Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: MYuOv4JW6j6COfoWx1W/Pvlrcmt50O2edvbYjG6ZXUc=
Subject key identifier: 1D:73:50:F9:D4:94:1E:7E:38:4D:AE:B9:DB:05:BB:17:BB:E3:6B:8A
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 01991876A6F5BF938E76CE18DF549FB9EE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 06:00:53 +0000
Manifest this update: Fri 05 Sep 2025 06:00:53 +0000
Manifest next update: Sat 06 Sep 2025 06:00:53 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: iUOYQwbtLhNQtl/p+j07uzWo2VCyrugo9pOgtpW8g+U=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:76:a6:f5:bf:93:8e:76:ce:18:df:54:9f:b9:ee:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Sep 5 06:00:53 2025 GMT
Not After : Sep 6 06:00:53 2025 GMT
Subject: CN=1d7350f9d4941e7e384daeb9db05bb17bbe36b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:05:26:51:af:8b:1a:4d:b8:c0:b7:b5:29:
41:3d:0f:0b:1c:3e:49:8b:81:5f:16:71:8f:e1:8a:
11:9a:7f:6a:ba:77:b7:7d:98:f0:d4:77:9d:ad:69:
21:fb:22:d7:31:c2:e4:bf:8f:07:1f:a6:36:ee:f7:
50:5a:e8:24:18:35:4d:ff:de:b4:54:f5:ed:2d:bf:
1f:d4:e3:de:05:b9:3c:32:87:7d:12:6d:25:eb:2f:
b6:4a:1a:38:f8:c9:ab:1f:76:f6:10:f9:7e:56:75:
17:18:54:2c:bc:5b:43:74:4a:b3:f0:54:4c:92:c0:
cd:9d:d0:14:80:9b:63:b1:d1:1a:b2:bf:06:8d:31:
9d:2d:81:67:61:7f:5b:17:41:4b:44:3a:26:53:e2:
c0:ed:c0:b9:b0:ee:63:2c:02:e4:c8:5b:04:ca:37:
c9:27:67:de:3c:48:d5:6c:5a:a9:b0:f3:6b:52:59:
6e:2d:a1:b2:ab:df:2e:d1:cf:39:b3:8b:49:9a:23:
61:26:b3:26:ef:4a:fa:ee:e2:19:7e:15:ab:bb:a4:
5a:26:bb:80:09:65:2d:93:0e:e9:34:f2:05:bc:e6:
b4:52:eb:5e:5b:6c:2c:1e:fc:55:1f:e7:29:6d:bf:
fb:6a:d7:fa:9e:e8:7b:64:c4:96:70:7d:b3:9e:0c:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:73:50:F9:D4:94:1E:7E:38:4D:AE:B9:DB:05:BB:17:BB:E3:6B:8A
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:94:be:c4:fd:10:c6:6c:ef:85:15:c4:e9:8b:4e:a1:a5:ad:
50:4c:d8:85:be:83:a9:f5:21:2f:52:a0:33:1b:62:38:7f:06:
db:f5:1a:4e:6c:2b:fd:9e:b7:5c:f1:b3:d1:34:43:a6:5e:30:
6c:8d:39:21:0e:85:3c:b3:38:a0:1f:d3:00:60:36:15:a1:10:
87:e3:3c:a1:a5:8c:91:91:d5:7e:8f:78:72:17:e6:8e:71:6d:
5c:36:34:2b:93:49:e1:f5:75:9e:45:00:5f:f4:d3:14:ad:2b:
35:fe:ff:44:42:11:5b:c9:2a:72:35:4e:6f:e0:49:66:c2:c5:
48:62:54:f1:57:e3:52:c2:52:61:77:48:e3:f6:66:eb:44:60:
95:6f:4e:9d:19:6a:cd:ec:c1:a6:c2:f6:2a:aa:cd:70:7e:f1:
2d:e5:ed:1c:d3:44:49:2a:3a:a7:1c:62:83:df:52:4a:6e:7c:
39:81:70:a5:25:d9:f7:be:f1:1f:f8:e9:99:b3:a9:76:5f:b2:
16:51:bc:3d:7b:a5:d4:35:96:17:83:0b:40:1b:a8:e8:e7:6e:
ce:3a:2d:44:0a:54:c2:74:76:4b:21:02:bd:67:2e:06:bb:08:
14:7a:06:02:0d:fe:41:3d:da:c3:d0:fc:e0:f3:6f:13:71:0c:
36:b4:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:39:24 2025 by rpki-client