Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: DsTXSMXhNyHNvim1JA+I5oKuEavm8lU8Yy12VV2CE0o=
Subject key identifier: 31:75:D3:94:51:94:AA:0A:1F:33:BA:0D:72:39:F6:0F:81:AF:20:7A
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019853B1AF78A369D1E3BED1437126AFB04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 131F
Signing time: Tue 29 Jul 2025 01:00:10 +0000
Manifest this update: Tue 29 Jul 2025 01:00:10 +0000
Manifest next update: Wed 30 Jul 2025 01:00:10 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: FOK0AzbiRzZ8aanal/0LyO7UJg90DDG4eOOEFZFeeVQ=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:af:78:a3:69:d1:e3:be:d1:43:71:26:af:b0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jul 29 01:00:10 2025 GMT
Not After : Jul 30 01:00:10 2025 GMT
Subject: CN=3175d3945194aa0a1f33ba0d7239f60f81af207a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:bf:95:28:4c:bf:56:ca:a3:25:5b:bb:72:
bc:9b:58:f2:92:ed:c0:60:45:2a:df:4d:54:ea:96:
12:e4:a9:3f:0e:6c:d6:cb:27:7b:5d:6c:87:51:c7:
14:d9:83:34:4f:92:df:e0:db:b5:5c:70:43:2e:e0:
04:37:90:19:22:64:fe:6b:09:47:6f:2f:13:8f:2d:
c4:de:db:df:48:d7:1b:a6:27:cd:aa:ab:3e:64:4e:
88:21:92:7f:72:dc:d6:53:7d:8e:4e:4f:6c:26:b2:
b4:49:41:42:20:4f:eb:ca:b4:38:fc:f5:a3:12:9a:
58:62:76:23:57:2f:bf:0f:3a:fb:67:31:8d:29:30:
90:d3:f1:21:64:0e:84:97:5e:70:2a:48:d6:d7:c4:
d0:95:59:c5:ad:28:bc:a8:b9:07:2a:12:99:26:59:
aa:8c:68:cf:85:58:33:3e:fe:66:a8:c6:53:e9:b4:
0e:26:bc:e0:0f:1a:0d:03:60:95:94:d5:9d:e7:45:
95:88:6d:29:f5:38:3d:b9:00:6b:e7:26:d6:fb:3b:
0d:59:2d:8a:b3:62:38:ad:48:4a:2e:e5:35:00:ab:
8e:d0:17:93:c8:9a:e5:ed:3f:a2:e3:42:17:68:e8:
ef:9b:3e:19:07:d0:cb:59:eb:86:11:9a:00:79:83:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:75:D3:94:51:94:AA:0A:1F:33:BA:0D:72:39:F6:0F:81:AF:20:7A
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:42:fb:e1:f7:c6:5e:6d:d9:c1:5e:26:9b:dc:6b:bf:90:be:
dd:e3:75:dc:ed:5a:40:02:fe:a9:0a:d7:81:eb:e1:c7:27:c2:
1e:38:ce:a0:4d:9c:4e:84:20:83:38:ad:82:aa:83:27:21:29:
f3:aa:9c:71:5e:21:e5:3a:f5:01:43:4c:7d:42:52:1b:66:14:
f0:68:fa:cf:b0:a6:4e:05:ce:af:f8:5f:63:cc:8e:95:a8:4c:
90:3e:63:71:e4:4f:3f:18:76:76:8d:02:0e:0b:03:2d:d7:7c:
5e:cf:48:21:ff:ba:fb:b5:53:b8:18:a1:b3:85:07:2a:72:d8:
ed:a8:9c:f1:f1:8d:7c:f6:6d:2a:03:e1:f0:f6:3e:fb:92:5f:
9e:cc:09:38:00:41:82:39:11:56:dd:1c:e6:6d:4a:f8:ac:30:
a1:b8:84:18:2f:0f:eb:25:c4:bf:34:52:7e:de:97:51:77:e4:
7e:4c:3c:8f:bb:0f:a2:76:6e:42:bb:5f:75:23:fa:06:eb:3c:
09:30:ad:a0:97:00:30:4b:af:34:04:56:38:f1:eb:f0:e8:16:
59:56:7e:bc:6f:97:79:23:3b:10:8f:79:bf:53:2d:dd:43:df:
3b:2c:9d:d9:f0:7f:c0:06:f6:3a:77:c9:20:94:97:71:bb:0c:
01:0e:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:08:22 2025 by rpki-client