Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier: ZgMkRjYE5bYh2n9L9sZT46isKntlLEFxECG0fin91/w=
Subject key identifier: AF:8A:86:6E:EF:B1:B0:94:B6:63:CF:5D:36:E9:5F:67:18:FB:A5:74
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 019845F671CDC9A6996F86BC7436D31837CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 09:00:35 +0000
Manifest this update: Sat 26 Jul 2025 09:00:35 +0000
Manifest next update: Sun 27 Jul 2025 09:00:35 +0000
Files and hashes: 1: YRcPB026UNAbaic7bC0XnagQJ_8.roa (hash: F5LbuOIZKUKKLsIhj9ecbNiDMJqNxgANq1yR2w3iRxE=)
2: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: tx2ueASz7PwVFMP5brCeZzjxAIO3d8gC9xgH2EojbFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:71:cd:c9:a6:99:6f:86:bc:74:36:d3:18:37:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Jul 26 09:00:35 2025 GMT
Not After : Jul 27 09:00:35 2025 GMT
Subject: CN=af8a866eefb1b094b663cf5d36e95f6718fba574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:c5:6c:52:35:bf:27:d0:71:37:d1:c1:f6:
55:71:35:77:52:ba:76:88:63:65:cb:21:78:1f:21:
54:c7:a6:f7:cd:24:d1:a7:96:f6:f2:25:04:8a:29:
e8:a6:af:23:4a:55:c5:b8:94:50:20:40:8e:d6:75:
4b:0e:cb:f7:78:e7:3b:9b:95:76:50:9b:42:f0:ee:
4a:51:aa:24:2e:b3:1a:66:60:08:dc:15:c7:0d:5f:
10:87:fe:3b:9c:ff:82:5a:f2:79:8f:b2:24:26:ef:
ca:11:c4:d6:55:73:9b:93:f4:20:b6:61:c8:d2:5a:
87:99:38:f0:fc:6a:69:3d:20:67:25:3b:64:99:2c:
62:98:89:df:4c:b6:9e:fb:42:31:4e:b6:4a:fa:81:
e2:8e:38:4d:5d:39:30:39:e8:ef:23:9a:4d:69:7b:
c4:19:72:dc:2a:88:c8:c3:3b:90:78:8d:2e:7b:37:
a4:1e:41:1b:22:b0:9c:c1:64:a3:c1:93:d2:e7:26:
1b:70:74:d5:54:1f:57:b5:b9:1a:84:f6:93:6d:e7:
37:d9:f2:cd:b2:28:f0:9b:74:e3:61:ff:6e:20:f8:
1d:35:35:11:5f:b5:0b:80:61:74:36:ae:7d:0f:78:
65:e7:2e:34:af:93:cd:5b:87:36:39:da:a0:d0:35:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:86:6E:EF:B1:B0:94:B6:63:CF:5D:36:E9:5F:67:18:FB:A5:74
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:19:b4:68:77:cc:5b:1a:4e:0d:fc:d2:55:8f:74:96:74:f4:
76:91:d3:16:49:4a:41:43:b8:ad:92:6d:7b:38:f0:a3:47:8f:
04:c3:df:84:83:4e:97:6e:bd:70:97:d8:e5:41:b8:80:bf:5f:
47:2a:52:a9:78:6c:0a:b5:d9:a6:20:c5:b3:64:bc:e7:b7:28:
21:77:8b:b0:ef:aa:61:9d:6a:f5:bb:22:db:f0:a2:87:48:61:
d9:d9:32:42:2f:ce:57:6d:e3:06:e9:60:b2:86:99:d2:96:15:
d4:4a:03:cf:68:1e:a0:8e:83:4a:85:66:90:2a:fe:d2:fb:cc:
9a:83:ab:b5:f5:2a:2d:e8:18:d6:fa:ab:78:4f:99:47:c7:a2:
6f:05:47:6a:ec:03:7a:a6:39:5c:64:24:b6:3b:23:df:38:ce:
97:87:89:4f:5e:10:62:f6:09:4a:91:0f:95:5b:86:39:e8:f8:
5d:41:8a:df:2b:fd:b4:51:10:14:2b:5c:91:f2:37:24:2b:1c:
b6:27:e9:93:5e:5c:71:99:8f:5b:69:49:65:6c:83:e7:a9:d0:
8a:c2:a4:b2:b8:30:0f:72:4f:bb:f1:b3:8c:62:a6:0f:71:01:
9e:37:3a:15:e9:bf:fe:43:92:56:40:92:e7:bb:97:7d:1e:67:
b2:4b:0e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:54:19 2025 by rpki-client