Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: C+ixcuqnsrep4SHbMttJqPPpR7N3BTHy2x2kkwcQEZk=
Subject key identifier: 59:4D:71:8D:E2:89:EC:86:C2:FA:A2:5E:67:17:92:50:4E:C0:3D:BE
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 01985456D88E1A159F28BD567D9B16FE833C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 0B89
Signing time: Tue 29 Jul 2025 04:00:34 +0000
Manifest this update: Tue 29 Jul 2025 04:00:34 +0000
Manifest next update: Wed 30 Jul 2025 04:00:34 +0000
Files and hashes: 1: E8EItKN2__9iKd7VUUHBehRVQCo.roa (hash: mIn23TrAWNsxopm3nGDSwuz19rtPaaB79Dzo0Qrhuqk=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: xWjs+KIC1KsSQFPOGZWybRKrYvx7l53c5Fb0x76mjQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:d8:8e:1a:15:9f:28:bd:56:7d:9b:16:fe:83:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Jul 29 04:00:34 2025 GMT
Not After : Jul 30 04:00:34 2025 GMT
Subject: CN=594d718de289ec86c2faa25e671792504ec03dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:d4:68:ea:49:59:41:24:59:93:4d:d4:a2:
6c:f6:03:43:52:36:de:c9:85:b6:d1:87:f0:cc:88:
03:cb:13:09:29:ad:9f:58:79:39:80:25:08:6e:6f:
2a:58:fd:a9:4f:be:29:74:cc:96:d2:21:90:dc:7a:
ff:ed:f6:47:8e:07:ce:bf:61:a3:7c:04:3e:e0:43:
00:bb:d7:7e:30:a7:5e:aa:fa:f4:a6:f1:de:e1:70:
e1:7b:0a:0b:10:91:58:3b:07:33:1b:30:87:82:ce:
6d:4b:11:b8:79:14:4d:76:75:9e:dd:54:0b:32:22:
f1:fb:21:aa:40:a8:0b:bc:41:66:d1:68:e4:fd:d2:
d0:71:9d:16:be:97:f4:50:45:4b:0f:50:1d:27:ea:
ac:34:ba:99:0a:f7:33:37:c8:55:c1:99:67:7c:6f:
cd:e9:bf:0c:a0:01:16:5d:0a:30:fe:53:45:7b:09:
8d:6c:3c:26:35:16:6c:bc:b6:71:d3:d1:31:5d:33:
f4:1e:86:78:c4:62:7f:b1:7d:77:a9:64:e5:67:53:
5b:3a:37:99:08:bd:39:82:d1:cf:5e:66:75:e3:e3:
60:b1:33:b8:d9:84:ae:e7:15:59:54:a8:25:09:27:
12:02:e8:0a:cf:c3:88:21:b9:5d:d3:f2:da:70:d4:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4D:71:8D:E2:89:EC:86:C2:FA:A2:5E:67:17:92:50:4E:C0:3D:BE
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ad:c5:c2:83:da:1e:d4:64:83:4f:b8:c7:c5:e3:83:0a:57:
96:04:d5:7b:c2:12:17:78:a6:5d:c9:c6:49:dc:41:1b:81:1b:
da:8d:91:78:11:3b:a1:7a:8f:fb:83:5c:cf:b5:69:2f:db:d0:
f3:27:20:9f:05:39:66:6e:17:7f:2c:93:e1:c7:7b:61:4a:63:
28:79:3b:02:5f:1b:08:c1:c0:06:ec:46:65:20:80:5f:82:f3:
29:54:6c:84:74:cf:c2:24:25:e6:0e:bf:c3:ac:96:9b:48:8a:
5d:68:57:20:b7:5d:d5:e7:b2:94:03:01:13:1a:3a:1f:ad:d8:
38:46:03:b7:ad:91:be:ec:04:48:8e:8a:79:26:a1:33:a3:9a:
f3:d6:11:fe:52:6d:52:f8:8e:1f:ad:78:e2:e0:24:ec:c9:2e:
78:0c:99:97:f2:6f:ef:61:a2:e6:ec:f1:0d:66:3c:22:dd:9e:
86:4a:1b:5f:3d:38:05:1e:7f:c8:ee:a0:f6:cc:ad:94:2e:8a:
eb:b8:bd:bb:25:f3:01:4c:3d:f1:fc:3f:43:a7:7b:56:7d:90:
7b:1f:dd:70:e1:16:a5:60:a4:fb:9c:b7:dc:23:0d:1f:79:29:
f3:08:41:4f:fd:05:87:bc:6f:a6:a0:0a:cd:37:6d:03:0c:27:
3d:5f:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:59 2025 by rpki-client