Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
File: aAONTKy9QZGZUus3CcFlM4OJAOM.mft (raw, json)
Hash identifier: 3ExwVq9jX4uRyQj/7hpIz/sZctmIHwzW1Ik2tcLui6k=
Subject key identifier: 08:C3:77:9F:94:F9:3A:7D:7E:7A:DE:1E:9D:E5:92:7D:D4:91:0D:A9
Authority key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
Certificate issuer: /CN=68038d4cacbd41919952eb3709c16533838900e3
Certificate serial: 019847783E27DFFE0F4F5991D06ADFDD201B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 16:01:59 +0000
Manifest this update: Sat 26 Jul 2025 16:01:59 +0000
Manifest next update: Sun 27 Jul 2025 16:01:59 +0000
Files and hashes: 1: K7Q4iSU5tGlQaFLDbZ74ga5u7QI.roa (hash: 4IoPifHHzLWAa9SoaMyYdsFHlPVY27b7G1cPfRmMmFw=)
2: aAONTKy9QZGZUus3CcFlM4OJAOM.crl (hash: c6Ep6smbiGUNfVaxc7QFcQp7hYP0Cz7npLDz7nWXauE=)
3: lZ9mN5xTttKw5Lu3kt5TBdxoI_c.roa (hash: oCvvxX98yWLH3kfCtYuDTFzL1eqlVEqmDIMPTij8zho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:3e:27:df:fe:0f:4f:59:91:d0:6a:df:dd:20:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68038d4cacbd41919952eb3709c16533838900e3
Validity
Not Before: Jul 26 16:01:59 2025 GMT
Not After : Jul 27 16:01:59 2025 GMT
Subject: CN=08c3779f94f93a7d7e7ade1e9de5927dd4910da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:86:1c:74:19:b9:c6:42:88:64:08:6b:1c:
40:4f:05:1d:b7:51:63:bc:ac:79:20:8c:5a:e2:35:
86:dd:90:14:f0:36:41:15:ac:d7:ab:65:42:3b:7b:
5b:71:0d:b3:10:d8:25:5f:84:66:d4:e7:81:92:85:
b0:14:fc:26:79:2f:16:bc:0f:9d:5d:12:d6:4b:81:
78:af:83:72:46:f3:46:bc:9b:45:69:45:95:78:a7:
b5:c1:60:b8:0f:2b:57:70:54:41:21:4b:ac:d5:80:
69:35:f9:97:2c:1d:1d:6b:a5:a3:65:4f:6d:e7:92:
54:e7:b0:30:3e:49:fd:8c:04:77:be:6d:c8:cf:92:
38:5d:62:e7:b9:29:24:6a:9a:8c:9c:00:6c:af:f8:
20:1b:8d:04:d2:52:d3:ab:e8:c7:8f:2e:96:a2:5a:
fd:44:2a:bd:96:c0:a1:cc:84:1f:cd:0b:ae:fa:d8:
30:92:7c:c9:ba:bc:15:88:fa:59:d0:67:70:f4:7f:
b3:fd:d2:7f:ce:5d:67:29:39:70:a1:ee:69:b3:85:
62:4e:c2:5e:49:06:a0:c6:17:b0:14:f2:29:9e:df:
f1:00:69:b4:d7:29:79:9c:8d:9b:71:24:86:dc:08:
05:4d:8f:be:8d:d0:de:1c:cf:a6:5a:ca:4f:4c:22:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C3:77:9F:94:F9:3A:7D:7E:7A:DE:1E:9D:E5:92:7D:D4:91:0D:A9
X509v3 Authority Key Identifier:
keyid:68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:68:41:24:fe:30:db:56:16:61:d1:db:cf:ec:db:d0:c8:17:
2d:f8:d7:be:03:a1:93:d5:36:10:d0:10:c3:09:8a:04:7b:87:
48:dc:27:ac:83:e8:bb:7b:d3:54:23:91:c2:06:52:61:c3:1b:
9b:04:bb:cd:07:df:4a:b6:04:ff:5c:05:d7:97:66:a5:7c:c8:
7b:75:86:60:80:2a:3f:91:58:73:35:78:c7:ae:9e:02:2b:98:
18:9e:dd:2b:b9:66:35:4d:19:fc:f9:e1:07:46:5e:9e:99:66:
bf:e3:7b:0b:28:5f:e2:39:5f:fa:cc:36:ba:c3:5a:76:d2:2e:
25:17:02:c1:d1:2e:30:fe:31:3a:a5:02:67:2b:8c:f2:4d:9b:
c6:18:33:22:64:97:0b:2a:61:3f:4c:70:a2:37:b2:24:7a:ed:
b0:39:51:f7:b7:4f:10:d9:75:f5:cd:cf:1e:5c:60:db:1d:ac:
a4:08:89:80:42:de:30:40:66:21:de:8c:71:ce:c4:b8:93:fc:
c3:09:e1:8f:a1:a4:9c:fd:a4:21:95:2a:03:37:9e:35:b4:5c:
15:4f:00:b6:dc:24:de:0e:9f:bc:da:74:f1:76:a1:2d:96:46:
d8:64:c6:0e:63:2c:f7:ba:ed:a5:e2:68:09:a8:37:35:03:b3:
33:a0:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:10:25 2025 by rpki-client