Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: j+TmPr/zWA+wGt0nmEmQznKH+nGOU0bdCOliHcb7M78=
Subject key identifier: FD:A0:09:0D:57:39:73:33:48:F5:BA:4B:38:7D:FF:20:31:09:4A:0C
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 019853445560F810D365FFE89AE8A9CFE3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 1504
Signing time: Mon 28 Jul 2025 23:00:43 +0000
Manifest this update: Mon 28 Jul 2025 23:00:43 +0000
Manifest next update: Tue 29 Jul 2025 23:00:43 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: ZENpkHgtzyaYhmmACQWhGktiAn6+C9UnuVFLogAR400=)
2: cMnqdtCxCnyUSWOfUxTVBWPspak.roa (hash: OOJ4v4cc4LujDvo5fdL7b0ZauPjg9CekPa/sj+wo+LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:55:60:f8:10:d3:65:ff:e8:9a:e8:a9:cf:e3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Jul 28 23:00:43 2025 GMT
Not After : Jul 29 23:00:43 2025 GMT
Subject: CN=fda0090d5739733348f5ba4b387dff2031094a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:24:6b:29:39:11:f8:f3:f0:1a:ce:18:bf:
7e:93:a1:06:d7:60:f9:1d:2a:0e:de:b6:43:6a:27:
c4:6d:d1:0e:bf:21:ce:7b:be:4b:44:7e:d0:3d:d4:
86:84:10:f5:7c:7f:b0:5c:39:5e:48:22:06:96:70:
e4:0f:55:0d:3f:5c:24:11:7c:4f:14:57:55:8b:86:
66:19:89:ad:e5:c9:3a:3b:5f:45:5d:cc:2c:19:f5:
95:0c:49:d2:2a:e9:6c:7d:c2:2b:3c:b7:d3:be:8b:
bc:03:0c:7d:56:30:51:74:c5:f2:1b:05:7f:f0:76:
3f:5a:1a:e2:da:7e:ba:88:3e:67:75:8f:e8:fd:50:
59:00:52:04:c4:20:69:56:76:ba:e1:a1:9b:4a:9f:
75:f7:3a:8e:4b:c5:32:d8:4f:22:04:5e:3d:fa:9f:
fa:fb:ae:b7:d1:da:e3:fb:2d:14:b7:b5:aa:ad:98:
d1:31:b0:b1:d9:bf:f8:68:5c:06:4a:13:c6:65:f4:
1c:11:19:2d:03:aa:49:09:84:74:fa:7c:b5:24:68:
5e:a9:34:af:d7:d5:c3:17:1d:5f:f9:a8:2a:78:8a:
2b:98:2f:9d:43:31:69:ce:f9:bc:dc:a2:9f:46:c6:
ad:c4:d5:12:fa:64:ef:5b:1b:4f:ce:e0:63:5d:8b:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:09:0D:57:39:73:33:48:F5:BA:4B:38:7D:FF:20:31:09:4A:0C
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:4b:eb:71:bf:3d:98:84:38:12:ce:ae:35:02:8c:93:c2:
9d:a4:db:ba:ad:50:fb:6c:02:f9:78:42:8e:67:7b:7d:60:db:
31:5d:b3:54:33:5a:d9:b4:7b:40:35:5c:65:5e:74:50:bd:f1:
68:74:b9:c5:17:d8:7f:72:11:9b:2a:4c:81:d2:d6:8d:17:7c:
74:d0:f2:56:9b:9b:c1:69:46:f9:b4:d3:ac:b3:ca:3b:cb:e6:
dc:08:1e:9f:d5:5c:f4:ba:9e:92:97:74:17:16:8f:28:70:99:
f0:9b:45:bd:20:46:4a:ca:fa:d7:db:72:6a:24:c8:16:fd:c1:
bc:2b:cd:a4:85:92:19:72:1e:42:8f:03:85:4a:c6:e1:fe:d8:
6a:09:36:e6:1f:f6:87:a9:dd:6f:7f:13:e6:c7:03:00:c5:f6:
67:e0:52:70:29:c7:0e:12:74:3c:01:c2:c9:ca:e5:f0:1c:e5:
71:13:e6:79:be:42:68:df:59:92:ac:86:b4:67:b7:41:9c:2c:
a7:7d:2c:00:ae:3d:02:fe:e2:df:a1:d7:55:a7:9f:e6:c5:8d:
2e:59:7a:6c:e6:90:fa:b5:8e:d3:ee:2e:27:d1:1a:11:3f:84:
ec:ae:ef:90:f7:db:93:85:fa:97:b0:02:cf:49:c7:c3:6b:57:
14:7d:70:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:20 2025 by rpki-client