Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
File: aNQlzHsbeICodfdr7agP4xCTGe0.mft (raw, json)
Hash identifier: TpFeyXVmFklaaeyD8djtV8j6KJWK+Xr898bleTIuFug=
Subject key identifier: 0F:D4:E4:28:28:D5:96:AA:67:3B:02:12:BB:F8:7A:14:72:C2:9B:30
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Certificate issuer: /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial: 019849D33CF31AC91C39CB498EC63ACBFF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:37 +0000
Manifest this update: Sun 27 Jul 2025 03:00:37 +0000
Manifest next update: Mon 28 Jul 2025 03:00:37 +0000
Files and hashes: 1: 1ikX92cBkm7W7rHfhLCtgqKM0d8.roa (hash: oY5BxXRyJZhAnRLwWm3V4CClsVP5JaJOwIydkhqNE80=)
2: 2KU1lG8tmW62eqBwxBBDds81m5A.roa (hash: DXWqInrCKLzcQadKZzuaDGdIbNbzO5YygQPkSyOtdqY=)
3: aNQlzHsbeICodfdr7agP4xCTGe0.crl (hash: FhlQ+y5g5Lh47cZDVGuxW7NBrX7xPyx55h2gjD+oAys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:3c:f3:1a:c9:1c:39:cb:49:8e:c6:3a:cb:ff:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Validity
Not Before: Jul 27 03:00:37 2025 GMT
Not After : Jul 28 03:00:37 2025 GMT
Subject: CN=0fd4e42828d596aa673b0212bbf87a1472c29b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:82:7d:e9:73:e0:21:84:71:08:07:e2:17:
b0:5a:1d:53:a6:0d:33:06:73:e0:d3:72:2f:40:80:
a2:5b:e7:71:f8:1c:41:76:da:9b:b1:fc:4f:e1:b0:
d8:f3:46:bb:d0:4f:eb:40:1d:06:a3:50:8c:39:e6:
2b:bf:6c:1a:8b:a8:e6:2d:58:92:b3:0b:23:1a:d8:
a3:c7:c6:ae:d2:c2:2f:ce:79:9c:14:5a:e4:7f:c4:
11:3e:81:c1:92:1c:83:e8:a8:e9:e3:5b:24:8b:a2:
d9:2a:35:c4:e3:37:77:44:fe:65:73:a2:b1:06:bf:
51:f4:4d:ca:86:9c:e3:2f:3e:38:e6:0b:a2:c5:6a:
c0:fd:39:b0:4e:40:da:36:81:a0:8c:e2:ce:55:1c:
64:2f:f5:4e:f7:2b:a4:d1:dc:e1:b4:cb:8d:0e:e3:
e4:00:0e:6e:63:b5:7c:00:d2:d3:62:70:73:38:c8:
4e:2d:29:b5:2b:fa:2e:8b:3c:69:c5:90:f3:cf:84:
94:6d:9d:9f:44:1f:57:70:52:08:a8:f7:65:9b:59:
5e:7c:ce:7a:10:4f:51:96:a0:6f:50:87:03:51:9e:
d9:e2:9b:69:75:80:4f:f8:11:0c:37:0b:4b:95:12:
01:29:4f:96:73:95:47:e4:3c:bd:90:04:0d:5b:b0:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D4:E4:28:28:D5:96:AA:67:3B:02:12:BB:F8:7A:14:72:C2:9B:30
X509v3 Authority Key Identifier:
keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4c:fd:58:5c:24:5e:8c:ed:06:cd:2d:8c:9f:ab:0b:01:80:
2b:cc:91:56:17:f2:7b:07:2a:f5:c4:32:ac:69:fe:20:7b:00:
31:97:cb:a8:4f:65:c2:ef:07:57:33:ea:52:c5:2c:1d:c0:32:
4e:1b:96:19:14:c2:53:b7:a9:7b:a3:48:bf:62:90:a9:b1:56:
95:af:6c:7c:c4:41:ae:29:75:d9:e4:ce:32:4e:67:48:bc:19:
ab:76:2b:cd:7a:d3:0e:b7:00:a7:ca:8f:09:63:d2:ad:8f:ec:
ac:c1:b8:2d:43:05:bf:9f:17:98:c0:c0:b1:94:1c:5b:5c:9b:
62:4d:51:7f:19:cb:c7:48:eb:55:1b:54:99:db:e3:a9:e2:bf:
af:47:29:e5:81:81:26:1b:5d:e9:61:f6:99:12:3f:2e:1b:5f:
4e:ee:5b:8c:2c:30:fc:a3:45:5e:46:90:4b:a5:f7:ea:c1:00:
94:ae:da:b9:47:93:fe:dc:88:00:aa:02:bb:a7:0c:46:bc:9d:
4c:83:89:60:48:07:64:18:65:85:7f:dd:0f:1e:e2:5a:51:0a:
d0:66:9d:30:dd:2c:ee:66:89:ba:ec:70:47:15:58:b7:42:05:
a8:97:b5:58:8e:e6:03:e6:73:80:f1:ea:f6:dc:72:8c:bf:88:
7e:eb:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:40 2025 by rpki-client