Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: rw8Y8Gcq3BXYvFSwB5PkJ2y/lKbkuZ+tdMHw+wzoGkg=
Subject key identifier: AC:EA:9D:4A:7F:16:A6:53:6C:8F:4A:0F:04:96:75:13:CC:B6:68:03
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 01984F31884CC4499A59D161D6366FDA14C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 0ECD
Signing time: Mon 28 Jul 2025 04:01:42 +0000
Manifest this update: Mon 28 Jul 2025 04:01:42 +0000
Manifest next update: Tue 29 Jul 2025 04:01:42 +0000
Files and hashes: 1: 7M-OD2BZKTGFt1pigwcJKxVnusA.roa (hash: 75qUp+vt+nvqE7SylHu29lyZut/MWc3ge7gcStv53+s=)
2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: ec8ldlDVfpDdaFD5kIx9xpcCflZg6CJeAzfPqLuY+pg=)
3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:88:4c:c4:49:9a:59:d1:61:d6:36:6f:da:14:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Jul 28 04:01:42 2025 GMT
Not After : Jul 29 04:01:42 2025 GMT
Subject: CN=acea9d4a7f16a6536c8f4a0f04967513ccb66803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:d7:35:1f:e6:37:91:c2:6f:a1:33:05:fa:
92:07:38:0b:bb:d1:15:9a:9b:2d:5a:fe:46:4f:a1:
4f:6e:da:ea:63:b1:09:78:8c:71:49:5f:a2:24:aa:
74:c5:f1:d3:a4:44:47:e5:f1:3a:1a:29:c8:af:30:
bf:5b:97:84:cb:cf:19:9b:7b:db:fe:14:02:51:73:
2e:91:4c:28:de:40:71:4f:74:ef:14:21:20:c8:f6:
69:59:84:33:2e:0b:5c:2a:ad:a2:1d:5f:b8:e6:c9:
c6:03:74:c3:de:d3:5b:06:1d:46:06:32:46:ae:63:
c8:27:c0:9a:41:5d:57:cb:b4:2d:25:a0:f6:df:de:
5f:9c:c8:e0:1f:79:be:d2:2c:00:01:1d:72:40:f1:
3f:a8:d1:3c:35:ef:35:a6:16:d8:b2:f5:67:f5:67:
de:10:46:2f:aa:50:ef:e6:41:14:a2:f0:35:52:84:
54:b0:1d:13:9a:2e:b3:f9:ec:46:85:a4:27:17:b3:
29:d3:f2:5e:4e:99:e3:39:5d:c1:cc:85:69:5d:9b:
05:60:19:30:68:db:b4:17:3d:bf:68:f4:cd:fd:5d:
5f:cc:e1:15:f0:fb:c3:a8:72:78:ad:00:34:02:e0:
af:aa:b7:ba:43:f0:81:0d:dc:b1:e3:e7:52:4c:92:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:9D:4A:7F:16:A6:53:6C:8F:4A:0F:04:96:75:13:CC:B6:68:03
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:48:fe:4f:7a:1b:45:83:79:ce:e3:28:9c:2a:0c:a4:9b:d7:
bf:80:fd:04:3b:79:4e:35:17:6a:97:30:c5:e4:00:00:17:79:
22:63:e4:bc:81:ff:1f:4f:35:15:2a:59:9b:60:40:d9:d8:86:
1c:37:c4:ae:f7:4e:8f:df:52:d7:94:b3:58:71:bd:15:a9:52:
41:ca:2a:c2:f0:4c:33:4f:2d:ba:7d:8a:c7:32:1d:07:df:ae:
3e:8b:5e:a7:0a:7b:64:88:89:d3:e1:43:54:4f:fa:18:90:bf:
73:c8:04:1e:aa:df:af:82:fe:04:7b:eb:96:2d:5b:79:03:78:
4b:c1:95:4a:f7:be:d7:8c:c6:fe:5a:22:69:f2:ea:19:71:9a:
be:04:d1:4b:4f:55:ea:d8:26:a4:2a:7c:34:eb:f1:ef:51:95:
e0:9c:32:b6:78:7e:4e:73:48:61:41:6d:6b:7f:ba:8b:6d:d2:
48:6b:b5:6b:c5:0a:ac:6f:d6:67:77:f9:cf:89:64:49:a9:54:
b4:48:85:f3:6a:8c:fa:37:1a:50:86:04:b5:98:4d:f4:d6:41:
f5:ca:23:90:91:1b:1b:38:fc:28:86:2e:c2:c4:0d:f8:66:5f:
4f:74:65:03:6f:40:42:97:c6:45:06:fa:15:2e:91:fa:d5:b1:
48:17:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:27:00 2025 by rpki-client