Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: rfv4eYpMwag+yGI7oqxmbnxVRvaBs7dBhdlTZuvh624=
Subject key identifier: 0F:24:6C:7C:1E:24:3E:02:7D:FE:88:D3:33:C0:D2:00:CA:B5:2E:A5
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019848C08474698EB1ABE6D1136F0F653BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 22:00:32 +0000
Manifest this update: Sat 26 Jul 2025 22:00:32 +0000
Manifest next update: Sun 27 Jul 2025 22:00:32 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: M4GfVAPZck1syYf845upeGpkQofRR6U6OdOgCF8otB4=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:84:74:69:8e:b1:ab:e6:d1:13:6f:0f:65:3b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Jul 26 22:00:32 2025 GMT
Not After : Jul 27 22:00:32 2025 GMT
Subject: CN=0f246c7c1e243e027dfe88d333c0d200cab52ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:33:cf:06:1a:5a:3f:2c:27:42:9a:19:f3:
81:ac:27:73:5e:af:2d:ff:8e:e2:7d:8f:d7:e4:45:
0f:4e:c8:fc:6a:37:f0:1d:e5:be:12:ba:43:88:2c:
e9:4a:46:12:db:4e:52:04:34:3c:66:11:1a:1d:3f:
3b:05:a4:71:4e:55:07:9f:bc:b9:ee:e3:ea:f0:fe:
55:2b:b5:46:30:63:32:69:0a:d3:d8:92:e3:ce:81:
34:63:1b:48:63:85:62:2e:ea:a7:e3:9c:37:77:ec:
b4:cc:b2:cd:54:c2:a3:93:5f:ef:a8:cc:dd:5d:65:
8c:29:73:80:33:23:98:02:41:2f:87:4d:5f:3a:6b:
71:2e:d4:44:87:2f:48:2b:ee:fc:4f:d2:ad:74:42:
2a:d1:86:57:23:58:23:61:84:b5:98:31:be:1b:26:
e8:4e:8c:10:20:18:ec:d2:ff:2a:29:0a:59:7b:00:
28:35:a5:d7:13:c2:40:40:6f:6f:12:af:f3:80:0b:
e4:79:a4:b1:80:62:4e:71:d9:ea:bc:51:08:d5:ca:
71:d4:ad:ff:a0:fb:00:29:4c:0c:b1:32:2f:86:12:
12:97:07:bc:65:83:de:51:9a:c8:33:38:78:44:19:
30:c0:a9:58:d7:0b:d4:8e:14:ba:0c:d9:b9:cd:5d:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:6C:7C:1E:24:3E:02:7D:FE:88:D3:33:C0:D2:00:CA:B5:2E:A5
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:28:1b:76:a3:20:ba:e4:57:b7:7d:ef:70:99:f3:a2:e8:05:
ff:66:34:8f:38:b1:6b:98:32:22:eb:cf:4d:b2:89:6a:f0:bd:
31:13:1f:06:15:4b:cc:dd:3f:e7:47:58:f0:60:1e:67:40:9e:
50:0d:ae:2a:c1:af:75:67:88:7c:a5:85:56:fb:b6:98:22:c5:
1b:ec:dc:39:99:39:eb:10:2f:17:6b:a9:8b:f2:c6:99:0d:e5:
36:d1:45:ee:25:42:a1:b1:2b:d1:59:f3:9e:6c:4a:53:96:a6:
7c:db:d0:0c:f0:26:1c:44:b7:1d:11:d8:e2:b8:56:d0:90:b2:
53:33:b2:3f:f7:b1:14:32:4e:c9:93:fa:90:be:94:d9:d6:ac:
21:97:3e:b5:8a:bf:08:39:8a:6a:56:35:e0:7b:7e:14:ce:69:
38:e8:b8:a5:51:7c:83:ae:59:b8:91:8f:79:0c:2a:91:16:27:
0d:c7:60:a1:c6:03:05:a3:2a:f8:b7:47:b8:03:96:8a:b7:d2:
b8:9c:e8:d2:b5:eb:4a:bd:4e:41:95:fb:e5:79:3e:31:6e:0b:
71:d4:aa:25:3f:ee:db:f6:9d:69:2d:8a:19:3a:84:eb:12:36:
8d:6c:7e:c1:9b:c3:01:31:29:58:ed:5e:12:9b:d3:5a:b5:e6:
e1:8f:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:26:32 2025 by rpki-client