Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier: yh0g451ehKPuqspA1WoXV1Bhu/nYmn3XkeTDaxtVTGY=
Subject key identifier: 89:C1:02:40:FF:BA:4B:2D:E3:1D:CB:BA:53:50:77:06:D2:8D:55:BF
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 019921B0D70079D3FEA9CC26CB82BD45C8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number: 0CE5
Signing time: Sun 07 Sep 2025 01:01:01 +0000
Manifest this update: Sun 07 Sep 2025 01:01:01 +0000
Manifest next update: Mon 08 Sep 2025 01:01:01 +0000
Files and hashes: 1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: TuVHaEFtni0XnixRPdGzUSuoyeeQo/BR70Af+LeR3Ug=)
2: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (hash: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:d7:00:79:d3:fe:a9:cc:26:cb:82:bd:45:c8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Sep 7 01:01:01 2025 GMT
Not After : Sep 8 01:01:01 2025 GMT
Subject: CN=89c10240ffba4b2de31dcbba53507706d28d55bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:56:c8:94:e4:1f:a1:66:60:8f:75:77:ea:
78:33:e8:4f:7a:8d:7e:67:9a:fe:f9:c6:94:80:21:
ef:72:15:5c:28:13:95:66:cc:5a:e1:56:ac:57:94:
61:0c:33:5b:ef:01:f7:a9:f1:d0:0d:70:0e:8a:96:
50:e3:0d:44:38:1e:3d:28:5f:09:04:73:e7:7f:6b:
94:8d:0d:91:fd:42:97:89:99:60:ee:2e:61:7a:6d:
59:6d:aa:ec:46:5d:77:22:f9:7e:b7:22:db:12:66:
26:b5:6a:f5:12:e8:8e:56:33:8f:30:39:9b:b6:6e:
2f:26:19:5f:68:3e:54:b3:09:f9:cc:23:48:db:2e:
b7:09:6f:7c:d9:f0:6b:74:f5:a0:3b:c3:4f:ee:bd:
ef:19:94:21:4c:a7:a5:e3:8e:f1:b4:e6:b4:ee:c1:
d9:76:a7:b1:b6:5b:9e:d8:bf:ca:0a:20:ed:28:4c:
7e:31:06:04:5b:28:67:40:f8:e0:52:2e:76:54:77:
ae:91:04:7c:28:29:ec:43:89:1a:38:73:71:d7:1b:
2a:5c:52:5e:ca:cf:de:c6:1e:cd:c9:0a:c7:b4:b9:
b6:78:55:ca:4e:cf:18:1e:b4:41:70:80:56:31:55:
f9:84:f9:5a:5e:d9:57:dc:04:f4:e5:84:1a:92:53:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:02:40:FF:BA:4B:2D:E3:1D:CB:BA:53:50:77:06:D2:8D:55:BF
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:19:cd:af:83:5a:99:bb:22:a2:62:b5:8b:01:7b:be:7b:f8:
23:cf:63:8c:f4:43:aa:96:fb:58:96:d6:94:2b:3c:34:8f:57:
72:e7:07:92:4e:24:e7:88:b1:fa:4f:d5:22:bb:03:55:63:78:
1b:57:72:be:16:d6:5a:4e:00:17:84:47:46:df:f7:99:61:40:
61:f6:27:3b:8b:e8:ab:b5:b7:9f:a6:bb:40:04:a5:e1:a8:13:
a1:22:3f:43:88:3a:cc:d1:62:3a:df:83:6e:9a:cb:1e:66:8f:
e1:3d:69:86:24:89:26:b0:69:ba:85:e4:c1:0c:ad:55:ce:95:
ed:88:c4:ab:4d:f6:a3:97:d4:52:bd:5a:7f:d4:ae:68:8e:4c:
c0:b7:54:68:dc:8a:d6:2b:40:76:9a:a0:f0:bd:5d:94:82:ef:
54:0b:3f:5c:2a:27:0e:0d:87:38:eb:40:0d:28:ec:f8:34:2b:
e8:ed:65:9b:b1:b5:82:4d:05:6b:9c:50:f8:51:6a:0d:83:1e:
87:a2:db:d6:c5:5e:35:3c:c8:b8:f7:93:31:bf:fe:27:e8:eb:
60:d1:2d:91:fc:0e:3d:c1:94:2c:e8:6f:40:01:c1:86:35:55:
ff:b9:7f:62:35:61:9e:71:ad:0c:79:6b:99:42:26:0c:a7:f3:
2e:bc:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:28 2025 by rpki-client