Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
File: aUSJSM9NjazkdxjA9yWe3usJPns.mft (raw, json)
Hash identifier: lQcRQ6+tBep9ve7XDLbXyOIVjvYCp6Ja0O/vqpkBUA8=
Subject key identifier: 3D:05:0E:E3:C8:1E:90:5C:94:A7:60:9C:7D:90:AC:D9:99:43:73:F3
Authority key identifier: 69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B
Certificate issuer: /CN=69448948cf4d8dace47718c0f7259edeeb093e7b
Certificate serial: 019848C02D0CF3B38D8EF3E82FD8DE9F4AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 22:00:10 +0000
Manifest this update: Sat 26 Jul 2025 22:00:10 +0000
Manifest next update: Sun 27 Jul 2025 22:00:10 +0000
Files and hashes: 1: aUSJSM9NjazkdxjA9yWe3usJPns.crl (hash: qHGFGoQE+FxIpE+RbsMHNHROk34/hdtOEov5A6nUHYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:2d:0c:f3:b3:8d:8e:f3:e8:2f:d8:de:9f:4a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69448948cf4d8dace47718c0f7259edeeb093e7b
Validity
Not Before: Jul 26 22:00:10 2025 GMT
Not After : Jul 27 22:00:10 2025 GMT
Subject: CN=3d050ee3c81e905c94a7609c7d90acd9994373f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:8c:a1:6d:c2:2c:42:1b:1f:fd:6c:ff:aa:
11:91:af:c2:27:a4:e1:98:2c:62:ff:da:b7:a7:90:
c3:5e:41:0f:21:87:35:80:45:d4:01:53:38:a6:db:
3a:7b:be:af:4b:84:f7:a2:2a:0b:21:a2:18:77:b4:
7b:5e:3f:73:31:b6:30:b1:77:ba:ca:49:9a:85:94:
04:af:45:91:33:a6:ad:a2:1d:6a:38:60:3a:b4:72:
10:de:93:04:e9:b7:b5:3f:7d:66:22:98:84:2b:5b:
2d:5e:09:68:1d:03:b1:d7:81:92:da:70:ff:c7:e8:
71:69:8b:ba:c6:2a:20:e7:f2:c6:c1:6f:72:62:67:
10:57:e2:24:76:af:7d:25:e1:bc:4a:86:2c:db:6f:
b8:fd:50:5b:51:a7:04:04:ca:e0:cd:db:eb:7e:86:
4b:8b:fd:67:5c:46:e1:23:b9:44:29:c0:46:f3:e5:
9a:04:33:63:f9:09:1f:b8:09:a6:1f:44:24:3b:94:
67:d5:c6:98:a8:4e:67:a9:8e:2c:c1:6c:0d:aa:9d:
33:73:aa:47:42:7c:03:f0:2d:c1:a7:81:fa:96:0f:
c1:25:7e:a5:22:b9:88:49:d5:ab:5b:a9:27:89:91:
73:44:73:57:c7:7e:d7:14:2d:bd:a0:e5:71:fb:a9:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:05:0E:E3:C8:1E:90:5C:94:A7:60:9C:7D:90:AC:D9:99:43:73:F3
X509v3 Authority Key Identifier:
keyid:69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:19:bc:9a:34:65:87:e1:2d:2d:d2:13:82:2b:70:e6:c7:
45:fb:6a:37:70:86:57:81:34:fc:b9:b2:c7:8f:03:8b:0c:9f:
a9:e6:2d:c1:ed:18:71:2e:55:f1:97:d9:ee:35:7e:0a:c8:93:
3e:89:1a:b2:74:79:9b:e5:64:1c:ca:49:a6:d9:47:c0:18:71:
f6:d5:4f:f7:ae:80:2e:d4:49:8f:32:75:bd:0e:a2:f9:2d:c1:
e4:38:8b:d8:80:9c:ed:bf:0f:ab:04:3c:50:c1:4f:59:2d:dd:
a1:2e:dc:b4:2b:e9:ae:03:d8:b2:15:60:e9:f6:43:1f:84:0c:
85:77:ca:0a:14:47:77:9b:78:1c:3f:d5:04:17:48:5f:c9:88:
a0:8f:b8:f4:f7:52:34:97:31:95:e0:23:55:21:dc:a0:8c:88:
62:29:d4:0f:d7:c6:e9:91:ae:84:53:e5:18:82:86:00:f0:51:
25:e9:18:65:57:9f:f5:6f:9a:ff:f2:d0:ba:5d:ec:5e:a8:17:
69:74:14:66:48:4f:dd:63:91:73:2a:c1:be:9e:a9:15:25:52:
4b:c4:80:a0:41:d6:c1:41:aa:ac:9d:26:9e:26:0c:18:3b:8f:
93:6a:a4:c1:4d:b6:1c:ce:a7:85:14:a0:f9:ea:06:d4:a6:ff:
96:2b:e3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:54:52 2025 by rpki-client