Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
File: aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft (raw, json)
Hash identifier: eQcNPseapgqdqE17e050VMGYtH2lOyC/sfXif3xqXqA=
Subject key identifier: F1:6E:A2:D2:2F:E8:05:63:73:1D:71:D4:6C:D1:55:E5:F3:8C:8F:EB
Authority key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Certificate issuer: /CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Certificate serial: 019847773052369B98C770109A3D70AC327E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 16:00:49 +0000
Manifest this update: Sat 26 Jul 2025 16:00:49 +0000
Manifest next update: Sun 27 Jul 2025 16:00:49 +0000
Files and hashes: 1: Hpq861GqA5RqLih08GH13MdllW0.roa (hash: 6UGmd69y3tVELywuvYudCcD/UUgHO86OmDHx4Pt/TNE=)
2: aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl (hash: G4x8RdgSBfPv384NpookKvzL4eha2DQ4J5HWwd3ZngQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:30:52:36:9b:98:c7:70:10:9a:3d:70:ac:32:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Validity
Not Before: Jul 26 16:00:49 2025 GMT
Not After : Jul 27 16:00:49 2025 GMT
Subject: CN=f16ea2d22fe80563731d71d46cd155e5f38c8feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:b2:c3:9c:39:13:2d:aa:a8:d5:9c:e1:b6:
c6:fc:e1:74:8c:2a:72:5d:fe:cd:ff:6c:0d:4b:e3:
6e:17:56:7c:56:f8:4c:77:77:01:c8:c2:cd:07:b2:
8b:6a:7e:11:cd:d4:09:3f:3e:31:98:5b:64:07:7a:
14:ba:56:6a:cd:ed:08:f2:2e:56:1a:b3:27:3d:5f:
89:06:de:45:34:26:04:ea:b1:39:3f:15:a8:e2:2b:
4e:d8:e8:8a:42:79:ef:8e:ef:00:72:44:47:92:99:
bf:4b:28:78:a5:29:a6:e7:d7:2a:5f:91:d2:d3:b5:
0e:fb:1b:f2:8b:3a:b3:19:ac:e1:6b:4e:d0:8b:54:
d9:28:88:2c:a3:50:b1:66:94:ac:56:75:03:1b:5d:
b1:10:9b:b2:f0:24:36:7b:b0:5b:f6:da:43:bd:be:
f3:cb:91:ad:8c:38:cb:72:8c:87:7f:c9:b7:d3:dd:
5d:fd:19:7a:e3:58:7c:70:15:38:82:e7:76:e7:7f:
03:86:e3:d7:0c:1d:34:b5:fe:3e:2b:ad:b3:d5:7a:
69:17:4f:17:ba:eb:cc:f9:db:e7:9c:a3:50:d6:4a:
2c:55:ce:4d:0f:0e:17:c6:ea:6b:7f:3c:e3:f3:8f:
f4:1c:e7:04:2e:07:fd:08:1c:44:22:f1:f9:c5:7b:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:A2:D2:2F:E8:05:63:73:1D:71:D4:6C:D1:55:E5:F3:8C:8F:EB
X509v3 Authority Key Identifier:
keyid:68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f9:b0:a7:35:33:50:a6:cd:2e:f1:b6:9d:6a:41:37:51:7c:
b6:db:d2:6a:bb:53:86:ed:90:53:1f:42:e6:06:e5:07:a6:42:
23:57:d6:bc:80:a9:a3:3e:51:19:32:6c:a3:20:60:0d:12:5a:
fd:f9:2a:29:60:95:d4:eb:6c:25:c2:e2:af:70:e4:0d:11:9f:
9a:df:52:5d:5f:50:d9:af:1f:ce:15:13:12:81:73:74:48:f2:
72:74:45:e9:a5:69:52:20:b2:e4:67:40:d0:3e:a2:88:0e:6b:
26:24:d1:05:6a:d0:35:c8:9a:96:c9:a1:1b:01:5a:12:69:04:
39:de:0f:3b:2b:13:c0:82:b1:81:cf:42:86:98:4a:87:79:6f:
ae:43:84:36:e0:e7:6a:ff:30:6f:ff:f0:0b:03:a6:61:ff:b2:
de:8b:07:e1:d8:e1:49:65:d1:75:79:0d:38:74:f0:fa:91:5f:
21:b1:1c:ea:23:bc:d4:bd:12:07:06:84:c4:d6:6a:3b:b8:2a:
5b:bb:cd:42:a3:3e:2f:e0:59:b2:da:a0:71:93:8c:76:f3:a6:
05:15:32:bb:34:90:4b:c0:f1:70:14:85:e8:24:f8:66:07:4f:
a5:90:59:ee:47:1d:ff:c6:19:10:3e:e6:44:ef:32:1e:63:fc:
63:43:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:03:56 2025 by rpki-client