Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: apX/M8Ux7eAP58fsNwuEJPIebbCv69LnD4h+3ysrgsc=
Subject key identifier: 4B:3D:CB:EB:8D:D2:79:AA:7E:11:EE:F1:FE:FD:23:E0:25:05:08:6A
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 019845890B39A9109DC5C9F0867557B33372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:01:05 +0000
Manifest this update: Sat 26 Jul 2025 07:01:05 +0000
Manifest next update: Sun 27 Jul 2025 07:01:05 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: GCtgOYNUb2L7KxsCAye6kVkL+TS1LcsfW2H0ukWmI6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:0b:39:a9:10:9d:c5:c9:f0:86:75:57:b3:33:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Jul 26 07:01:05 2025 GMT
Not After : Jul 27 07:01:05 2025 GMT
Subject: CN=4b3dcbeb8dd279aa7e11eef1fefd23e02505086a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:91:3a:0a:10:43:7f:ab:2c:43:99:c0:57:7d:
7b:f6:61:39:2d:c9:5f:ba:cb:f6:22:fe:3b:86:17:
6c:ac:9f:29:c7:49:a4:b6:c2:09:a5:c0:36:91:95:
31:ef:e5:4e:cf:79:12:f0:ce:81:cf:02:b3:cd:dc:
67:d7:38:d3:62:c9:3a:00:a7:4d:ea:91:b9:5c:a9:
c6:25:4e:4a:c5:73:ae:23:c7:bc:f4:46:94:2c:c2:
15:2c:22:79:80:5a:24:b6:bd:47:cf:8d:f7:ae:ef:
36:9b:d5:a5:ee:5d:ef:4c:3f:bc:14:72:30:ad:0c:
8f:59:29:12:c1:1c:b0:98:ba:6a:e3:c6:1b:57:ec:
84:e7:10:f1:8b:67:c5:9b:d9:32:9a:79:f9:cf:0a:
c9:30:f3:bb:df:9d:81:5c:ec:92:08:7d:46:7f:9a:
9d:a6:86:80:07:27:66:be:7e:74:d5:0e:87:d2:03:
11:56:74:45:b8:7b:5f:31:41:1e:9a:8b:03:91:f5:
87:90:97:12:64:20:0e:cf:6c:83:7d:21:f8:92:a4:
b5:76:be:b9:de:8e:80:1f:b4:a4:ad:e3:b5:e5:1c:
78:e4:3f:df:c4:85:c1:36:1c:48:1c:98:d9:d2:32:
71:eb:b8:e3:c4:e3:da:5e:e2:9b:f3:f9:5b:8f:22:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:CB:EB:8D:D2:79:AA:7E:11:EE:F1:FE:FD:23:E0:25:05:08:6A
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a9:e5:d7:dd:ca:e3:48:70:d4:c8:f8:be:ce:21:74:70:a7:
78:16:fe:46:e7:3c:aa:1d:a9:2b:20:61:2f:28:31:b9:a1:6b:
ee:ae:44:b8:cf:91:a3:ad:a0:00:38:ab:b6:e5:4c:c7:8f:80:
97:0b:60:cc:23:6b:0f:ea:9d:5e:e5:06:4f:d7:46:88:bd:ea:
2e:4f:39:ed:78:dd:98:2e:2b:8e:a8:d0:f3:09:a1:5e:3a:d7:
af:9e:57:1f:9c:e4:f6:7a:c5:3e:db:46:1b:d0:d4:ce:50:25:
6a:f6:eb:cd:c3:d5:6a:0d:8c:97:50:7a:59:a4:d2:4f:cb:23:
4e:05:e9:a1:3d:d3:1a:09:97:1e:09:eb:dc:12:26:56:c5:46:
08:6d:66:cf:b8:f8:93:64:7d:0f:43:14:2e:d9:26:ff:b0:39:
22:d2:4c:12:90:1b:48:b8:b4:c7:84:3d:c9:fa:18:d3:f6:1a:
b0:c2:aa:24:f3:94:84:3d:ca:00:34:59:08:90:6c:fd:b2:b7:
34:38:ce:c8:e9:64:da:de:a8:af:20:4c:f8:74:5e:a6:50:c5:
05:4a:82:37:ad:75:14:67:3c:b7:7e:0b:35:22:7a:2b:ee:c2:
7b:a6:4c:65:08:03:43:f8:da:fc:be:28:7f:a2:0b:ee:23:2c:
26:eb:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:09 2025 by rpki-client