
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File: aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier: 3idYUNZZk2wO8d2/zR4wRncDgD2/26Gwp10PEpIr37Q=
Subject key identifier: 4D:98:0E:C6:C3:92:49:E4:F4:12:3D:C5:54:1E:A1:BD:E3:9F:40:5F
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 019849659AC22A45DFBAC10F12365C06D038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number: 0662
Signing time: Sun 27 Jul 2025 01:00:52 +0000
Manifest this update: Sun 27 Jul 2025 01:00:52 +0000
Manifest next update: Mon 28 Jul 2025 01:00:52 +0000
Files and hashes: 1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=)
2: VRgzvsIGyVGSMvCfEEXMwDue8MA.roa (hash: PsTu4TZ4HzWVeuIcWadKHbXlWOA/8zFocM48RCXa9/k=)
3: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: 7QWdHXbgU+67mxcPeB35aOS4qVsUGJh61DXznIokvtQ=)
4: jjkZ2yb-jO_dwKLdx8H317IXScQ.roa (hash: HCz04W3HLqaOC0rvZdH98CWQlK6DEnW7DscRc2ODf9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:9a:c2:2a:45:df:ba:c1:0f:12:36:5c:06:d0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Jul 27 01:00:52 2025 GMT
Not After : Jul 28 01:00:52 2025 GMT
Subject: CN=4d980ec6c39249e4f4123dc5541ea1bde39f405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:af:12:b2:87:07:67:16:0a:cc:b4:0e:30:
95:5d:f1:3d:ff:0c:9a:00:5d:e0:6c:f0:6e:49:19:
1d:5f:59:08:dd:52:a2:b2:5c:00:51:7e:33:d9:e6:
80:26:12:6e:07:97:69:59:f3:f9:db:b6:1f:d8:0c:
9f:75:f2:a5:34:a4:cc:46:9b:c0:9f:9d:23:2b:4d:
28:eb:af:f0:27:e1:fd:cb:56:39:db:f5:e5:56:29:
de:34:4f:48:98:83:33:73:5c:de:25:ca:37:95:cb:
06:81:56:37:2c:16:5a:98:18:25:c0:72:c8:77:86:
45:55:20:64:ef:d4:78:96:f3:ca:8b:84:81:f3:2c:
a9:be:30:35:98:8f:75:64:c7:f3:e1:e1:3d:c0:d0:
8e:8c:8f:70:ba:8f:d8:df:22:95:8d:65:4d:e4:24:
13:83:41:74:1f:8b:41:7c:0e:26:bd:d1:64:65:a6:
c2:8e:44:18:ff:e8:35:39:aa:4a:85:ea:75:a3:59:
8b:fc:5d:d2:2b:47:7d:c8:f0:12:04:fc:3a:8c:80:
e2:5e:c9:0b:1a:0b:1d:4a:89:24:96:75:07:7a:15:
41:15:a7:27:8b:41:fc:08:d7:91:fe:0b:fb:54:5d:
f4:b6:1b:03:54:df:60:ab:5a:59:03:87:1d:a7:ed:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:98:0E:C6:C3:92:49:E4:F4:12:3D:C5:54:1E:A1:BD:E3:9F:40:5F
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:17:0a:0e:12:07:1b:da:3f:3e:88:3d:1b:a0:72:83:56:f3:
6e:7d:a1:e6:00:49:e2:dd:15:cc:ed:b7:57:fa:08:7b:2e:09:
8e:a1:c5:6f:02:94:d4:47:30:34:1c:92:d3:86:4d:c8:fb:3b:
ef:66:08:7b:7f:d0:50:69:b5:05:d7:ee:48:f5:63:9b:11:a9:
9d:f2:1b:45:d8:e0:88:3d:25:5f:5b:f2:4f:e5:0f:a0:df:e7:
f3:83:c2:a9:3f:2a:3d:d7:8f:01:e8:65:b0:3d:b5:5f:b7:88:
e7:17:49:1a:b8:dc:5a:47:8e:ce:d9:18:13:12:0a:a5:7c:46:
61:20:a5:24:3e:18:c2:70:84:5e:9c:ba:c3:bd:41:fc:46:fa:
4f:87:95:cd:32:88:97:c5:79:cf:7f:eb:85:77:3b:02:d6:42:
72:82:aa:2b:4e:c2:63:fd:b5:be:e2:82:11:2e:0d:76:3d:2c:
29:f0:39:57:d4:b5:e9:8d:2c:9f:fc:9f:76:84:f7:8b:eb:81:
eb:f2:35:55:4b:ba:1a:c2:bc:a3:89:bb:ff:e8:c3:7c:a7:35:
fb:75:be:8f:f2:3b:6a:2c:66:8f:7f:59:51:e1:44:62:60:b7:
82:20:a4:c0:8a:d1:59:3d:01:de:08:d2:ee:59:31:c2:0f:9f:
ff:1c:03:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZZrCKkXfusEPEjZcBtA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzM3YzZlMDYwMmJlMzgwNGUyNzc1ODBiYWI3ZTIxZTZl
MzM0NzQwHhcNMjUwNzI3MDEwMDUyWhcNMjUwNzI4MDEwMDUyWjAzMTEwLwYDVQQD
Eyg0ZDk4MGVjNmMzOTI0OWU0ZjQxMjNkYzU1NDFlYTFiZGUzOWY0MDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYivErKHB2cWCsy0DjCVXfE9/wya
AF3gbPBuSRkdX1kI3VKislwAUX4z2eaAJhJuB5dpWfP527Yf2AyfdfKlNKTMRpvA
n50jK00o66/wJ+H9y1Y52/XlVineNE9ImIMzc1zeJco3lcsGgVY3LBZamBglwHLI
d4ZFVSBk79R4lvPKi4SB8yypvjA1mI91ZMfz4eE9wNCOjI9wuo/Y3yKVjWVN5CQT
g0F0H4tBfA4mvdFkZabCjkQY/+g1OapKhep1o1mL/F3SK0d9yPASBPw6jIDiXskL
GgsdSokklnUHehVBFacni0H8CNeR/gv7VF30thsDVN9gq1pZA4cdp+1F+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2YDsbDkknk9BI9xVQeob3jn0BfMB8GA1UdIwQY
MBaAFGlzfG4GAr44BOJ3WAurfiHm4zR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEt
ODM4YTQ1MDU3MzVhLzEvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEtODM4YTQ1MDU3MzVh
LzEvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBcKDhIH
G9o/Pog9G6Byg1bzbn2h5gBJ4t0VzO23V/oIey4JjqHFbwKU1EcwNByS04ZNyPs7
72YIe3/QUGm1BdfuSPVjmxGpnfIbRdjgiD0lX1vyT+UPoN/n84PCqT8qPdePAehl
sD21X7eI5xdJGrjcWkeOztkYExIKpXxGYSClJD4YwnCEXpy6w71B/Eb6T4eVzTKI
l8V5z3/rhXc7AtZCcoKqK07CY/21vuKCES4Ndj0sKfA5V9S16Y0sn/yfdoT3i+uB
6/I1VUu6GsK8o4m7/+jDfKc1+3W+j/I7aixmj39ZUeFEYmC3giCkwIrRWT0B3gjS
7lkxwg+f/xwDSg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 03:30:09 2025 by rpki-client