Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: 7cUcTK2qXzcapqcdELH0mrHYqUD7pPW6PEFrxvOblRE=
Subject key identifier: 62:2B:15:8C:C1:7F:34:B5:55:6C:EA:28:3C:C7:DB:46:73:20:FE:FD
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 01984A0A5E528BB5FF1F45AC1A97D3C587B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 04BF
Signing time: Sun 27 Jul 2025 04:00:50 +0000
Manifest this update: Sun 27 Jul 2025 04:00:50 +0000
Manifest next update: Mon 28 Jul 2025 04:00:50 +0000
Files and hashes: 1: N-BSf874DQvK549b1pSEfsfJ-W8.roa (hash: bW40XSisvNpm05Mkk5fR9GiNdKpGc7uzNKkhrhBHqx4=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: HMsdSf+VoAECyFhJ3ln/rVbbT8slRniC5eWJ2cfLyqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5e:52:8b:b5:ff:1f:45:ac:1a:97:d3:c5:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Jul 27 04:00:50 2025 GMT
Not After : Jul 28 04:00:50 2025 GMT
Subject: CN=622b158cc17f34b5556cea283cc7db467320fefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:df:cb:61:72:7b:52:a7:f4:c8:09:e6:85:
1f:08:02:d2:32:c7:5a:d4:c6:49:02:01:ff:17:48:
d2:7e:ff:75:78:73:b0:43:10:74:bb:3e:0f:20:96:
fd:cc:94:07:54:55:7a:c0:ee:88:b8:da:47:e1:74:
2b:cf:f9:05:1b:9b:db:c1:b2:64:d9:a6:7a:f9:95:
0e:78:73:71:8a:9e:48:24:66:97:78:22:e3:d8:bd:
0a:39:4c:e2:aa:b0:58:ef:e7:0d:df:a8:85:c3:cd:
06:71:0c:28:e0:c1:38:a4:51:36:79:f3:9f:fe:93:
65:63:2d:53:fc:65:85:41:11:d7:ca:d7:b4:f6:a8:
6e:45:a0:88:ab:65:63:b6:7b:9e:62:7b:c0:ea:e9:
e1:9e:1a:d7:8f:36:28:d2:b4:69:8c:a7:85:c5:f8:
9f:ba:22:a9:94:c0:73:f9:fc:b1:77:ff:5b:f5:9e:
43:9a:0e:9e:57:d2:08:42:ec:93:d4:44:0f:e8:72:
cb:f5:e6:66:10:88:1e:7c:05:83:ba:02:74:5f:c9:
65:74:86:c8:59:d0:97:43:8e:d8:af:88:b7:32:cb:
60:a7:bd:e3:0d:97:67:be:91:3e:71:c4:17:0a:b9:
48:38:4f:01:ee:8b:aa:2f:e6:07:d5:7e:74:1e:53:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2B:15:8C:C1:7F:34:B5:55:6C:EA:28:3C:C7:DB:46:73:20:FE:FD
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a7:9f:dd:62:b7:c9:29:31:7a:5b:0c:8f:46:e8:11:af:e3:
ab:b9:ec:c1:1b:f2:ed:14:71:35:fe:e1:19:68:d5:f1:1a:34:
20:2c:83:c7:af:8e:75:01:65:e6:15:f5:07:38:6a:41:33:2f:
c1:8c:e3:46:56:40:0f:c0:6b:5b:e9:b4:5f:3c:cb:ce:38:a5:
2a:8a:c0:8a:1c:75:8e:d4:68:67:51:ec:45:38:81:9d:3a:df:
d4:9a:34:8b:bc:3c:47:dc:2b:19:02:05:3c:38:67:8c:ca:2e:
01:0e:b3:da:43:94:14:2e:0e:b9:30:aa:c5:74:60:11:28:e1:
7d:62:28:e4:33:35:c3:cc:42:e0:15:bd:02:2b:f4:55:22:f0:
36:c8:94:ce:f4:f4:20:b4:ed:c6:6a:ad:af:52:d6:87:26:28:
9a:38:f1:24:e9:2c:75:bb:36:f0:2a:25:0d:fe:61:2b:16:88:
8f:5b:b5:11:f7:f2:67:ca:88:94:92:55:e3:7c:08:7b:8f:2d:
fa:6a:40:9f:25:9e:1b:27:d6:08:50:64:be:0b:06:48:80:d2:
e8:01:c0:d2:d5:b0:65:ac:8d:93:8b:20:25:83:2d:1a:16:f9:
e4:8e:c8:72:03:ee:50:f6:1f:8c:b5:c9:dd:26:48:6b:3d:fc:
ab:6a:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:05 2025 by rpki-client