Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: 2VhWFhXyAMK2Z180kAsqi8aqNuXGJnNZx8IudEHrsI0=
Subject key identifier: 13:31:B7:5C:B2:02:07:AD:66:5C:DF:49:CA:F2:4F:49:19:84:A9:4B
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 01985569571FF4A24D6A6FD7046E3EC160DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 09:00:23 +0000
Manifest this update: Tue 29 Jul 2025 09:00:23 +0000
Manifest next update: Wed 30 Jul 2025 09:00:23 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: ZBE4Q7GiR/eqRMsoatEuAstR9HBMtMyLYe9CFLnBMss=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:57:1f:f4:a2:4d:6a:6f:d7:04:6e:3e:c1:60:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jul 29 09:00:23 2025 GMT
Not After : Jul 30 09:00:23 2025 GMT
Subject: CN=1331b75cb20207ad665cdf49caf24f491984a94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:9f:94:89:f3:47:6f:c4:0e:54:0f:ed:7b:
b6:b8:aa:57:bf:c9:d9:e3:fa:be:eb:d7:38:df:87:
51:b4:cd:01:a1:1b:73:1b:01:1a:19:b1:86:44:36:
ce:f3:6f:2e:03:06:85:a2:32:f9:75:44:c6:a5:f1:
50:51:f1:d9:d7:e3:bc:66:f5:dc:66:14:d5:43:83:
f2:72:e5:51:44:fa:54:5f:9c:fc:c0:24:51:0b:14:
0e:57:c1:ec:89:3f:23:03:b8:88:50:9f:83:47:31:
c3:2e:e8:8e:e9:c1:02:65:8d:87:60:de:e7:1e:89:
b0:1d:ed:6a:e2:eb:14:51:f8:af:d1:00:ed:25:94:
87:82:d1:59:7a:ff:99:5a:34:40:d7:3d:1d:a4:24:
a0:68:63:49:4e:cc:f9:46:6f:e2:41:bf:75:b5:e1:
54:a9:a7:56:68:be:07:47:ca:59:3c:df:ce:da:11:
24:de:40:11:f0:6a:ca:ad:47:94:a0:f8:50:49:e9:
df:a8:3d:16:2b:90:e0:ac:31:e1:43:1f:78:d6:45:
90:12:4a:67:bd:99:f1:06:60:20:e3:b5:78:76:d2:
db:bb:03:27:27:2a:da:8e:89:ef:8b:c7:62:c2:b7:
e9:4b:c1:ae:e6:af:fc:a1:64:e2:46:ff:7a:31:77:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:31:B7:5C:B2:02:07:AD:66:5C:DF:49:CA:F2:4F:49:19:84:A9:4B
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4c:91:99:a4:07:3f:24:54:a7:a2:14:b3:75:ad:41:74:ce:
c1:7f:33:6b:2b:91:11:b0:09:5a:67:7b:a2:89:1b:5c:25:23:
35:7a:e3:9f:a2:35:a9:a4:2d:36:ff:da:b3:bd:d2:65:f2:19:
d5:0f:06:cf:db:d2:b0:d0:aa:e3:4e:67:87:d2:fa:62:7f:3c:
9b:1b:f8:09:1e:92:29:3f:b4:12:0d:bd:b5:fb:8f:17:8b:36:
74:27:f6:a5:90:8a:a2:c4:50:03:80:a5:63:ac:2c:a1:1f:68:
2c:d7:56:82:ee:47:e5:f3:d1:ab:ff:89:32:a7:43:01:42:f7:
0a:0f:f9:9d:1a:e5:b2:9c:ed:7a:9c:4a:57:aa:29:82:31:66:
2e:5d:60:a8:5d:62:bb:25:27:5e:e7:21:2d:45:dc:85:74:db:
ed:61:57:60:95:0c:67:c3:cb:71:16:85:e8:88:49:4f:e1:a6:
ee:16:83:e5:32:7a:bc:14:65:77:a2:7e:a2:81:bc:15:7a:89:
33:f8:18:26:52:e4:bd:50:74:97:cb:fa:3c:04:b7:fc:6a:e2:
f3:31:26:a1:ff:93:33:a5:86:44:fd:f9:0b:9c:b9:2e:3b:bb:
2f:ab:79:7d:66:9c:51:fc:00:c7:aa:17:4b:21:6d:b8:cb:9e:
ad:f8:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:08:12 2025 by rpki-client