Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
File: aaKML4THXo0DiGlDVRUt0rcx8kk.mft (raw, json)
Hash identifier: SiUyM06vcwnOw0F9ZzKqhDHGe4uYCEGzea7rVr+xUM8=
Subject key identifier: 83:EA:03:F6:C4:5B:80:0C:AA:B3:DC:04:FC:2A:92:02:C1:DF:DF:C8
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 019848C08090CBB93064AF3B44119B91F1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 22:00:32 +0000
Manifest this update: Sat 26 Jul 2025 22:00:32 +0000
Manifest next update: Sun 27 Jul 2025 22:00:32 +0000
Files and hashes: 1: WdYc6wSLVkfUe7irxf4uyXxEIsM.roa (hash: dpYwLA3RR3eH0lZ7/JtVVQoaXF1Y2bKy7GfyH86APlE=)
2: aaKML4THXo0DiGlDVRUt0rcx8kk.crl (hash: 261oFPeAIa9wa/5VqaG62LLt7kuQRIgTzndxhqTQvI4=)
3: tUMiGCgmsKV0vxqojlEA4oJxpRM.roa (hash: UydNeJbpnz/tc0fGV+RmvBf+BwmLoVjaXgDPrRLbpVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:80:90:cb:b9:30:64:af:3b:44:11:9b:91:f1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Jul 26 22:00:32 2025 GMT
Not After : Jul 27 22:00:32 2025 GMT
Subject: CN=83ea03f6c45b800caab3dc04fc2a9202c1dfdfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ac:c6:fc:7e:f7:47:f8:e0:6b:83:5e:4b:73:
22:69:b8:fc:8c:88:28:9d:4f:2b:83:e5:d6:92:fc:
c3:2d:7f:c4:12:4d:1d:12:44:a4:46:41:45:7e:97:
31:33:5b:59:db:a1:14:f2:0b:c1:4f:2b:99:89:21:
3a:87:4a:58:22:50:7e:ba:34:b2:cd:29:44:d3:7f:
0f:0c:e4:2b:07:84:ab:8a:0a:33:a3:c7:ba:19:6e:
03:16:4e:c2:29:ab:5f:2f:82:12:10:90:5a:13:49:
58:39:f4:83:db:29:6c:7b:1f:01:69:e3:0f:c0:3d:
97:db:97:05:86:76:d8:b0:c6:1d:3c:d1:ec:4d:09:
fc:ad:7c:46:dd:42:6f:3d:a3:7b:2c:07:c6:d5:11:
53:6f:dc:a1:76:f3:53:76:95:de:36:97:4a:81:70:
e1:ad:61:24:dd:4a:0f:e0:8c:2e:2b:a3:f9:a7:74:
e8:b4:73:66:21:45:6c:2a:ff:4c:af:73:b0:25:06:
62:95:14:48:61:b1:ab:23:55:6e:c8:e2:60:52:d6:
9d:ec:00:58:1d:50:b7:b8:ec:5c:15:9d:dd:9c:e1:
36:8c:9a:eb:f7:5a:04:e2:c6:e8:e6:05:a8:2d:8a:
8b:ac:87:2d:1e:a9:5e:f5:81:df:12:42:88:93:46:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EA:03:F6:C4:5B:80:0C:AA:B3:DC:04:FC:2A:92:02:C1:DF:DF:C8
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:74:b8:15:50:11:b9:b0:6d:09:04:18:2c:cb:f5:88:2b:39:
78:10:59:e7:9f:c5:8f:7d:97:94:64:52:29:6e:d4:32:ed:26:
92:5f:aa:69:01:a9:0b:9a:9c:13:01:a3:45:41:3a:fc:01:ab:
c3:69:b5:49:29:d5:f7:a5:e0:fb:4f:29:1d:79:04:1f:fd:f0:
7b:8f:b4:6a:ca:bc:24:88:41:5c:62:2c:ec:18:e6:f8:42:44:
ef:13:0d:e5:35:d9:eb:75:f3:06:db:82:7c:6c:8c:c0:db:51:
0e:15:7c:c3:ef:35:7f:e8:0a:44:5c:e6:4d:0c:7f:0f:66:d8:
5e:af:fa:dd:d2:e7:3a:f2:3c:41:34:42:0e:5b:17:45:0e:09:
7a:2d:6f:28:6b:a1:55:f3:71:ce:27:a1:9a:38:02:2e:76:c1:
f6:72:b6:3e:9f:13:3f:3a:ba:06:80:f9:52:55:fa:ef:a7:25:
e6:e3:19:eb:a5:a4:8a:cf:be:1e:cf:90:bd:fe:ec:9c:1d:8e:
93:12:5f:e1:15:27:d3:3f:f4:cf:1e:bb:87:3a:f7:2b:38:ca:
8f:6b:30:1d:8a:7d:77:00:34:26:cd:41:78:2e:08:ae:05:a1:
e4:65:4f:e5:94:0b:bb:51:1f:5b:5e:45:ae:59:8b:db:77:1f:
f3:ca:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:34 2025 by rpki-client