Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: tfXjK9UXFcs4GXh6cct7XO2QUckE4L7mRUCDspWJRFw=
Subject key identifier: F7:6C:DE:55:8D:00:66:3C:83:B1:A4:7B:AE:24:3B:B4:CE:89:9C:DF
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 019922FA764050CB8FADDEDF9A8F5F5C8118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0ED9
Signing time: Sun 07 Sep 2025 07:01:03 +0000
Manifest this update: Sun 07 Sep 2025 07:01:03 +0000
Manifest next update: Mon 08 Sep 2025 07:01:03 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: +siOsMPzIhHlp9QVIburEr75rMpQKlYBaPLVgdqBWAY=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:76:40:50:cb:8f:ad:de:df:9a:8f:5f:5c:81:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Sep 7 07:01:03 2025 GMT
Not After : Sep 8 07:01:03 2025 GMT
Subject: CN=f76cde558d00663c83b1a47bae243bb4ce899cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:3e:b3:18:de:5e:fd:f9:4b:d9:b8:d3:f3:
c2:c9:5d:09:ed:06:8b:da:2f:51:7e:f1:4e:82:30:
64:f6:81:f8:9f:6a:c5:a8:4b:e9:b4:29:a6:62:ef:
ec:dc:56:1e:b1:46:ab:12:e2:fa:29:13:c0:25:56:
35:f2:bb:42:20:63:e8:7c:0b:b0:34:6a:39:19:74:
f3:7c:f9:1d:28:20:ac:d7:2a:cb:4b:9c:48:f2:ee:
f7:fd:9b:17:91:4d:ac:43:f9:c2:ee:93:46:eb:7c:
13:ef:a6:86:12:1a:68:91:ef:f8:63:2d:20:7f:cd:
b4:7c:cd:48:02:96:29:2e:0c:4e:3d:68:45:28:8e:
65:e9:e7:0e:9f:91:16:49:1b:0d:4d:c7:95:db:9f:
9b:d4:97:fa:7f:2e:1a:29:24:a1:83:ae:00:d3:14:
d6:bc:94:40:ac:d7:df:6c:f5:7f:f0:40:44:b9:62:
19:a8:1b:15:7c:ae:7d:03:fa:32:93:ee:4c:28:ea:
29:9c:3e:21:4a:a3:b2:2c:97:78:9c:9c:ba:8c:40:
c5:5f:73:5d:14:ad:a4:37:d4:07:4e:08:f5:f4:3f:
74:f6:4f:94:a7:5b:98:f6:f1:45:f7:ac:98:b9:cc:
8c:4d:52:38:e2:87:28:e2:64:3d:25:f8:66:e2:d6:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:DE:55:8D:00:66:3C:83:B1:A4:7B:AE:24:3B:B4:CE:89:9C:DF
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:07:8b:66:8a:4f:1a:4c:85:46:03:46:c3:41:9b:64:41:38:
c6:48:33:95:d2:c7:46:cf:f9:0a:52:38:34:75:ab:2f:e0:81:
ff:38:4e:c1:a5:4b:ef:9b:76:61:b1:cb:f0:7d:48:5a:60:f0:
27:b7:0b:35:55:e5:5b:46:84:be:91:d0:98:5e:43:27:9f:3d:
4b:30:a2:52:1a:de:16:1b:03:72:f9:15:57:29:f3:e2:94:07:
6e:9d:35:56:44:dc:af:d9:9d:39:78:19:5c:bd:ff:8e:5e:27:
ab:17:e5:2f:5e:5f:8e:78:dc:e4:92:b1:b1:ea:8f:0d:d4:39:
6b:80:98:57:4b:c1:af:42:22:88:eb:a4:fd:fa:52:0e:58:22:
a2:e8:7a:5c:a7:06:9a:29:7b:50:91:8d:35:30:a3:48:06:a6:
fd:da:fb:61:3b:0b:c1:b2:42:73:a6:aa:07:af:5d:df:77:cb:
0b:f2:d9:46:4d:cc:1b:b4:23:b2:59:b5:a1:bd:39:64:92:35:
0a:ea:ae:f8:45:72:82:9a:60:be:35:55:b2:4f:8b:28:f8:2a:
a9:cf:70:7c:a9:c7:74:8c:33:e0:33:5b:63:45:c2:9e:29:4f:
b9:de:78:0c:fe:13:c1:03:b3:5c:59:f1:0a:7e:36:de:80:cb:
75:92:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:50 2025 by rpki-client