Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: p1CktYCEo+w6UW9MpYRB/jepx4pxqID8Rj59wnQeooA=
Subject key identifier: 54:99:51:4E:73:68:1C:DC:30:8C:BB:95:12:E1:79:3E:77:D7:7A:69
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 0198277E7755CCE5F26F86916862FE5ED889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 57
Signing time: Sun 20 Jul 2025 11:00:56 +0000
Manifest this update: Sun 20 Jul 2025 11:00:56 +0000
Manifest next update: Mon 21 Jul 2025 11:00:56 +0000
Files and hashes: 1: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: gK5ndYu5tE/jBtKorp36wqwVzzvUzbOulBjIVVM+IwA=)
2: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:77:55:cc:e5:f2:6f:86:91:68:62:fe:5e:d8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Jul 20 11:00:56 2025 GMT
Not After : Jul 21 11:00:56 2025 GMT
Subject: CN=5499514e73681cdc308cbb9512e1793e77d77a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:15:cb:fa:7f:25:07:52:d0:c7:d5:2b:93:
7c:bd:c3:07:a7:a1:5f:e6:eb:4d:63:c4:38:ab:7a:
6e:ec:13:15:36:cf:9a:26:07:dd:fe:f9:a9:31:da:
68:95:c2:82:8d:41:98:98:ca:3f:f7:bf:41:25:86:
7b:2c:62:18:17:c7:50:26:4e:65:7f:c4:8c:99:cd:
da:78:e8:b6:26:69:35:52:85:cf:0e:35:59:43:7f:
05:90:ea:98:1e:2e:21:f8:23:74:07:f9:bd:fc:8d:
92:f4:9c:34:d2:bc:56:64:f4:b4:45:67:f7:8d:02:
b7:67:1c:f9:b2:e8:72:ed:fd:33:30:d8:48:82:c6:
85:3b:54:26:d3:c1:51:fb:26:c4:ac:b8:98:5c:3a:
2d:3a:cc:2d:1f:b8:f3:4d:92:d0:eb:7d:9d:7c:66:
01:99:c3:c5:7e:13:57:ad:42:00:95:d8:6c:26:51:
2f:9e:a6:25:38:4c:c2:c1:b2:82:5f:85:cd:df:ff:
a2:8c:98:73:67:45:94:69:31:af:99:0f:23:01:fd:
25:97:d7:ef:e2:b7:92:d5:33:8a:a3:f2:ef:cb:0d:
a8:1c:0d:e8:20:36:d2:5c:61:9e:f9:76:d0:f3:18:
d5:5b:23:11:60:a2:f2:60:7c:5d:c1:87:7b:8d:46:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:51:4E:73:68:1C:DC:30:8C:BB:95:12:E1:79:3E:77:D7:7A:69
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:14:ef:45:fa:60:0c:19:7a:7d:bb:47:41:38:14:22:d3:0a:
07:12:dc:2d:65:72:0b:c0:8c:43:5b:94:ca:00:eb:1f:f9:f2:
b2:dc:34:a6:70:db:5c:8d:b2:91:d2:c2:08:5c:8d:0b:16:d7:
75:9b:e2:1b:eb:24:38:b2:6c:da:a7:5e:af:66:86:8d:60:5a:
ae:fe:bb:4a:bc:e1:8d:12:04:56:34:9c:98:73:49:e9:b3:d8:
d6:1f:f7:1a:71:aa:6f:5f:d4:05:27:96:ad:8f:ae:ea:b0:2f:
11:f6:b8:39:33:fe:69:66:62:03:37:a1:97:a7:7a:1a:ff:72:
d0:ef:01:8f:be:e6:13:cb:f6:03:89:ad:09:14:fb:34:a6:a1:
7c:5b:ba:8b:d5:b6:2e:c7:35:42:16:6a:81:4e:80:a8:7c:06:
9c:d7:df:dc:58:c8:28:bc:b0:fd:c2:3a:fc:01:1e:c0:00:35:
23:23:4e:78:bf:22:12:93:1b:92:00:16:62:62:13:a5:af:f7:
8e:39:05:52:bd:08:06:a3:ac:96:99:d9:27:66:04:59:5f:67:
d5:a9:2c:8d:5b:3a:2c:32:eb:a7:9f:0a:c2:de:33:af:7f:59:
e7:64:8c:0e:da:50:5f:45:24:15:b6:a8:00:32:41:a1:87:3c:
08:d3:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:15 2025 by rpki-client