Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json)
Hash identifier: CG9P2BDrk9Ch9YmSFoZRAKa9gwyYk0mffP3CrNkvz9Y=
Subject key identifier: C1:25:C7:63:F4:70:F2:E1:34:DA:5B:3F:72:D3:FE:F2:D8:8A:89:20
Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2
Certificate serial: 01985AC8F623D005D1307CD0A867F59E6A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
Manifest number: 0152
Signing time: Wed 30 Jul 2025 10:02:56 +0000
Manifest this update: Wed 30 Jul 2025 10:02:56 +0000
Manifest next update: Thu 31 Jul 2025 10:02:56 +0000
Files and hashes: 1: D4h91o5D5LpRFiTgm7RzTo2LaNw.roa (hash: Zr6sYgO/qCLvQUpUT/a9F1ZpmzMHKgAzXVdmByDQ8A4=)
2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: 2vRjlj1WMnUqvMR1aLkpQyDYuA1U9POWn2I4BaWDiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c8:f6:23:d0:05:d1:30:7c:d0:a8:67:f5:9e:6a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2
Validity
Not Before: Jul 30 10:02:56 2025 GMT
Not After : Jul 31 10:02:56 2025 GMT
Subject: CN=c125c763f470f2e134da5b3f72d3fef2d88a8920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:90:04:90:6a:f8:c1:fa:18:7c:8a:07:a2:
fe:74:1d:8f:ae:bc:99:52:48:38:1c:0f:5b:84:a1:
c2:fd:14:b3:48:40:c5:00:aa:02:f9:65:7a:41:aa:
38:86:f1:02:0b:63:d8:ff:33:20:20:9a:3f:14:0a:
32:83:7f:8e:66:5e:46:f6:1a:d6:d1:24:12:a3:75:
e8:22:25:e9:18:7f:e7:5a:04:97:10:fb:76:8f:35:
ac:f2:f8:d7:8c:d4:09:9f:be:67:65:03:ec:f0:dc:
4c:cb:b6:c1:ee:79:c9:b4:6b:f6:0e:3d:d4:51:ef:
1f:a8:96:22:e5:6b:87:59:6b:45:f8:5b:40:4c:44:
e8:e9:0f:0d:03:43:2b:26:0e:d8:83:68:a2:1c:22:
1d:fb:96:2d:ef:ab:16:b5:22:73:49:bd:cb:ec:21:
8a:f0:8e:e7:e8:6b:73:76:00:02:6f:3c:a4:36:b5:
83:37:63:4b:07:00:a0:1b:b6:0e:dc:87:0a:8e:44:
25:1b:ca:d6:a6:55:94:c4:cf:aa:22:fa:a2:1a:2f:
66:c0:ab:92:5d:28:3e:29:8d:aa:1c:cb:4d:df:23:
76:f0:6e:0b:66:3d:cb:4d:1d:26:94:1d:6c:a4:f6:
ba:38:13:3c:1f:90:5d:2d:7d:c3:c0:4d:64:13:3b:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:C7:63:F4:70:F2:E1:34:DA:5B:3F:72:D3:FE:F2:D8:8A:89:20
X509v3 Authority Key Identifier:
keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:83:4f:6e:f8:dc:84:32:8a:39:f2:b2:a7:e0:fd:86:5f:cd:
b5:f3:2d:88:22:97:8c:e0:9e:a8:1f:fb:48:65:f4:43:de:45:
2a:64:30:c0:d7:fe:fa:6e:c9:14:2b:78:a1:93:2c:8f:ef:ed:
05:7c:f6:ec:f5:08:0a:21:35:44:05:ff:99:ec:4f:ed:94:0e:
0d:98:a5:4f:ed:2f:33:e9:bb:a8:c6:6b:b7:59:da:00:dd:12:
1f:e9:3e:89:3c:e5:6b:0c:a5:8e:7b:c5:90:b8:f0:3e:4f:e4:
99:e2:c5:13:19:06:25:9c:fd:c9:af:09:cf:f5:34:a0:4b:cf:
e2:79:7c:70:64:b5:73:32:68:a5:2b:7d:e9:40:d0:8f:4b:30:
28:eb:c6:98:e3:b5:fe:04:67:1a:e8:56:5a:49:f4:ec:a0:1a:
39:9c:03:77:d5:1c:ac:e5:2f:d4:2e:8a:e5:f7:af:df:f0:db:
b9:e5:b3:1f:50:63:14:49:c9:e2:d1:75:47:4b:c4:50:3d:52:
a8:dd:23:e2:7a:fd:07:4e:c8:a5:2a:65:bc:ed:a2:3c:45:6c:
1f:a0:55:b1:41:00:d5:14:b3:41:ce:03:9f:43:61:6a:5e:27:
0f:ab:7a:6d:ce:ac:3f:84:52:22:99:03:cd:83:4a:1e:d2:3a:
37:99:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 16:03:46 2025 by rpki-client