Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File: aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier: q3ENyOShHpGWiEv0rRTzN61nL2YI1AesCBG2j0v24S4=
Subject key identifier: E8:B9:46:53:96:45:7F:E2:83:3D:D2:F5:9D:3B:21:F6:B5:F4:61:8C
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 0198548D95F2FABFAE51FDE4A5D47885F612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number: 155A
Signing time: Tue 29 Jul 2025 05:00:21 +0000
Manifest this update: Tue 29 Jul 2025 05:00:21 +0000
Manifest next update: Wed 30 Jul 2025 05:00:21 +0000
Files and hashes: 1: 5gxDURtK1rmOAdh1eWuh-NkY76k.roa (hash: QaQOgPlbLBzFETMJyWwYJQCd8vML1MyClKfr5uYQDoc=)
2: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: 4CnELPVMI+vX1awv3Ts4ZxTvuiey7ddG6uAZgLhMMvo=)
3: svZ0I0CIbPuXgkYBH_VdeOt4OII.roa (hash: qDnNSem+sBmAuaKOVojckKZEahJzHvEbGjkFY5x9Sqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:95:f2:fa:bf:ae:51:fd:e4:a5:d4:78:85:f6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Jul 29 05:00:21 2025 GMT
Not After : Jul 30 05:00:21 2025 GMT
Subject: CN=e8b9465396457fe2833dd2f59d3b21f6b5f4618c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:ae:76:c1:72:b9:60:34:36:c9:17:df:21:
dd:73:89:37:ce:d2:ce:c1:4e:7c:ff:24:f8:8f:17:
8d:43:5d:7e:90:25:4a:41:81:05:22:f1:65:cb:1c:
0a:a9:6c:26:21:02:d7:63:cc:9d:d2:d5:87:5f:e3:
ad:a0:21:86:f5:44:ea:3a:b3:63:ba:25:b6:1a:1f:
04:41:3b:98:bf:66:2b:c7:33:e6:4e:a2:a6:12:82:
5a:b0:03:60:c9:42:73:5f:57:e7:24:90:21:ea:fd:
94:5b:54:96:b1:14:65:cb:c2:1c:ae:19:2f:25:22:
c3:ab:7f:20:62:25:19:c9:fa:5f:2e:9a:e2:4d:cd:
0d:4c:11:65:94:fd:ee:4b:f3:7d:85:96:5b:55:4a:
e5:79:71:cf:21:c5:a8:ed:2c:a0:59:47:33:08:f9:
2d:61:f7:ef:7e:4b:d0:e5:41:3f:4c:1f:f2:16:a7:
74:ef:93:e2:b0:d2:9b:8b:40:e2:f3:cc:c9:53:b9:
5d:00:cd:ac:46:85:cb:95:26:af:a4:7d:3f:76:74:
24:18:ec:a6:3a:1f:5f:04:80:43:97:13:49:19:b4:
b0:b1:ab:87:31:38:72:f5:b2:a7:35:f7:fb:3e:59:
de:8c:d0:33:ce:69:a6:e7:4a:35:04:2d:4e:a2:6a:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:46:53:96:45:7F:E2:83:3D:D2:F5:9D:3B:21:F6:B5:F4:61:8C
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d0:4f:ee:c9:ec:11:4b:97:8a:31:1d:34:8d:c9:2d:40:f5:
b8:c9:4d:f0:ec:5a:d6:07:b3:53:4f:5a:38:01:4d:4e:24:4a:
70:80:a7:e6:5c:03:45:24:0e:35:f2:b3:ab:be:30:36:05:5d:
1e:3a:02:4b:4d:0b:e9:89:b5:53:a1:a6:15:7a:c0:d6:cd:4d:
d8:04:02:24:0a:b6:49:67:08:f0:30:01:f7:c7:6c:7a:eb:fc:
49:d4:61:44:7e:ea:61:98:19:8b:16:b3:73:c6:d2:61:0f:12:
47:03:68:4b:a0:3d:5e:ae:f3:22:99:5b:7f:80:e8:cd:cb:10:
fa:4b:d4:fb:12:a8:de:e3:6e:f5:01:a6:fe:a2:07:53:67:7c:
8e:79:f7:9f:7b:71:de:90:54:23:ce:0d:bc:05:fb:c8:fc:76:
4e:af:20:28:f2:32:ec:cd:d7:b3:fd:63:9f:31:f4:38:b6:11:
bc:2f:3f:f2:45:70:31:ca:0c:62:8a:79:9d:59:0a:13:e7:81:
a9:8e:a1:fd:34:bb:7d:33:11:3a:11:c8:53:43:45:c1:29:b0:
16:fc:33:96:b6:81:46:44:4a:6c:57:b7:02:73:ab:3c:13:62:
ce:6a:bf:fc:60:5e:5e:89:7a:98:c0:49:00:9d:03:99:b9:38:
9c:f8:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:47:16 2025 by rpki-client