Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
File: aCMaUAoKgQjcekNYsQArH9vweZU.mft (raw, json)
Hash identifier: ZqH7rKVzefr5CF7Q0UYuVoqPEckK1Lc+r9yb0/2tpgM=
Subject key identifier: 2C:A0:F1:C4:6A:01:66:1F:B7:7B:63:67:E6:C0:FB:09:5F:8F:BB:24
Authority key identifier: 68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
Certificate issuer: /CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Certificate serial: 019847AD9D4E3D3C881C61F41257789E2D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 17:00:16 +0000
Manifest this update: Sat 26 Jul 2025 17:00:16 +0000
Manifest next update: Sun 27 Jul 2025 17:00:16 +0000
Files and hashes: 1: XSGE2n2dKWY3M_jq3MngIc3i_t8.roa (hash: pwMRSRLzn3jyPbMLShLv8HDNQd5Gm8ws1AjCFBEAHaU=)
2: aCMaUAoKgQjcekNYsQArH9vweZU.crl (hash: Tj5uYtDltij6ELMYZu6MXJUIQKD0WeKGXtrfxncGqVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:9d:4e:3d:3c:88:1c:61:f4:12:57:78:9e:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Validity
Not Before: Jul 26 17:00:16 2025 GMT
Not After : Jul 27 17:00:16 2025 GMT
Subject: CN=2ca0f1c46a01661fb77b6367e6c0fb095f8fbb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:7b:f9:7d:e1:90:62:f3:d2:00:07:9d:54:
7b:b7:0e:50:90:25:3e:fa:be:06:0a:89:9c:3f:74:
fa:7d:65:ee:dd:63:e0:4b:65:e0:a3:b3:5d:34:e7:
78:60:21:6b:3d:ec:38:0a:4b:7a:be:c3:b2:c6:28:
ab:89:fa:7f:87:5f:c6:24:f1:7f:4f:a5:eb:d1:60:
ce:0d:5e:d0:ed:39:da:98:04:75:08:6f:57:db:40:
0a:67:e2:84:01:33:ec:18:a7:bf:22:24:31:ee:49:
18:a3:c6:9f:27:0a:6b:a1:76:5b:b5:24:37:36:dc:
f7:8f:95:a0:e7:3d:d3:b2:c9:57:f8:10:67:07:d6:
3a:66:e1:2c:ad:36:0c:d5:a8:49:3e:76:b1:43:5a:
d3:9a:2f:57:56:31:ce:4a:22:ad:7b:ca:1f:da:91:
34:6e:94:d2:ff:35:61:d3:e4:49:3e:40:84:e6:12:
89:a3:87:1d:6f:23:42:18:d1:8e:2e:ee:86:47:05:
24:ab:71:f4:d8:e5:95:be:18:ac:c8:43:37:f2:20:
82:86:bb:a9:6d:52:84:51:52:68:c9:f2:f8:37:48:
9e:f9:4f:32:5e:24:9d:2c:d8:70:bb:56:2b:79:19:
1a:c8:eb:95:6d:06:0c:56:09:70:f2:bd:1a:91:d0:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A0:F1:C4:6A:01:66:1F:B7:7B:63:67:E6:C0:FB:09:5F:8F:BB:24
X509v3 Authority Key Identifier:
keyid:68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:23:1d:08:e0:07:ce:a9:23:f5:39:9d:30:82:20:69:c2:ba:
b8:8b:dd:51:63:a7:a2:37:7d:1f:a3:7f:53:ac:1c:fe:95:aa:
3e:51:2c:e3:93:f4:d5:1c:8e:e2:67:91:8f:67:57:9f:81:39:
06:c0:1a:68:93:a6:f3:78:55:91:f5:d7:4f:d3:09:8b:d9:55:
c6:f8:15:8d:c2:5f:90:84:90:19:a1:59:82:53:4a:e5:13:b0:
bf:93:6c:8a:e2:eb:ba:17:99:38:c5:6c:2b:c1:6b:43:c8:d3:
26:e6:f2:32:52:e9:e6:ac:c1:0c:26:5d:44:b8:14:a8:d4:dc:
f5:b4:59:90:32:d6:cd:4b:00:ed:be:03:6d:05:c8:5b:d3:36:
70:9d:06:eb:13:f9:53:16:6a:68:08:43:ad:8c:fd:a4:d5:a4:
29:08:32:9f:55:61:aa:ed:aa:9d:d5:d2:ba:27:57:59:a5:79:
8d:df:92:f4:fc:a3:51:8d:40:57:33:6b:24:33:59:d5:5f:86:
d4:fd:57:c8:3e:88:23:47:87:81:80:60:a8:1d:55:0b:0d:8d:
34:6c:a6:a2:a0:f4:46:a1:aa:28:df:96:13:7d:dd:7d:16:95:
5f:da:53:5e:2c:ed:36:a2:bb:57:d6:5f:ad:63:c1:59:1b:20:
cc:56:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:19 2025 by rpki-client