Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: /HbGUy/QY6foO6DKveQEggGTT/aw1PoSSci8ebJROCw=
Subject key identifier: 70:45:91:1D:B8:26:C4:E4:41:75:C5:15:66:39:C8:AA:5D:93:2E:B0
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 0198534431CE515CF6E572A6BD0C82A8F80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1599
Signing time: Mon 28 Jul 2025 23:00:34 +0000
Manifest this update: Mon 28 Jul 2025 23:00:34 +0000
Manifest next update: Tue 29 Jul 2025 23:00:34 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: u/kMjiysBP8ycXR5wHZ3mt/e7LbaKvCQQJotjSxfJJQ=)
2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:31:ce:51:5c:f6:e5:72:a6:bd:0c:82:a8:f8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Jul 28 23:00:34 2025 GMT
Not After : Jul 29 23:00:34 2025 GMT
Subject: CN=7045911db826c4e44175c5156639c8aa5d932eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:7c:11:2f:c5:d5:50:7a:ed:6e:2d:a6:95:
22:cc:8d:39:da:d6:fd:9d:0b:5c:07:9d:10:2f:f9:
f8:f4:ee:c7:25:e4:9f:a1:95:1d:d4:e8:3a:27:c7:
cc:e7:b5:78:42:bf:7f:13:78:ce:4b:75:24:82:7f:
36:3a:33:c2:6d:9f:c3:4e:6c:43:72:f3:32:ef:c3:
7d:34:ef:36:1d:9c:a6:d1:fd:89:b9:c9:f6:a0:87:
83:aa:c9:60:81:e3:09:4f:88:d3:9e:88:cb:de:ee:
1f:5e:12:39:e6:21:dc:c3:2d:40:64:9c:0f:dd:80:
f0:ec:2a:9f:5c:c5:53:11:5c:58:2e:61:db:d1:8d:
e5:c9:58:e4:d4:37:e5:ea:48:c9:13:1a:7c:b1:51:
68:26:ea:45:02:de:64:b5:62:6f:00:d8:65:ab:01:
0b:22:fd:8c:31:f3:60:24:1f:12:c1:89:dd:13:10:
e2:4c:8e:d4:5c:3e:73:0a:2d:9e:f0:4f:29:cb:ac:
b0:db:48:72:c1:c8:5a:df:fe:97:d1:ec:4a:94:17:
79:bd:e7:6e:07:aa:2f:f1:57:89:3e:b7:e2:df:27:
20:5b:c0:f7:56:7f:f0:7b:2b:ee:72:10:64:fb:80:
82:4d:8e:46:4f:e2:83:d1:3e:b2:ff:1b:20:17:f4:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:45:91:1D:B8:26:C4:E4:41:75:C5:15:66:39:C8:AA:5D:93:2E:B0
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c6:31:ca:f3:84:0e:84:f6:7f:82:0b:1d:72:4f:2d:d3:36:
fb:84:1b:9d:cd:d4:e1:9c:11:2b:ac:f7:36:f4:2b:10:16:a4:
28:48:ef:1e:07:db:dc:25:18:a3:f8:6b:8d:b4:42:8e:f7:ff:
ea:67:41:2c:b8:3e:22:8d:ff:31:dd:c3:75:95:a2:9a:b0:1a:
ce:ca:c1:43:fd:80:c8:d0:19:58:1a:c0:c3:38:d2:b5:94:a3:
3f:05:29:e0:9f:53:b9:aa:31:6d:11:e7:7c:7b:bc:d0:cc:47:
b3:d8:57:2d:a0:02:28:44:96:34:90:68:e9:e1:ba:3a:f2:46:
14:06:cc:00:2b:db:a6:0e:78:df:dc:85:02:09:cd:d1:50:ba:
8d:25:78:ea:fd:02:68:02:26:8a:52:80:48:96:60:a2:a0:dc:
a7:2e:12:6d:a7:b2:d3:0e:eb:b5:d5:39:b9:75:64:74:d1:a6:
9f:ed:e7:45:42:84:20:b5:8f:1c:32:ed:3f:12:a5:13:db:c7:
c8:4b:06:8e:82:c8:c2:7b:86:6c:58:2e:8e:12:69:08:b6:1b:
9c:7f:e9:5e:10:f6:4d:3d:20:67:bd:e3:7c:64:88:ad:9e:3f:
dc:b2:2c:af:74:86:7e:ec:c7:38:8f:66:b9:f8:2c:c3:2b:db:
ed:ba:98:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:14:48 2025 by rpki-client