Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier: 8g3KqUIimAle19Hstuhia5vn+KzT+N9YCdZ/9pyA9+I=
Subject key identifier: 00:67:74:85:7E:B8:51:68:B2:D7:FC:DD:68:63:22:98:D8:6D:DB:B7
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial: 01983E7382DA1129077AFC94EB65C8594F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number: 0291
Signing time: Thu 24 Jul 2025 22:00:14 +0000
Manifest this update: Thu 24 Jul 2025 22:00:14 +0000
Manifest next update: Fri 25 Jul 2025 22:00:14 +0000
Files and hashes: 1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: 7DHDLa6stoeeyzolnqPFzgPfAaciUEVN7E7p503wuLg=)
2: d97Ch2oOF5rboQAm4Ny7S68pdDs.roa (hash: GTey3KF1CvpIvjeJCgqABtZ3XGUGtGoEyAaxaxLHaVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:73:82:da:11:29:07:7a:fc:94:eb:65:c8:59:4f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Validity
Not Before: Jul 24 22:00:14 2025 GMT
Not After : Jul 25 22:00:14 2025 GMT
Subject: CN=006774857eb85168b2d7fcdd68632298d86ddbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:ca:d8:06:63:8a:ba:ff:78:e5:7f:33:3e:
82:25:2f:2b:e6:8b:81:65:02:13:f0:ce:17:50:e4:
bd:c3:70:64:cd:76:9b:51:18:a4:8a:00:e0:08:1f:
77:31:8c:f4:b2:fa:9e:cc:f8:d4:e8:eb:af:b9:30:
41:d4:53:7b:62:95:30:0f:54:6c:5b:8b:15:2c:e6:
4b:3d:b2:f2:02:ff:9b:1c:64:31:3e:70:cc:06:54:
a9:83:af:38:3e:14:01:95:bb:bb:48:e2:30:37:14:
54:97:99:20:ac:76:2e:ff:b3:dd:91:97:71:63:53:
eb:70:a2:47:ea:68:6d:3a:ec:6e:a3:8f:37:aa:7d:
e3:65:1c:23:6d:54:3f:1e:c3:d4:09:7b:7f:8e:6c:
39:6c:b0:e2:87:15:7b:07:7b:5c:6a:b8:cf:75:0c:
0e:66:9b:ec:27:f0:d2:37:ce:e5:0d:5f:ec:bd:2a:
05:d8:d2:aa:43:72:ab:d4:0b:58:2f:95:9a:1f:c0:
9c:1c:f6:28:55:6d:08:22:4c:ca:8f:64:94:40:62:
db:04:e3:d6:ca:c7:a4:53:4f:ee:55:44:eb:d9:e5:
5e:e2:fe:e8:21:73:71:30:15:47:60:41:3a:88:b8:
ed:87:3e:2a:42:bd:93:5b:97:32:d7:f8:17:bb:39:
ac:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:67:74:85:7E:B8:51:68:B2:D7:FC:DD:68:63:22:98:D8:6D:DB:B7
X509v3 Authority Key Identifier:
keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:72:ba:52:e1:14:64:bc:a3:52:9f:d7:00:ad:17:47:a3:ce:
1f:57:a0:43:52:fe:9e:f5:88:ba:6d:41:bf:7f:0b:f6:01:fa:
e8:36:ab:f4:76:5d:7f:65:6c:c1:93:10:ec:93:41:e8:fe:22:
e5:aa:2e:cc:9c:47:7f:f0:e5:af:ac:a3:22:57:9e:b9:b9:46:
52:16:16:15:24:04:9a:f5:33:a8:f5:12:6c:8f:ac:dc:57:75:
47:ea:97:1d:ca:78:43:c6:74:ad:69:50:71:17:02:c9:c3:dd:
1e:33:25:b3:41:c1:fd:2c:8a:40:f3:48:05:e9:6a:99:20:15:
1a:f6:1d:b9:ee:f5:32:86:ef:12:fa:26:22:0e:f8:fd:91:4d:
c0:c3:7b:fb:e7:32:13:44:23:9d:37:42:5c:91:52:a9:ca:57:
17:db:01:4d:62:47:1a:04:7e:41:54:b9:aa:a3:d5:9c:42:a0:
a6:31:13:aa:fd:38:c9:49:1f:4e:41:71:4c:f1:f8:6b:dc:e2:
21:e6:5f:74:d0:47:fb:c9:56:6c:3b:e6:bc:f0:31:5d:33:59:
40:00:59:63:f7:d7:cc:b5:12:8f:3d:37:30:65:f0:1a:cf:67:
9a:26:d8:59:c3:16:18:6b:90:0e:34:0d:9a:a7:7c:e7:d3:1e:
62:37:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:34 2025 by rpki-client