Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
File: aL0515MSXGhN_ycviGIrrEMhgPA.mft (raw, json)
Hash identifier: mf9ukFjQGniFAxTFvghYnVsVkp+I1cUDnWUEgDn0D44=
Subject key identifier: EC:A3:FC:11:46:C2:F2:97:BF:E0:7B:A1:17:DE:C2:29:C7:63:ED:98
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial: 01984777CD94BD206BA4DCC70086651708DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 16:01:30 +0000
Manifest this update: Sat 26 Jul 2025 16:01:30 +0000
Manifest next update: Sun 27 Jul 2025 16:01:30 +0000
Files and hashes: 1: UITBZGotoEJu7VXUeHnQEpzUh80.roa (hash: +4A8vS2ImMKHLoBNzMFALbXMy6VYqIeTofj/Zphvx9I=)
2: aL0515MSXGhN_ycviGIrrEMhgPA.crl (hash: Ce/3cTbFplq6UEvaJauVRdQAPBOvbCPhKU9jB/Jw+Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:cd:94:bd:20:6b:a4:dc:c7:00:86:65:17:08:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
Validity
Not Before: Jul 26 16:01:30 2025 GMT
Not After : Jul 27 16:01:30 2025 GMT
Subject: CN=eca3fc1146c2f297bfe07ba117dec229c763ed98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:f6:5c:6f:ff:be:dd:74:2c:9e:c2:da:8d:
37:b9:27:31:1e:0f:81:ae:3c:e6:2a:fd:e5:ec:b3:
c3:16:d6:bb:e0:12:90:2a:89:5a:4b:ec:ac:ac:67:
6b:26:7e:d9:fb:d2:7b:7f:bc:e6:b9:22:96:8a:4d:
67:62:73:65:1b:90:57:63:8d:5e:5f:a3:3d:03:ee:
9f:73:09:c4:e9:6e:e6:c3:99:f3:d3:e0:57:9c:8a:
07:2d:4d:fe:85:e6:00:1c:21:db:34:d6:00:7c:ea:
de:71:98:01:5e:0a:61:dd:cf:82:2d:36:29:dd:2f:
c1:6f:5d:ef:c0:3d:c6:db:b0:75:c9:4f:55:8d:09:
6a:4d:b7:95:ab:61:e2:a2:14:6f:47:c6:9d:1c:7b:
af:db:14:ea:86:e2:b9:3c:e8:49:38:44:7c:d6:e7:
11:f5:a0:63:e0:c5:6f:08:66:d5:2e:82:a7:f9:1f:
7e:81:cd:2c:4d:f7:57:2b:72:19:a7:26:33:02:d5:
07:ad:96:51:e9:53:9e:cb:c2:6c:9e:fc:de:25:ed:
68:f2:10:7f:c3:60:81:a9:84:5a:f7:7b:86:ed:ca:
b6:bc:02:5e:1e:fe:8b:7c:ba:2c:4a:b4:9a:71:f9:
60:4b:9c:23:ed:e6:26:72:0d:f1:8f:b7:7b:65:67:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A3:FC:11:46:C2:F2:97:BF:E0:7B:A1:17:DE:C2:29:C7:63:ED:98
X509v3 Authority Key Identifier:
keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:13:88:26:bd:19:53:24:db:a6:a8:6b:a8:1a:52:41:45:49:
cb:19:95:cb:7d:f8:1c:c8:f7:62:33:df:16:96:09:76:ce:4b:
ff:0b:c2:c3:8e:a1:5a:28:d0:7e:2c:a1:00:6d:f7:89:90:02:
ba:ed:5c:a1:f4:05:7c:bc:6d:85:75:66:10:dc:d2:35:84:4b:
cd:19:0c:d2:48:3c:14:e0:b0:76:ba:ec:fe:a3:79:77:85:4f:
b7:86:83:4f:2a:03:17:e7:76:04:99:e3:16:ef:4b:d8:5c:40:
40:8d:3a:cf:f3:8b:aa:ff:59:df:2d:e2:35:ae:d3:eb:40:13:
42:1f:e1:1b:aa:05:86:91:1d:67:a9:ff:55:a6:5f:0a:33:62:
ec:37:b3:20:e4:e6:1b:d2:39:44:c6:d6:78:4f:2e:ef:02:ab:
39:4b:cb:cd:a8:c5:c0:cc:ca:14:da:c6:52:95:13:9d:6a:44:
d0:f5:b7:f9:9f:01:2d:a4:34:a9:f5:dc:a3:18:53:18:4f:55:
8f:80:83:ab:c8:8f:c8:1e:47:38:e6:bd:43:ac:f4:f4:84:aa:
11:92:a8:dc:16:87:1d:d8:ef:72:2c:50:5d:2c:5a:35:90:3e:
e5:e9:bb:69:a5:f9:03:d4:b9:cd:e0:ab:66:72:26:dd:6b:3d:
61:a6:cb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:22 2025 by rpki-client