Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier: BODSg/GPLaD7kTz1RZ3SU1HPuMB4+vNFDGXZM1TsJ0Y=
Subject key identifier: A5:FE:CD:22:71:D1:45:FE:65:D2:04:41:D7:4A:B4:47:68:74:B5:4F
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 019843D13BFC2FE5CDCA5D247D6D0A9CF0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number: 160A
Signing time: Fri 25 Jul 2025 23:00:42 +0000
Manifest this update: Fri 25 Jul 2025 23:00:42 +0000
Manifest next update: Sat 26 Jul 2025 23:00:42 +0000
Files and hashes: 1: Mmi06jAh1KR0NNHlTuLcdFXGdm4.roa (hash: Q9joIkxkfDcIZMMuVnLQE37iPkqzALSBCPVV1CY/m7A=)
2: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: AOf0V3Mb7GzEoE+pQyaU23sRYDDV5Gxc6IAyV6mrJ94=)
3: bObL7vPF35vh9LuEyJYMk5yU3-U.roa (hash: eG1lFL25ltcNTKgnhPFmeY0axMsTOI37jTMaagRA/AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d1:3b:fc:2f:e5:cd:ca:5d:24:7d:6d:0a:9c:f0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Jul 25 23:00:42 2025 GMT
Not After : Jul 26 23:00:42 2025 GMT
Subject: CN=a5fecd2271d145fe65d20441d74ab4476874b54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:28:d5:62:87:66:da:54:7e:fe:24:79:40:
5b:e8:e9:7e:47:45:08:64:b2:1e:7e:be:df:85:c6:
8a:d0:97:7b:eb:c5:d2:bf:d1:5f:35:03:1f:5f:72:
6a:eb:d3:6e:67:84:ee:db:18:f8:42:61:ac:df:fc:
2e:fd:8a:3a:b0:7e:58:a1:ca:75:46:57:6d:11:bd:
ad:0a:b3:b7:09:e3:e7:db:a2:d6:18:61:af:fb:85:
2d:3c:fa:e6:1f:d4:23:89:fa:46:6d:58:58:f6:be:
54:00:9c:08:33:2d:82:43:3d:3b:dd:78:29:0c:74:
ca:59:00:d7:2b:e8:28:2f:16:ab:a9:c0:1d:8a:19:
bb:ef:c7:2a:e2:e2:e9:4a:ab:57:c6:19:f4:fb:31:
1f:02:f0:33:fc:1d:cf:0b:10:bd:39:50:b4:eb:c6:
57:97:93:a0:bb:1e:bb:de:3c:43:24:f0:aa:57:ac:
d8:98:43:31:b6:a1:1e:67:b7:35:de:40:f9:60:1f:
2c:bb:95:89:d2:c0:21:c1:a1:fa:25:fc:c8:8b:2f:
39:43:6d:60:d5:56:77:fd:65:e8:51:09:65:6d:fa:
45:b0:a7:3e:8f:dc:95:f8:72:73:f3:65:b5:11:13:
db:05:df:2f:ef:6c:9d:89:fe:f8:5d:d0:39:bf:f0:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FE:CD:22:71:D1:45:FE:65:D2:04:41:D7:4A:B4:47:68:74:B5:4F
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4b:2c:d0:f5:4d:cf:74:0b:f0:e5:de:72:b1:3e:ac:93:e5:
8c:08:09:c5:92:e8:60:cd:8f:7b:c3:36:25:9e:96:10:ce:0c:
9a:9a:dd:5d:c3:59:5c:4b:b3:fc:24:2a:56:6b:78:8a:fa:ca:
c6:ce:c4:7e:9a:5a:5c:a3:e7:be:c0:46:8b:7e:77:31:8b:92:
4b:e3:88:cb:42:ab:d5:0b:73:a4:55:5c:bb:8f:24:8c:87:39:
5d:86:3e:28:3a:db:34:94:4c:4c:93:14:cf:30:81:ed:9e:5a:
06:6b:17:f6:0d:16:38:0b:f7:24:4b:27:64:8f:3c:a0:b9:c2:
50:0b:38:51:fb:e0:56:d8:c9:5c:1f:49:96:6a:b0:e8:4e:e7:
bd:3d:73:f5:7f:23:0d:e7:04:08:76:2c:b5:64:fb:e6:d8:d7:
5f:ec:06:fc:5a:bd:48:5d:ef:f9:9c:0a:db:d7:d5:ae:db:c8:
4a:1e:cf:82:47:db:80:45:fd:5b:fd:12:cc:48:db:27:b8:21:
34:7e:39:0d:5b:be:e8:d8:56:a3:6a:f3:37:ed:6c:80:c9:ba:
53:03:0a:8b:57:50:5c:c7:43:e8:35:d8:84:a3:b3:e7:08:5d:
d1:c9:4c:f9:8e:48:f7:59:6f:d5:87:34:8b:7e:f4:5d:79:b3:
b9:97:3d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:52:53 2025 by rpki-client