Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: jPNj27motB5Mz5/FmyJGt3UOvACmZZOI94cocUnjzbs=
Subject key identifier: C2:80:1C:29:A4:EA:61:CD:D1:66:E8:19:7F:3D:69:B8:0E:2A:C2:C9
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 01983E3D36DAB21B1AA3986D5F21082A9909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 01CB
Signing time: Thu 24 Jul 2025 21:00:55 +0000
Manifest this update: Thu 24 Jul 2025 21:00:55 +0000
Manifest next update: Fri 25 Jul 2025 21:00:55 +0000
Files and hashes: 1: EUMDV_UDCQxt2Q9g7Ql8VQtC-w4.roa (hash: 4NT4MxUUdEci/yqv7me2MCFqkfGu8GvZgQ5eOHEJEB0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: W61XPiUxdXdwWIHwnxmdb+WiPeCWTPcJ8XwabYjwUz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3d:36:da:b2:1b:1a:a3:98:6d:5f:21:08:2a:99:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Jul 24 21:00:55 2025 GMT
Not After : Jul 25 21:00:55 2025 GMT
Subject: CN=c2801c29a4ea61cdd166e8197f3d69b80e2ac2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:96:a8:b1:07:3d:bb:9b:04:ea:52:6d:5c:
47:14:4b:bd:09:f7:5e:e7:38:b4:10:30:4f:70:ed:
0c:70:1b:35:4e:b0:b6:0f:41:1f:a7:dd:43:62:8b:
9e:d7:5d:76:f8:79:bb:f5:7b:fa:1f:81:32:a6:bf:
e6:04:cb:69:7e:50:52:8d:8d:ee:0c:c2:84:66:59:
32:36:d1:63:57:b2:0b:94:eb:8d:59:e5:fe:0d:cd:
a3:e1:9d:8b:45:30:b5:d9:fb:b0:76:dc:fa:f0:f9:
d2:3c:a1:c2:ad:bb:f9:b3:7a:de:cf:c4:44:e7:95:
d4:7c:9c:27:72:7d:ad:a7:87:24:5d:cb:17:bb:37:
aa:17:7c:27:cc:15:df:a5:5a:1d:10:16:26:7b:f4:
41:0c:02:96:0b:bb:91:d3:8f:22:08:f9:59:02:b9:
2c:fe:5d:e2:c5:1b:5d:db:2b:7b:30:c1:3d:0d:78:
d3:f9:8c:5a:6c:bf:d6:b1:bc:a9:b3:cf:6b:10:5c:
c1:e8:2c:87:96:49:da:a3:66:e9:4a:4f:eb:e8:fb:
5d:29:40:47:6a:bb:90:f7:80:86:68:c9:19:b0:0f:
93:3f:03:49:04:b7:7e:81:f3:dc:5a:5f:42:ca:8c:
1d:fc:69:06:6b:98:09:e2:f1:3e:d4:e4:d3:e6:8b:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:1C:29:A4:EA:61:CD:D1:66:E8:19:7F:3D:69:B8:0E:2A:C2:C9
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:17:77:ee:8c:11:0f:2a:5b:70:b7:26:a6:64:d4:13:d2:96:
a6:df:f2:5f:16:e1:fc:78:e2:75:3a:ed:4b:cf:16:ab:3e:47:
3c:ee:44:5c:1b:31:63:0e:ca:ed:ce:45:c7:f5:56:9d:88:73:
5c:3a:6e:88:54:97:ad:6e:19:2e:df:b7:52:40:31:50:6f:00:
70:65:44:35:de:52:d0:34:2f:1a:5e:0d:ab:79:5e:7e:da:f5:
51:b6:c7:26:3f:6e:b2:2e:59:1e:b3:67:e5:c9:22:c9:d2:d3:
e8:64:46:6b:93:a7:6e:eb:92:94:0e:7c:cf:35:38:4c:b2:de:
e2:04:ca:ea:e3:ef:5b:dd:3a:2c:4b:a4:9d:6c:1e:12:d5:53:
21:42:ef:0e:92:47:8c:2b:27:54:c2:d9:5f:cf:d0:bb:56:9a:
63:56:4f:dd:03:b6:a4:d7:cc:76:76:b4:c3:5d:0c:9f:94:4e:
e5:67:4b:76:8d:17:2b:0f:75:a5:fb:1c:72:63:ab:e7:a8:a4:
d3:d5:13:4f:59:ff:6a:20:cd:06:7f:30:6f:d0:cd:a1:e9:10:
fb:0b:8a:d3:ae:2e:80:f3:22:80:d0:b7:1d:e6:5c:b4:8e:c7:
6d:c5:03:8e:a8:82:40:a3:ec:f1:07:cf:2c:d5:7a:d7:6e:d2:
2a:5e:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:05:29 2025 by rpki-client