Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier: 3NE29yy7GUr74TxQcQ66BLnCNsSH3HC3dREpb7TVroA=
Subject key identifier: F8:E5:5C:D5:1A:A4:AE:FC:88:02:01:72:23:7A:B2:14:D4:B8:F1:86
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 0198499BE4CCA63680A37A4F1D302399F091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number: 14E3
Signing time: Sun 27 Jul 2025 02:00:10 +0000
Manifest this update: Sun 27 Jul 2025 02:00:10 +0000
Manifest next update: Mon 28 Jul 2025 02:00:10 +0000
Files and hashes: 1: VuecASVmjUcKvyphdlmWhBLtzCY.roa (hash: 9pywbAdYpVLPp0+Qv028vFSYWXiOfuf7WbI6OQxi+GI=)
2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: +7+/s/0fWCLQtHGM17g/0i7DA7xZPcO+ecKfHMnhXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:e4:cc:a6:36:80:a3:7a:4f:1d:30:23:99:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Jul 27 02:00:10 2025 GMT
Not After : Jul 28 02:00:10 2025 GMT
Subject: CN=f8e55cd51aa4aefc88020172237ab214d4b8f186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:39:7f:bd:96:30:db:6c:64:38:c4:1a:7a:
8f:44:08:9e:5c:5a:8c:d5:42:9f:44:d4:9a:4e:0c:
c0:b7:8c:dc:b6:0c:f8:c5:38:a8:85:e9:c6:e7:68:
22:f4:a7:af:82:ac:28:25:c6:8a:81:79:4c:cf:13:
e2:3a:3a:d2:0a:cf:c8:49:ed:d3:f5:0e:2e:c4:23:
13:a9:e7:3b:7f:95:77:61:89:a4:62:da:c6:34:3f:
3e:fa:01:a1:52:54:31:4a:e7:65:0d:7b:bf:f4:d2:
50:76:21:a0:70:19:93:d4:0b:b1:8d:8c:16:b3:dd:
99:18:10:cf:b0:16:79:b0:06:b5:46:b9:1d:32:aa:
0a:87:0b:ed:b7:f2:fe:1a:7a:33:0e:aa:18:81:71:
a5:41:4b:ca:e8:63:37:49:3d:6c:d8:73:27:34:ea:
cf:e8:8c:1b:8a:cd:a6:1b:50:91:41:b6:ea:6d:7e:
2f:e5:1c:7d:e7:21:18:3c:3f:16:9d:df:c4:33:78:
b8:20:55:56:bf:31:4b:c0:6c:22:bf:95:2b:ab:57:
29:aa:6e:ed:85:ef:38:6a:a7:10:be:ad:44:ed:59:
5e:88:76:99:2c:79:cb:0f:5d:bc:00:ad:f0:01:d2:
2a:1a:a9:46:ee:cb:15:50:2b:13:66:4f:ea:e1:84:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:5C:D5:1A:A4:AE:FC:88:02:01:72:23:7A:B2:14:D4:B8:F1:86
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:58:b9:70:c4:5d:96:7a:74:01:e4:4f:64:e1:6f:ea:7a:bb:
34:d6:94:84:a4:be:50:80:c9:6c:c4:93:cc:bb:12:57:f7:ff:
fb:f5:93:e0:b3:ec:08:80:45:32:bb:a6:dd:c5:37:86:ea:70:
05:01:57:77:ca:ff:f8:f7:59:c5:06:5b:f7:ba:51:60:c3:66:
08:9d:7c:6f:51:37:94:58:96:99:e3:b0:83:ad:cf:3d:e4:8e:
bc:a8:01:12:7d:e8:e0:8e:25:d9:92:cf:92:7e:11:4a:c5:e4:
59:4b:43:9d:de:37:27:4a:84:3e:77:ba:e0:89:7a:6e:de:2d:
69:7b:a3:f3:c9:2e:dc:6c:ce:09:43:ac:89:c9:1d:35:bc:cb:
84:b7:9e:b1:e3:7c:ea:35:1c:01:93:fc:e0:5c:40:4d:6c:41:
15:2d:4d:8c:39:a1:de:f8:fb:d8:ad:31:ce:c1:20:32:2c:67:
49:bf:88:fe:27:f2:8d:08:41:19:38:ab:8a:74:e2:aa:11:e6:
0e:b7:05:35:63:77:81:b6:f9:d9:46:a7:72:55:cf:54:7c:c2:
a5:0d:18:18:9a:1f:c2:5a:19:bc:37:ae:a9:87:5a:8c:f1:7c:
1d:59:90:d4:0b:c8:34:55:1a:4d:b9:a0:50:fd:3c:e0:9d:9d:
9f:6b:aa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:07 2025 by rpki-client