Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
File: aNLCXQU0pAJ8aVViqM5PABzVOW8.mft (raw, json)
Hash identifier: nfp2MlPTy5U7lpWtujPglEUOO7ZPpgYPhjbY2ceZtXw=
Subject key identifier: 82:60:67:98:20:A2:41:34:92:11:69:B0:83:DA:7D:4B:E8:E8:C2:AD
Authority key identifier: 68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
Certificate issuer: /CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
Certificate serial: 019848F79DCE8AEA003ACCC883B5D21A3315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
Manifest number: 1254
Signing time: Sat 26 Jul 2025 23:00:43 +0000
Manifest this update: Sat 26 Jul 2025 23:00:43 +0000
Manifest next update: Sun 27 Jul 2025 23:00:43 +0000
Files and hashes: 1: SALrx8y5x39WJ8efwGiimpmg788.roa (hash: CtpmQiaYAVz0sehGOLMPmKtW82021GvqOFqhQ5ojIPI=)
2: aNLCXQU0pAJ8aVViqM5PABzVOW8.crl (hash: Z7FJKSQB969Nmt3iwgiUGIkRRO1Vmn6Rw6NsP5RzVw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:9d:ce:8a:ea:00:3a:cc:c8:83:b5:d2:1a:33:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
Validity
Not Before: Jul 26 23:00:43 2025 GMT
Not After : Jul 27 23:00:43 2025 GMT
Subject: CN=8260679820a24134921169b083da7d4be8e8c2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2b:f6:f4:b7:44:2d:32:17:52:c4:dc:f8:e0:
66:04:bd:c0:e3:b8:dd:aa:0a:c4:2c:27:50:97:76:
9a:85:0c:23:ea:18:09:15:47:a5:60:5c:10:33:90:
0c:18:99:e0:84:63:c5:0d:b7:53:af:42:84:5e:ce:
dd:87:cf:95:8c:6a:16:62:3d:05:93:06:8a:02:49:
5d:67:3c:41:57:2f:70:4e:cd:36:16:22:26:87:a8:
c6:bc:f9:4e:ae:67:ac:c6:af:c5:11:9e:bf:6f:5f:
7e:5e:cf:7e:f6:6b:2a:8a:ed:a2:de:23:ea:7e:e0:
8c:bb:2a:9f:60:10:45:cf:94:85:a3:8d:d9:2d:43:
17:a0:d5:43:83:58:8d:00:eb:9c:5b:06:8f:6b:37:
17:9f:75:be:e8:3c:88:d0:2b:6e:e4:36:a1:b4:6e:
c7:4c:d9:a6:75:45:12:94:a2:c1:ca:51:22:e9:6a:
43:07:d0:a0:63:24:6d:c8:77:7c:3f:35:6a:a1:32:
d9:2a:16:6d:42:38:51:85:12:2f:ee:80:a0:eb:85:
14:eb:31:f2:0f:ca:65:9d:b7:3c:9c:5f:03:eb:db:
76:7f:1a:30:19:52:16:23:23:f7:2d:00:27:c1:7c:
8b:12:92:23:8e:c9:03:19:00:bc:f5:f9:d8:fa:6a:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:60:67:98:20:A2:41:34:92:11:69:B0:83:DA:7D:4B:E8:E8:C2:AD
X509v3 Authority Key Identifier:
keyid:68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:95:03:a1:b3:48:82:b0:8b:d6:7f:71:cd:5c:f2:cd:03:0c:
70:d6:32:ca:0a:fe:b6:43:af:18:5b:42:f6:61:99:a2:76:cc:
67:36:1d:60:86:50:33:12:e0:bf:c6:2b:2f:6e:0c:00:ab:db:
8e:f6:c9:7b:36:f3:be:2b:9c:e9:c9:bb:f5:5a:62:06:7c:c0:
0a:e1:ed:47:a2:6a:8d:ac:07:83:17:5f:9a:85:97:43:8d:a4:
b6:86:c5:79:85:f4:f8:38:73:22:1e:fa:d4:a9:53:12:51:5c:
ed:4d:88:43:e8:59:c7:6b:7e:b7:20:ce:4b:eb:e4:cc:b4:b6:
9c:a3:30:ee:37:d0:a5:73:bb:6c:b8:bd:71:55:0d:ce:c7:ee:
2a:bd:33:ba:f1:40:6f:bd:38:c9:4f:11:4e:e7:b4:5b:ac:4a:
f6:f3:ed:39:c8:97:b4:13:69:b7:2e:a1:7e:02:dc:d8:15:dd:
8f:07:c4:43:5a:a5:60:74:25:9b:fd:78:24:fc:0d:70:86:d7:
e7:af:e3:90:94:9d:53:78:ea:f6:d0:cc:23:fb:cf:86:4e:b0:
f1:50:4a:00:b6:f8:be:4e:99:66:0b:9a:0a:9d:f3:85:7c:5f:
50:9a:75:d0:45:c1:3f:25:e7:32:16:a7:bd:31:07:6f:9b:f5:
d6:9b:ce:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:29:34 2025 by rpki-client