Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: NjHbkRuRv22F7N31GhX1FPOLc/51NGRKpNvWPgQLjOI=
Subject key identifier: B3:DB:8F:C9:D8:16:07:26:79:4C:13:CB:B9:C2:C3:5C:72:8D:FA:FE
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 01985758535BC4EAD3BFCA4A9C99D40113D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0622
Signing time: Tue 29 Jul 2025 18:01:02 +0000
Manifest this update: Tue 29 Jul 2025 18:01:02 +0000
Manifest next update: Wed 30 Jul 2025 18:01:02 +0000
Files and hashes: 1: Ceq8ni5DLt6rfS2QOewOZADzIpY.roa (hash: sy82azLmDtvWPz93HHlbs3C4D4UnntFGcj5egr3ZE8c=)
2: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: Fgj+lEe3Fgd2NV33TD6/bsLArGGDJpJVBi4AJIinCBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:58:53:5b:c4:ea:d3:bf:ca:4a:9c:99:d4:01:13:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Jul 29 18:01:02 2025 GMT
Not After : Jul 30 18:01:02 2025 GMT
Subject: CN=b3db8fc9d8160726794c13cbb9c2c35c728dfafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:ef:f4:ff:8d:83:58:a0:42:f9:f8:cc:3e:
f3:87:7b:9b:ce:1d:07:e3:2e:6c:e4:82:0d:ee:0c:
68:5e:9f:69:2a:e3:96:bb:ed:0c:54:b3:10:7d:9d:
b6:d2:ba:cc:b7:2d:58:d1:a4:f4:4a:e0:62:2c:bc:
0e:08:c0:e7:69:e4:d7:48:9f:b4:fe:76:c9:ca:c0:
37:38:9c:71:aa:40:bb:e7:73:3b:34:9c:fb:45:a2:
0e:13:e5:0b:d4:f0:2f:8f:38:a1:c9:6e:93:a2:d3:
45:1b:24:f6:38:4b:6a:31:eb:e8:a5:65:15:32:8c:
dd:db:61:a4:b1:ab:b3:5f:8d:eb:31:d6:25:e2:91:
0c:7a:d3:fc:ee:1d:74:c6:ab:a0:9e:35:8e:52:98:
dd:03:c2:63:47:9a:f0:ab:59:f8:94:2f:f6:e2:a8:
58:d2:3a:77:11:00:29:21:e2:82:8e:f0:3e:df:7a:
cd:3b:6b:03:e2:89:e6:1b:63:47:90:6e:27:23:2f:
5e:d7:60:b0:14:f8:78:1b:1a:1e:70:55:f7:c0:5f:
86:86:88:3e:c5:b9:be:37:8c:cb:3a:2f:14:b1:20:
51:94:d8:d9:6d:2a:d1:d5:aa:da:43:cb:e2:a4:b8:
bb:9e:bf:5b:3f:cf:62:b0:8e:c3:d8:5e:5d:94:39:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DB:8F:C9:D8:16:07:26:79:4C:13:CB:B9:C2:C3:5C:72:8D:FA:FE
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:13:96:d7:21:48:af:42:f2:62:c2:08:0f:57:24:00:d9:ca:
0d:05:18:13:6a:7a:e9:77:ef:6a:d0:01:e4:19:00:3c:f2:f4:
11:89:75:e8:e4:07:16:da:88:6b:a7:ba:c2:e2:f5:1e:ab:48:
82:d5:17:ac:a3:80:21:c4:23:8d:96:0a:59:b9:68:8d:a8:b4:
f4:05:67:7f:ed:2f:5a:c2:46:32:16:de:09:65:d0:61:c5:0b:
8c:de:ff:f3:da:ba:16:47:d6:3b:0e:ce:6d:73:12:24:60:ad:
df:ec:a8:e2:1e:bd:1e:16:48:d7:43:e3:86:2e:a2:9c:14:7e:
e3:60:fa:d4:42:d4:6a:f8:cf:96:db:7d:76:fd:36:47:d1:bc:
81:05:6e:6a:35:e1:78:af:d7:07:67:d7:d7:b6:25:7d:c0:1b:
76:72:74:c1:28:15:cf:28:f5:8a:ac:b9:cc:0f:2b:e1:d9:aa:
8f:73:66:78:b8:92:4c:3f:7d:ba:d7:93:16:5b:07:49:dd:12:
c5:49:c5:fa:40:1d:08:fe:48:49:16:42:c7:05:25:0b:c8:df:
1a:2c:e6:9d:96:09:3c:6f:30:b5:14:b1:e3:ce:3a:5a:3e:9c:
d7:79:df:ed:16:97:c9:59:25:f4:50:f8:da:82:51:4e:20:55:
cc:08:c0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:35:29 2025 by rpki-client