Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File: aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier: sKLB6R1j0a6R1iFIj2+lOmQWtD2p/xCLliX6jnSccI4=
Subject key identifier: 13:9A:E7:14:60:7B:C4:E7:08:F6:5C:8C:44:6F:7F:E7:CC:A8:A1:B6
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial: 0198530D9C6FBC4804C4FC59E0B9AF4A80FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 22:00:57 +0000
Manifest this update: Mon 28 Jul 2025 22:00:57 +0000
Manifest next update: Tue 29 Jul 2025 22:00:57 +0000
Files and hashes: 1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: ezd/9BVUA/TAE6K9Cq9WlRW9Irms7C43E/J4Xn2pBZA=)
2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:9c:6f:bc:48:04:c4:fc:59:e0:b9:af:4a:80:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
Validity
Not Before: Jul 28 22:00:57 2025 GMT
Not After : Jul 29 22:00:57 2025 GMT
Subject: CN=139ae714607bc4e708f65c8c446f7fe7cca8a1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:ce:db:38:cd:ee:01:65:ca:84:83:08:83:
6f:3c:6d:3b:c3:21:e0:08:07:b7:2d:c4:25:d7:b3:
48:c1:c8:cd:d5:61:ba:26:7f:a2:c0:ce:6f:1a:69:
3a:89:93:dd:b6:11:ae:9b:81:97:29:6b:de:8e:1f:
78:6e:36:fd:3c:2e:e5:c2:dc:4b:09:13:f1:c3:a4:
eb:ea:15:c0:79:ca:98:7e:54:ef:ea:11:b9:b2:db:
dd:84:ed:e9:06:b3:2c:5c:57:b7:78:59:b3:59:cb:
26:c1:5d:cc:92:37:16:a1:ce:f7:28:94:01:20:4d:
f4:bc:f2:3a:19:c9:e6:3d:0c:84:6c:a1:85:32:b0:
06:20:71:55:e6:77:5d:33:33:1c:91:05:03:84:89:
7a:b7:02:43:6f:61:ad:8d:1e:02:53:c3:75:99:d2:
c6:12:c3:65:67:1d:34:60:32:65:3a:58:52:5c:56:
04:88:92:85:6b:b4:6d:c5:8c:18:2b:35:d3:10:e8:
bd:8f:34:e0:3c:72:02:35:d9:bd:dc:87:76:da:10:
33:20:34:cc:ef:34:7e:58:56:2e:54:11:54:21:a6:
d1:bb:4a:60:cd:f8:66:fe:d7:de:af:bf:5f:2e:56:
2e:b8:89:51:b1:f3:ed:42:7f:c4:37:a9:17:c8:83:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9A:E7:14:60:7B:C4:E7:08:F6:5C:8C:44:6F:7F:E7:CC:A8:A1:B6
X509v3 Authority Key Identifier:
keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9f:d4:5a:f1:5e:01:12:79:7c:1c:ce:c5:09:d5:50:78:34:
09:f3:81:bc:04:59:c1:f8:b2:b8:27:37:87:7d:f2:4a:e0:73:
3d:5d:b5:3d:73:93:12:62:9d:64:ef:30:b2:c6:55:11:73:8d:
30:a7:fa:c4:a2:10:9e:c8:26:a5:23:a4:13:22:c8:29:d8:e1:
7d:f6:67:82:4d:1e:d4:59:0d:34:3b:e4:7c:bd:84:fa:56:3f:
15:40:ed:ec:4b:63:e9:b6:bb:60:36:a8:2f:a6:a1:de:94:b5:
84:70:ee:c6:93:a7:d2:1b:a6:b7:72:c9:82:34:e3:90:39:51:
43:68:6a:59:bb:d2:a1:f1:d0:b4:86:17:3e:ed:68:cc:14:dd:
eb:60:17:ba:fe:a5:ce:34:21:fd:1e:c3:d1:be:73:a4:80:c9:
57:30:75:54:85:94:53:38:6a:a7:5a:fe:a4:9a:73:e8:8b:98:
df:a0:14:33:98:60:3c:72:e3:ff:25:84:ef:5a:f6:18:1c:87:
99:52:11:c4:8a:05:96:fa:79:46:ea:25:e4:1f:c7:cf:f7:fe:
b0:75:c8:08:fc:11:9e:bd:ea:44:ed:a4:cf:65:20:8a:97:a5:
de:fe:14:99:48:9d:e7:8b:68:3e:f3:4a:80:cf:43:ad:ab:c2:
93:d0:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:25:57 2025 by rpki-client