Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: Teo+pV6PKVI1xoWOs926TSFZaDSA0pLDjD191zue4DA=
Subject key identifier: C0:5B:6C:33:2E:C7:B4:1D:47:C0:1C:37:4B:5F:E5:23:AA:93:8D:B7
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 01992255F0F99C1D1906ADE024C80CD09E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 04:01:21 +0000
Manifest this update: Sun 07 Sep 2025 04:01:21 +0000
Manifest next update: Mon 08 Sep 2025 04:01:21 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: /iHXiQO4io+lDbXhmdXe/B7J46BMJcvtajjDQPPvt+E=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:f0:f9:9c:1d:19:06:ad:e0:24:c8:0c:d0:9e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Sep 7 04:01:21 2025 GMT
Not After : Sep 8 04:01:21 2025 GMT
Subject: CN=c05b6c332ec7b41d47c01c374b5fe523aa938db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:c9:6d:bf:41:e9:ad:d7:27:ea:fe:18:f3:
ef:f4:42:e9:da:34:36:ca:64:d7:77:37:63:72:a6:
e8:bc:ce:3a:b4:0c:b4:b4:e1:de:22:91:ec:9a:47:
a3:08:11:14:b4:bc:c3:a7:a7:65:17:1f:09:e2:a5:
92:5e:fb:fa:5d:80:07:b4:30:8c:e4:73:a5:83:0c:
e8:1d:85:93:f1:b9:ca:a5:f7:1a:e7:33:50:2b:5f:
6d:5b:48:0b:13:55:13:84:cc:d7:a2:5c:cc:fd:f3:
ab:ab:05:8c:75:ce:a8:1a:a9:0e:be:dd:61:22:03:
f0:6f:d6:3e:cf:45:4f:fe:ef:d5:61:ba:1e:03:cf:
77:9d:f3:57:fe:70:6b:b1:c3:ae:da:bf:6c:f3:d2:
26:0b:e2:c4:0d:41:ad:75:93:7b:24:20:01:0b:a8:
69:17:0d:15:a1:87:80:16:fe:73:52:74:c6:c8:bc:
4a:0b:be:54:16:63:83:ea:d6:5b:8b:c4:70:eb:a3:
61:6d:41:1f:a4:62:ed:3a:7e:4a:1c:6b:cc:f1:60:
b0:7d:33:d3:07:3a:88:bc:6a:55:fb:b5:8f:6c:66:
c5:c2:a9:40:39:07:14:45:09:46:d0:b0:31:27:2f:
98:94:f2:58:94:79:a3:4f:42:ae:60:9d:69:18:19:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5B:6C:33:2E:C7:B4:1D:47:C0:1C:37:4B:5F:E5:23:AA:93:8D:B7
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:15:49:85:6d:91:b5:cc:c6:6a:c0:24:d3:15:6c:92:2d:73:
49:5d:65:4b:79:86:5a:52:7b:eb:70:a7:e9:99:2e:ea:ae:ed:
b0:a7:41:38:7c:3c:91:37:94:e5:63:b9:39:51:31:e6:08:48:
a4:a1:be:7f:05:43:4c:32:60:d0:cc:0b:c1:95:79:cc:c3:cd:
67:42:6c:81:bc:f4:33:7e:03:e4:52:3b:8f:d5:83:7f:aa:c2:
9d:db:6b:1a:80:f1:ca:91:29:84:75:c9:05:85:c9:3f:f1:30:
f0:0e:02:d6:da:28:6f:3f:da:38:a5:22:c6:7f:87:d0:5f:bf:
ab:e5:97:fb:d8:c5:f2:42:60:86:46:30:a0:94:7b:84:6c:ff:
78:ec:7d:f7:ab:81:db:26:09:d5:98:36:41:ba:88:45:d8:0b:
b5:81:9c:58:54:52:0b:22:9f:0e:f8:2e:08:df:70:19:1b:27:
89:b9:df:83:a4:1f:10:85:29:19:41:29:ee:ba:26:f4:b0:f3:
66:8e:f7:53:65:24:1f:3c:b9:93:f2:68:4d:34:81:08:c9:d1:
64:f1:1a:1f:76:33:76:28:eb:17:73:0d:f4:8e:83:0e:39:84:
08:67:47:2f:b0:13:0d:a1:23:13:d3:a5:fd:f4:03:f4:44:c8:
9c:4c:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:25 2025 by rpki-client