:b6:60:97:18:fd:91:ab:08:19:d6:d7:ca:
df:79:c9:ec:80:c8:61:7e:79:a2:75:28:2e:b7:fb:f8:c3:40:
08:89:c3:02:bb:b1:a4:77:8e:0e:ca:e2:aa:fb:01:16:b8:41:
6f:2a:01:2e:66:37:4e:70:e9:80:62:73:35:f4:7e:be:e6:69:
da:d1:3f:d7:0f:f8:28:92:0e:0b:3a:67:38:2c:5a:e7:79:9c:
9e:78:ec:4a:83:06:45:ae:e9:b3:55:c6:ae:37:a2:d7:cf:be:
2b:31:71:fd:d3:8a:da:16:c2:f8:a0:75:bd:85:2b:d6:7c:09:
be:b1:8a:d8:b7:ad:a2:53:4c:66:c6:56:4e:f6:1f:f6:71:42:
52:c5:dd:00:47:67:b2:44:cd:a7:f4:c6:49:fc:84:05:08:a6:
87:21:4e:64:8a:1a:6b:87:54:58:95:0f:34:e5:f6:94:80:d6:
ec:a7:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:15 2025 by rpki-client