Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: O9hEabBevZ756GOgME+Fm3BUhEJOldQXeDEmwukMauc=
Subject key identifier: 1D:2D:27:85:73:06:4F:9D:EB:B2:B0:D9:BB:05:24:A2:2B:DB:74:EE
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 01984AAEB52F7FA73045EB86B7C7BD514845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 04EF
Signing time: Sun 27 Jul 2025 07:00:20 +0000
Manifest this update: Sun 27 Jul 2025 07:00:20 +0000
Manifest next update: Mon 28 Jul 2025 07:00:20 +0000
Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: IeOs1au3Y4fYwOt1ba2tA6RSEBa89fvWyC1BsUB1nXE=)
3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:b5:2f:7f:a7:30:45:eb:86:b7:c7:bd:51:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Jul 27 07:00:20 2025 GMT
Not After : Jul 28 07:00:20 2025 GMT
Subject: CN=1d2d278573064f9debb2b0d9bb0524a22bdb74ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:10:ce:c3:04:b0:01:88:c2:d5:9f:99:f1:
9c:c4:ef:34:01:c4:e8:fa:0a:21:83:8c:88:6a:a5:
3f:67:0f:53:ad:3d:5b:92:20:51:5b:fc:0c:67:e7:
a1:2f:a2:c6:5a:4a:a2:dc:84:6c:59:7a:40:de:7a:
c5:cf:54:34:46:58:ae:a1:ec:25:21:c1:70:6d:28:
a6:80:91:61:37:31:55:ae:38:f7:c8:99:35:bb:1e:
6a:0d:b3:11:4b:0e:d5:52:5e:d7:28:b5:94:77:c5:
7f:c4:ac:5a:61:22:28:1f:c7:df:97:16:56:c5:6a:
f9:51:3c:0d:c1:11:c8:a0:c6:08:ba:85:53:8c:82:
71:07:0c:69:ac:02:11:93:0b:a2:0d:32:9a:72:26:
2d:5c:e7:05:77:3b:ca:f0:06:c6:03:8a:3c:08:97:
af:e8:24:28:0d:c9:1b:6b:4b:88:a1:73:f4:7f:ab:
af:11:6d:aa:27:d8:05:4f:14:68:ce:65:cf:a8:0b:
ab:ea:25:49:45:dd:12:ab:63:53:13:b2:f9:2e:03:
29:8f:57:2a:4a:40:44:bb:b9:21:c9:17:2b:88:00:
85:75:58:e8:dc:c3:f9:cc:7c:95:3b:3e:4e:77:f8:
d0:2d:c2:32:b8:99:8f:47:6e:ff:cd:1b:87:47:45:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2D:27:85:73:06:4F:9D:EB:B2:B0:D9:BB:05:24:A2:2B:DB:74:EE
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:eb:39:8d:88:91:16:c3:76:d6:c8:95:8c:73:96:cd:a5:ba:
74:1e:6e:30:a4:0b:a9:68:28:62:3b:2b:a0:be:c4:e8:4a:9c:
e6:f6:0b:c7:62:a5:5b:84:2a:16:c2:b9:37:3e:e0:f1:12:25:
5f:d0:28:96:ed:d4:d1:01:0f:68:91:8c:e3:74:ed:83:38:3e:
dc:69:b7:b1:72:3e:37:1a:16:0e:82:09:a4:95:72:79:b2:41:
ef:cb:91:fd:0a:63:52:a5:6c:02:b4:4c:11:8e:be:7d:38:76:
24:c5:a8:cb:4d:fc:fd:cc:39:03:59:e6:b5:46:fb:c5:fc:05:
e3:b3:4e:a6:66:74:39:78:c1:bc:11:da:f5:d5:c9:77:d1:d6:
d2:c1:f1:c3:85:af:64:90:7e:07:dd:22:25:26:19:b6:af:45:
c3:d7:00:69:c3:a5:8b:09:2c:df:63:5f:98:f1:fa:64:d2:ab:
22:e8:52:27:67:8d:3a:63:50:a0:b0:ca:78:9e:32:ae:09:98:
b5:28:bc:cd:8e:91:56:6c:53:b8:12:93:eb:8d:b5:1a:98:63:
bf:d1:11:b1:81:b5:48:59:49:e4:b0:30:35:e5:cf:10:82:e9:
d4:d0:3e:db:5a:85:2f:ce:d2:21:13:d1:a1:6d:8c:f9:59:ed:
c4:de:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:19 2025 by rpki-client