Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: tU/2ASAm3XyR8DeBeYPFvAlN1OUXn3ShppLL2Mcw250=
Subject key identifier: 4B:02:CD:2D:C1:BF:7E:F1:25:56:B6:C8:45:08:1C:5C:8B:EE:95:4E
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 019849D2E29838873938D69CDD0A95DC51E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: 0194
Signing time: Sun 27 Jul 2025 03:00:13 +0000
Manifest this update: Sun 27 Jul 2025 03:00:13 +0000
Manifest next update: Mon 28 Jul 2025 03:00:13 +0000
Files and hashes: 1: OXOnare6dVM-zLYHWOSVEGQTw18.roa (hash: dcwy2HRQRShbBLQYZ7Zn1DYc8vKW+hy7H3ObhuzMkSQ=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: PKHfD4DcAeOf6s7i39wE2JMitYpB8IZbll5Pjct6snA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e2:98:38:87:39:38:d6:9c:dd:0a:95:dc:51:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Jul 27 03:00:13 2025 GMT
Not After : Jul 28 03:00:13 2025 GMT
Subject: CN=4b02cd2dc1bf7ef12556b6c845081c5c8bee954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:a1:c5:10:7d:fa:50:d2:30:6d:55:31:67:
08:82:c0:74:49:47:46:d1:5f:da:f4:31:84:a3:6a:
88:88:17:09:a0:63:02:0c:9b:ab:fd:ba:16:e4:9c:
8a:ec:dd:bc:92:06:9f:55:52:30:bf:95:83:c5:27:
df:b3:0b:7d:b2:cc:9d:54:6e:3b:a5:54:11:0f:dc:
87:85:d6:07:a3:a1:93:7d:ad:75:7b:53:cc:3a:0f:
c6:c0:44:b0:c6:f4:83:31:60:11:69:60:1a:b9:9b:
54:4b:fa:28:22:ca:20:cf:12:dc:73:85:66:78:d0:
b7:c6:54:6c:16:3b:ed:00:da:5d:9a:16:db:c2:29:
14:6b:93:e3:f6:ee:25:46:7c:f5:18:3e:f8:ed:75:
5d:15:90:e6:bf:de:b9:a6:44:b3:1c:68:5b:bb:08:
34:84:ca:4b:78:9f:d2:5c:22:17:be:a4:c3:03:a7:
7f:8e:a7:18:dc:88:c1:e0:d8:03:20:39:18:0c:b6:
7e:0e:90:4a:7b:7c:95:49:29:30:43:1d:c8:80:10:
2d:13:3e:9c:09:9b:76:38:15:93:74:d5:45:f1:80:
63:0d:59:e0:0b:12:97:43:ea:17:eb:40:42:f3:45:
cc:67:54:6c:2d:59:b8:57:7f:4a:62:07:1b:a7:22:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:CD:2D:C1:BF:7E:F1:25:56:B6:C8:45:08:1C:5C:8B:EE:95:4E
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:45:ee:62:8f:69:3f:89:44:04:76:1b:11:33:1d:9e:1c:
49:be:f2:c5:89:f5:62:06:b8:03:35:95:0d:e4:cc:90:96:51:
4e:11:ba:a9:d2:e4:f8:df:b3:22:49:0e:1d:f2:28:cc:b3:cd:
2e:26:02:82:d9:d5:76:b7:47:09:1a:ed:fa:a3:b1:1b:d9:b6:
6f:b2:9c:62:6d:89:94:34:0c:b1:13:95:83:61:09:46:f9:26:
a0:e2:6f:15:35:a9:78:2a:b1:eb:44:67:70:d1:d5:b6:ae:84:
52:4a:19:97:a5:23:5d:68:39:91:a5:d9:eb:ef:c2:bb:81:76:
59:31:22:3d:05:6e:16:30:24:3f:4e:e2:75:3f:f2:71:b3:c5:
52:e6:6e:c2:3a:19:10:8a:61:e0:9a:f7:8d:9a:fd:ca:cc:08:
37:ab:e3:29:34:30:2a:54:72:9a:69:f4:ac:a8:cd:7f:d2:da:
28:e3:6d:58:d6:3b:0c:33:fc:08:7d:d2:61:43:b3:18:a6:30:
75:1d:2e:2f:86:da:68:2a:82:0e:e1:98:b7:75:fe:d4:d9:23:
e3:fb:4e:1e:81:18:42:c0:96:4b:96:9f:f8:7c:d2:10:91:a2:
c1:35:5e:dc:1d:d5:5d:8d:78:a3:9f:d5:6c:2c:e9:08:6f:b3:
f8:b3:27:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:24 2025 by rpki-client