Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: xt492LLf3ohe6uUFkSIFxigPvKYoqSxEals5wTv7Eso=
Subject key identifier: 87:20:D2:4E:6A:3B:57:F7:3C:4C:04:7A:24:D1:81:57:1A:90:D6:6A
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 01984AAEC1F310186B6E6144B946CF294849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 0DF1
Signing time: Sun 27 Jul 2025 07:00:23 +0000
Manifest this update: Sun 27 Jul 2025 07:00:23 +0000
Manifest next update: Mon 28 Jul 2025 07:00:23 +0000
Files and hashes: 1: TPjf70pa6qBZmpfYB0iX9CcL4Y4.roa (hash: swAbvLbVBmlLATlL/hX7o87L+INYtKkOcONzc8lraTI=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: T8jDm4pl7H9VBoWldP1oFe6Vw+IcBhyOvymuYyGshiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c1:f3:10:18:6b:6e:61:44:b9:46:cf:29:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Jul 27 07:00:23 2025 GMT
Not After : Jul 28 07:00:23 2025 GMT
Subject: CN=8720d24e6a3b57f73c4c047a24d181571a90d66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:91:c8:b5:a2:bd:f9:c6:66:2f:68:75:0b:
c9:24:bf:75:6e:f8:15:a0:40:28:99:6c:f7:ae:01:
d2:d1:5d:ec:0e:f6:41:22:90:49:87:86:1d:a3:bc:
fb:fe:28:7b:6c:8a:28:29:1c:f2:23:a3:6e:21:a2:
58:6f:77:46:b9:06:9f:a8:d5:8e:8d:11:8e:c2:dd:
58:f2:90:27:92:55:4b:07:b3:0f:d4:50:3e:cb:2f:
5e:aa:e1:27:1f:7e:c0:22:25:fa:4b:c3:72:f5:2b:
81:e2:ed:51:1a:f2:ab:6c:e5:69:b8:37:a2:34:40:
ea:93:ef:1d:6e:b2:e5:4d:a4:18:d5:3c:f8:52:84:
f1:bf:dc:24:2c:a7:74:8b:b5:18:cf:ec:5b:bb:45:
b9:f0:28:7d:ba:b0:84:dc:b3:b2:b1:16:11:4e:1e:
8f:d3:b2:98:a4:22:39:01:23:ff:c2:12:18:ac:5c:
95:59:d7:b2:87:8b:68:59:f4:d4:5a:be:b4:b9:ee:
40:24:43:00:65:bd:be:9a:af:cd:ba:a4:9c:9c:13:
78:9c:3b:07:8c:be:d6:c2:d8:e1:fc:7c:fe:63:1c:
37:8b:e0:5f:6f:cf:cc:a1:5f:16:cb:bf:27:d3:14:
61:a2:bb:0d:0d:53:da:ff:2b:d3:35:b1:56:16:11:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:20:D2:4E:6A:3B:57:F7:3C:4C:04:7A:24:D1:81:57:1A:90:D6:6A
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:30:9e:d0:04:79:56:36:04:5e:2a:df:9f:ba:28:99:98:19:
77:4e:92:2d:6d:1c:1f:a0:78:94:45:7c:60:09:74:bb:4b:d1:
47:13:81:29:3d:63:38:21:bb:26:fb:83:ba:15:3d:d5:a1:13:
5d:b1:fa:4a:de:92:d1:7b:f7:4f:4c:98:db:9b:9f:54:fc:9f:
d6:3d:9e:ca:b2:0e:58:16:9d:f6:9d:58:de:0a:9d:6f:4c:7c:
26:e7:ad:8f:f8:8f:be:b4:79:3d:71:be:d7:2b:75:d8:75:54:
ad:f5:1c:2f:08:ac:b3:56:fc:cd:cd:1a:7a:88:5c:3a:f9:62:
76:c5:7f:f1:21:c4:66:04:d5:fc:ef:eb:b3:b8:4d:69:3a:7b:
17:05:eb:f9:2b:bd:6b:af:0d:8f:ee:f9:e4:1b:fd:41:2f:20:
48:fe:0a:fe:57:34:82:39:af:83:ae:8e:77:cc:e5:70:82:54:
37:d7:6c:5a:98:84:0e:4c:c9:1e:78:73:bb:58:78:7a:f9:f1:
bc:84:1d:02:e0:62:d0:e5:90:3a:97:a8:40:d0:a5:11:65:29:
f3:4c:89:26:1a:f8:99:d0:8f:ab:0e:c0:2d:96:92:d2:be:e3:
61:9f:e1:de:9d:00:ed:ca:cf:e9:95:21:fe:f9:e0:78:0a:a6:
e7:bb:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:03 2025 by rpki-client