Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: pteS55t7eVTblyQZ/20DGwb40sdCWK+EmfcxYvMMqRU=
Subject key identifier: DE:CD:9C:5C:E4:7D:35:7D:FA:DC:65:63:A8:D0:12:37:59:7A:58:04
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019853E8B8202FCCC18C26422BDDA39FE9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1598
Signing time: Tue 29 Jul 2025 02:00:17 +0000
Manifest this update: Tue 29 Jul 2025 02:00:17 +0000
Manifest next update: Wed 30 Jul 2025 02:00:17 +0000
Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: fpH4nX3cQtWwJ6sxcXCo0QDq5XqhfSWOxSczDMr2Obo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:b8:20:2f:cc:c1:8c:26:42:2b:dd:a3:9f:e9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Jul 29 02:00:17 2025 GMT
Not After : Jul 30 02:00:17 2025 GMT
Subject: CN=decd9c5ce47d357dfadc6563a8d01237597a5804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:4e:5f:ef:d9:a4:8a:68:46:c4:d0:2d:64:
49:1b:2f:8b:69:ab:1e:f7:f5:3c:33:7a:9b:e9:c6:
78:43:ae:a4:4e:09:5f:8f:be:e3:c4:55:9f:82:86:
a8:4b:ef:19:2b:4f:07:c0:ca:0b:27:0f:34:db:d5:
05:a8:e3:d7:9f:fb:4a:24:c8:f5:b5:44:45:0d:05:
4f:84:c6:79:95:e4:b2:ba:62:f5:7b:60:7f:e4:ca:
6b:e8:d9:63:22:fc:ec:aa:42:d0:d9:44:97:da:91:
e7:cd:85:93:fa:e0:c4:79:55:39:51:35:79:57:bf:
34:da:c1:ed:07:86:58:0b:d9:bc:ca:6a:53:4d:07:
4a:57:a7:04:64:7e:63:1b:b3:57:57:63:54:54:de:
e2:ef:23:64:bd:76:4b:e4:c2:61:6b:6d:dc:7a:01:
59:e7:1a:4c:b4:92:33:ea:67:83:5f:ba:2d:48:e5:
c0:0f:ec:13:c2:05:e7:38:b1:84:6c:76:99:0d:d4:
4c:5d:95:b8:18:5f:a2:4c:11:74:a6:25:5c:6d:15:
e7:fd:0f:4d:0d:2e:41:da:02:99:6b:e3:08:05:4a:
37:37:63:41:4a:74:0c:e8:d9:94:d8:72:09:1e:53:
34:96:4a:e3:e8:ce:22:4b:6f:33:97:18:ce:9e:b4:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:9C:5C:E4:7D:35:7D:FA:DC:65:63:A8:D0:12:37:59:7A:58:04
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f9:31:e4:14:0b:42:4e:c2:38:7b:71:b9:4e:6f:fa:1e:e3:
7b:3f:02:2c:0a:88:46:bc:e7:f3:89:6a:b0:c2:5f:2a:b0:b0:
e3:95:27:b3:19:b8:3d:de:3e:33:7c:fe:2b:60:3e:ae:5d:30:
e6:a7:d8:f2:97:b2:4e:a4:d4:01:89:54:dd:52:b1:51:e5:4f:
ab:79:bc:a3:21:d4:59:62:b2:2b:4c:60:89:80:eb:86:3d:6a:
6a:61:5a:d0:d0:bb:b5:f4:76:16:ab:ee:27:b8:5f:c4:45:a5:
ce:ac:2c:dc:e6:92:fc:4d:64:94:10:eb:62:d9:67:57:55:7b:
ad:74:39:38:b0:3a:5d:0c:0f:83:7f:d3:48:58:2d:66:bc:95:
3b:0e:91:d6:ff:30:de:6e:21:db:4c:4c:03:40:e6:7d:b4:60:
72:5c:28:ec:fe:0a:4d:6d:77:a7:89:46:5a:d3:e1:af:13:d4:
06:6b:a4:c0:96:25:7f:f6:26:92:5c:5f:fc:f0:65:9d:12:9d:
bc:e7:14:e3:a6:33:de:3a:76:70:a4:d7:6c:fc:5f:d2:09:b7:
e6:ca:2d:32:a8:c1:ed:b6:42:69:74:65:f5:f1:3c:b0:4c:6b:
ec:2c:10:20:73:b0:bf:6e:a9:c3:0b:f4:82:1d:dc:91:20:a0:
2e:c2:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:42 2025 by rpki-client