Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier: LncHVlGintKIwUm0/EGuuW+iTnrjrxll7o+wgfI3Fpw=
Subject key identifier: 26:6F:A7:8F:46:16:6E:F8:BF:3A:D5:AA:7E:93:0D:EC:2E:E0:7C:5A
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial: 019849D3141FDC0410B5A7B304378D533B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number: 031A
Signing time: Sun 27 Jul 2025 03:00:26 +0000
Manifest this update: Sun 27 Jul 2025 03:00:26 +0000
Manifest next update: Mon 28 Jul 2025 03:00:26 +0000
Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: gK51HFVDhS9UkR8ozSaF7Dl9B9gZRbWHVGrGzYNPyW4=)
2: mjk_9mBIX2K41ASneFahi5WxQms.roa (hash: qL7nGWS3Awht9PmP0vDzSTXhKhc/jIpjX536PZtB9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:14:1f:dc:04:10:b5:a7:b3:04:37:8d:53:3b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Validity
Not Before: Jul 27 03:00:26 2025 GMT
Not After : Jul 28 03:00:26 2025 GMT
Subject: CN=266fa78f46166ef8bf3ad5aa7e930dec2ee07c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:3b:61:07:bb:e9:a6:f2:5c:46:7e:b2:37:
2b:27:7e:1e:6e:96:86:81:92:49:84:78:53:44:22:
79:ea:a8:38:7d:8e:ee:8b:0a:df:5c:17:aa:22:e2:
f6:a4:4a:75:d6:ca:9c:c6:81:b4:6a:d9:68:16:f7:
d7:14:fe:d3:6e:e9:18:77:61:63:dd:16:19:38:8c:
4c:19:8d:05:74:62:27:fb:de:00:c2:6f:89:20:ca:
94:b3:84:99:9d:b8:41:3b:64:c6:45:ee:a6:72:35:
99:38:e4:67:1e:1d:fa:d3:aa:d2:07:29:94:38:0d:
61:44:8e:80:5f:ba:32:3e:18:bd:09:3e:4b:92:50:
a1:ae:5d:6c:36:ba:ee:1a:eb:95:34:16:98:91:da:
5d:a7:c4:94:cf:26:9a:1a:4f:b7:73:5a:2b:5b:91:
d8:5f:37:ff:ce:95:ce:5d:8b:3c:ec:86:35:73:47:
ce:f8:93:df:6d:81:2f:ca:ac:04:e2:39:06:3b:b2:
5b:31:6a:b6:50:43:a3:d9:51:e7:f6:54:da:db:a4:
a9:50:ea:84:62:cb:82:4a:bd:0e:e6:06:3d:cd:5b:
27:06:5a:47:10:ed:23:89:d2:ba:10:53:19:f5:52:
fb:4b:d3:a0:28:5a:8b:8a:12:45:f2:5f:cb:e7:b9:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:A7:8F:46:16:6E:F8:BF:3A:D5:AA:7E:93:0D:EC:2E:E0:7C:5A
X509v3 Authority Key Identifier:
keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:74:77:98:e3:c6:9b:3b:da:34:4a:23:b0:13:5a:e2:c6:4f:
5b:b4:5d:48:d5:bd:45:91:5c:38:0a:f4:1e:59:80:3c:ca:f1:
d6:29:57:13:f1:71:2f:e1:57:a7:10:7c:cc:19:2f:de:1a:5e:
2f:4a:bc:37:9b:60:55:28:10:68:af:21:78:ad:a8:87:cd:34:
d9:6c:db:b2:3d:cb:ab:7d:f1:d5:aa:56:0e:10:97:86:04:80:
a3:80:95:2c:6e:b4:ba:95:72:b8:7c:61:5e:26:35:bb:83:f0:
ba:c6:fb:b9:60:45:98:00:fc:a7:95:4b:ee:44:d0:52:a6:46:
69:fe:82:a0:a7:15:d5:0d:a7:c0:98:2f:95:33:b4:f4:16:20:
01:ac:2e:b6:64:c0:48:a9:55:7d:b2:cf:01:d8:c8:8e:07:0d:
3f:0f:73:49:e8:05:83:b9:46:d2:e4:54:9d:48:0a:45:6b:c0:
c4:b4:c9:db:4c:b4:ff:ed:6b:8c:15:20:de:41:87:64:c7:eb:
6e:d8:3a:02:84:09:6c:d9:fc:e3:66:35:0b:7b:7a:74:35:4e:
cf:d6:2b:87:a9:93:f2:1d:70:cf:da:15:b4:95:29:2f:f1:32:
23:b8:9d:72:df:23:39:2e:d0:fb:af:8b:ce:20:81:f4:65:10:
ea:8d:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:01:37 2025 by rpki-client