Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: J0hF7EUa/+xIApsKZjMg4mA0cdKsFQCmFf/831JbnI8=
Subject key identifier: 86:1B:A8:67:8A:B9:84:60:0F:06:C8:D6:7B:A1:2F:0D:06:DA:65:46
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 019849663EE73803D68709998E631FC0248F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0860
Signing time: Sun 27 Jul 2025 01:01:34 +0000
Manifest this update: Sun 27 Jul 2025 01:01:34 +0000
Manifest next update: Mon 28 Jul 2025 01:01:34 +0000
Files and hashes: 1: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (hash: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: gd6Dbvw+S9SHOHusuk7I4H3a802sOwOOjYSYsHGgf1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:3e:e7:38:03:d6:87:09:99:8e:63:1f:c0:24:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Jul 27 01:01:34 2025 GMT
Not After : Jul 28 01:01:34 2025 GMT
Subject: CN=861ba8678ab984600f06c8d67ba12f0d06da6546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:91:b1:12:91:7f:84:38:76:b6:35:e0:f4:
9c:6d:cf:d5:5b:4d:f2:e0:fa:c3:ef:87:91:ab:37:
9c:12:9d:81:51:df:74:f4:6a:3e:1e:b7:fd:5e:2d:
54:e6:78:15:e8:32:ea:49:ed:e5:6b:b9:df:84:87:
dd:dd:4c:ee:7e:fd:ec:6e:66:ee:21:02:67:5e:e7:
df:0c:bb:2a:de:4c:bc:dd:3a:0f:e2:12:6e:6d:10:
32:b4:be:01:99:7d:7e:21:19:83:47:47:43:d9:fc:
7f:56:c7:38:48:1d:eb:16:d7:22:a5:f2:f7:dd:c3:
fc:5b:88:2d:44:98:68:e0:0c:89:64:11:dc:6e:a7:
45:9b:d2:4d:45:1d:57:18:50:c8:f3:70:bd:93:d3:
70:a7:20:18:9f:92:2c:c1:c0:f2:f8:e1:3a:6d:50:
0c:74:ca:38:30:07:51:c5:11:7b:b5:49:eb:33:6b:
7c:da:63:dc:b2:e8:76:f4:05:36:a6:83:c3:04:ad:
99:cc:9f:42:c8:4e:01:e6:cc:fc:1b:ce:70:85:ce:
9c:d5:dd:2c:a6:48:f0:e0:57:03:6e:4d:77:38:cc:
0e:04:db:b4:e1:4f:8b:16:f8:14:47:fc:13:41:b0:
fe:8e:e2:0e:4c:ab:b3:2f:0f:bd:22:7c:3e:87:e0:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1B:A8:67:8A:B9:84:60:0F:06:C8:D6:7B:A1:2F:0D:06:DA:65:46
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ef:76:70:ae:41:af:ea:dc:16:44:86:d6:87:9b:92:3a:56:
c6:26:f5:e6:0d:cd:f7:d0:af:f3:09:98:c8:25:c1:b9:16:a7:
30:eb:2b:56:41:a4:1a:8b:35:20:fc:5a:21:7d:91:f5:8c:d7:
d0:53:43:ba:d0:9f:4d:db:eb:86:c4:7f:f7:19:e0:1e:59:d5:
a0:9d:f4:0b:78:d0:0f:97:61:b5:c2:8c:ab:47:ef:d1:fa:e4:
a2:ad:06:8f:96:fb:56:12:5d:fc:df:4e:71:f0:8f:53:08:8b:
77:e6:a1:fe:b3:64:d1:8f:c2:e2:80:8a:71:93:2d:69:53:63:
35:82:87:aa:07:01:93:fa:62:0a:3c:94:fa:c6:cc:f4:ec:50:
4e:df:6f:28:4b:28:b2:bb:60:4d:34:17:36:c0:79:9d:f8:86:
a1:9d:a7:ec:41:09:e6:43:ff:58:f3:64:49:12:52:35:13:4e:
2c:24:dc:bd:29:2b:98:e3:a2:41:d7:47:c2:13:e1:6f:21:04:
29:38:d3:fa:de:50:ca:94:54:10:86:98:fb:de:38:48:c6:0b:
d1:b7:dc:de:62:aa:68:ae:bb:5d:b0:c3:03:df:f2:f2:01:56:
dc:ea:64:04:6c:44:17:90:3a:c6:b4:2c:2b:08:e7:75:06:ab:
be:13:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:35:34 2025 by rpki-client