Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier: mLG9RM3oyWf+oeBpxrIJqQ4wgGZ2XsTUMx/zcFLUVs0=
Subject key identifier: 55:31:C9:1C:47:C4:21:D7:B4:85:7B:2E:3D:6C:5D:87:F2:34:7E:B9
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial: 01992255BCB347137925182638A86E933BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:01:08 +0000
Manifest this update: Sun 07 Sep 2025 04:01:08 +0000
Manifest next update: Mon 08 Sep 2025 04:01:08 +0000
Files and hashes: 1: Al5XA-JtcwQZgxg8lrEchelWFKc.roa (hash: awq0OKEpSlRcquvq5uS+1UqeIOS4jFcQD5+W9s9X3Ag=)
2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: 4qZnyW3kFvPO/A7rMSbGXHNkwwpVlD+SqAUmEIAEI0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:bc:b3:47:13:79:25:18:26:38:a8:6e:93:3b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
Validity
Not Before: Sep 7 04:01:08 2025 GMT
Not After : Sep 8 04:01:08 2025 GMT
Subject: CN=5531c91c47c421d7b4857b2e3d6c5d87f2347eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:71:3e:b1:22:7d:7a:24:3e:23:cf:d5:90:
3b:44:79:15:eb:7c:5c:7c:ba:18:1c:5d:ba:d7:36:
e2:c0:62:ee:8f:83:d8:7d:d5:9e:a3:c8:ba:e9:79:
d2:99:ba:cf:a9:86:87:e7:57:bd:98:b4:59:9d:86:
ad:0d:80:c9:aa:fe:6e:d9:8e:78:71:31:3e:4b:34:
de:ec:24:fd:d1:0b:c2:a8:5b:33:e8:7c:a8:e8:4e:
44:c1:98:25:29:19:6e:da:6b:6a:9d:20:93:a9:3f:
b3:d7:1d:46:d4:d8:9c:d9:a3:70:23:11:a0:76:d9:
ea:9b:d0:0c:5b:d1:f1:1c:f1:c8:e9:d1:07:06:4e:
52:a3:75:bd:34:58:0d:30:6b:51:73:1a:d4:5d:20:
4a:fe:d0:f9:ff:e1:05:3c:0b:fa:71:28:82:c3:37:
cf:73:42:9b:d1:03:fb:0e:85:dc:d7:46:7e:11:c3:
0d:27:42:0c:b2:be:88:b3:f4:15:2c:22:ad:0d:d9:
a5:45:3b:c6:47:23:84:ce:2b:f8:5e:e4:2c:3a:40:
06:7c:0c:73:d8:4d:98:c0:7c:c0:6c:b9:86:b8:31:
51:06:f2:ad:f2:24:57:1a:0a:b8:12:ca:8d:f6:69:
4a:89:c9:e7:d0:bf:44:78:6f:b5:32:5a:32:22:92:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:31:C9:1C:47:C4:21:D7:B4:85:7B:2E:3D:6C:5D:87:F2:34:7E:B9
X509v3 Authority Key Identifier:
keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:26:54:52:e1:0b:ea:7e:fe:c7:c4:08:8b:0c:96:ef:1c:69:
0f:a6:da:f0:5e:88:f4:bc:42:9d:f5:52:5d:3f:95:3b:d6:5a:
b6:55:bb:ac:50:c5:33:b3:c0:ba:7c:e9:5d:b9:36:20:2b:36:
12:2b:0a:f4:f9:30:60:c8:32:5d:2a:77:b5:01:10:37:a6:d4:
42:42:a6:7b:6a:19:71:87:ce:97:8e:90:4a:b8:ca:a5:58:84:
7a:5f:57:1c:36:b6:6c:1f:b0:be:e0:bd:e3:d1:bf:2c:c6:fa:
cf:4e:91:a6:80:8f:3b:62:41:2e:6e:ec:7e:ad:bb:92:b6:47:
4d:64:55:5a:9a:43:b5:83:31:b5:fe:3b:a5:18:1a:cf:20:bf:
98:a7:4a:b5:6c:f9:dc:72:ad:09:ae:e9:7f:cf:8d:85:09:62:
39:08:d9:05:71:cd:8d:aa:d3:c8:f6:63:a9:20:6a:a0:fc:fd:
e8:4a:5e:d8:c7:3a:cc:d6:0c:bb:33:35:35:2f:08:5b:6d:84:
09:15:f6:ed:0e:f0:cd:2b:04:71:5c:99:b8:92:74:0c:26:57:
cb:3d:59:ca:ab:a5:33:fd:d3:3d:be:64:7b:32:33:a2:dc:1c:
6f:71:ef:98:3d:b0:67:24:4a:93:bc:8d:f2:4f:d0:7f:b6:fa:
bc:8d:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:46 2025 by rpki-client