Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: rzhTMCg5S/8oqRtwUHJpL6uSba9baxuT8zMwf/QaSGs=
Subject key identifier: 02:8C:90:35:E7:56:FD:A1:20:2C:CD:9E:0A:FC:A4:35:AC:67:60:54
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 019923A06A857E93C1B0D7B243D59E1AE7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0B3C
Signing time: Sun 07 Sep 2025 10:02:19 +0000
Manifest this update: Sun 07 Sep 2025 10:02:19 +0000
Manifest next update: Mon 08 Sep 2025 10:02:19 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: AnUTd2UrTucXKD+i+g4WpwJwNVs6RY3cYR3lnHIhECM=)
2: GESlc56i4-gdhOlM9uZOfgy8aCc.roa (hash: 9R3PoH4Q7y5D2LVnthi2TWzvIx4vLCuEUl/il2GVgqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:6a:85:7e:93:c1:b0:d7:b2:43:d5:9e:1a:e7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Sep 7 10:02:19 2025 GMT
Not After : Sep 8 10:02:19 2025 GMT
Subject: CN=028c9035e756fda1202ccd9e0afca435ac676054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:b1:9e:e6:06:06:78:ad:aa:5a:25:29:0c:
65:98:4c:05:55:47:8a:75:76:ac:9e:67:6c:f2:46:
d2:d9:4e:44:68:48:e4:ee:66:df:95:ee:e6:90:5b:
cd:74:6e:b9:af:77:eb:47:67:53:72:4c:29:03:f5:
12:43:0e:fa:0f:5d:71:a6:bd:9b:31:ba:4a:0a:36:
ca:40:53:9c:38:2d:d2:16:20:d4:8a:69:59:e8:b2:
30:e9:a9:70:25:c3:a2:c2:66:97:06:87:6f:a0:e2:
28:a2:79:31:93:b6:77:c9:cb:8c:7c:c9:1e:c8:64:
a7:d2:6f:a9:68:b5:4d:df:db:6b:df:6b:57:91:dd:
da:a0:c6:02:4b:e2:c1:70:60:44:0f:6d:88:c0:49:
de:24:36:fe:a0:41:ab:0b:7b:20:1c:f3:be:d3:55:
bb:d7:9f:b1:c4:95:94:03:97:77:1f:5b:e3:62:c1:
d4:4b:3c:73:80:41:b5:e6:bc:ef:04:9b:00:ce:46:
79:e5:62:3a:8d:b1:a6:cc:01:bc:01:b1:d8:54:12:
7e:c7:05:db:00:68:cc:76:1f:aa:1f:56:ad:50:23:
31:46:62:5c:cc:f7:c4:75:07:92:60:a5:b2:2f:33:
77:b5:66:25:4b:e5:52:b8:42:cb:c2:06:b8:a5:9c:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8C:90:35:E7:56:FD:A1:20:2C:CD:9E:0A:FC:A4:35:AC:67:60:54
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9c:8d:fe:dd:d6:6f:94:b3:e9:6d:cf:d2:40:8e:10:1e:9c:
4a:a3:95:eb:66:bd:f7:d3:e3:0e:e2:fb:65:04:35:f6:27:28:
bb:d0:db:af:0d:07:d7:27:e0:aa:9c:87:ff:47:fa:1b:53:e9:
4e:f9:ca:a4:8e:9c:22:3e:c1:8f:48:95:6c:ad:9f:bc:84:f1:
08:2c:48:d3:92:13:c9:a8:13:df:6e:2f:11:b3:72:cb:60:bf:
38:a9:53:f2:62:fc:f3:a8:9b:83:9f:cb:40:6e:1f:f3:b5:96:
03:bb:0c:b6:8f:68:1f:0d:ce:f8:bb:9d:05:1a:5e:40:bb:78:
a7:4b:04:69:f8:cb:17:4c:38:e0:d4:25:19:47:e8:df:75:70:
52:f4:9f:88:39:a7:0b:b3:18:9a:d7:77:14:fc:fb:29:2b:1b:
93:b0:64:f0:2a:d4:ab:9c:8f:e5:e5:70:e9:46:00:2e:a0:69:
6a:5c:56:11:ee:8b:7b:01:b2:76:db:07:7b:1a:81:51:89:77:
d1:44:6c:8a:2f:c3:4a:4f:60:f8:ff:82:dc:c2:ed:ba:77:a6:
38:7b:50:1e:9d:43:68:25:0b:71:22:6d:d2:c1:93:f8:ec:6a:
8d:5a:91:c4:3f:4f:bc:4f:4f:56:1d:da:74:fa:46:3b:b8:bc:
4e:d4:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:02 2025 by rpki-client