Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: wMhzkYCDTC6AelervEqZfHiq9YIUliSO70mRHn7HHBA=
Subject key identifier: CF:FF:A3:7D:26:FD:03:A7:A2:FE:49:A2:80:40:56:95:4E:13:CB:BE
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 0198499C5D6DA68745EB55EE76619FDBA991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 02:00:41 +0000
Manifest this update: Sun 27 Jul 2025 02:00:41 +0000
Manifest next update: Mon 28 Jul 2025 02:00:41 +0000
Files and hashes: 1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=)
2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: dhes1bcrp0R+TPMJTsufXh/6+g4D44I15E788LDASMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:5d:6d:a6:87:45:eb:55:ee:76:61:9f:db:a9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Jul 27 02:00:41 2025 GMT
Not After : Jul 28 02:00:41 2025 GMT
Subject: CN=cfffa37d26fd03a7a2fe49a2804056954e13cbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:34:40:65:ba:72:08:cd:e9:9b:80:67:26:
47:94:0c:53:3a:69:11:6b:66:b3:f5:69:50:56:4c:
56:c6:0b:d1:36:f6:e8:82:a0:a6:82:38:f7:e7:09:
df:05:f9:35:d9:c9:9b:e9:65:74:97:d4:92:27:a0:
84:83:9e:ba:44:1a:b1:61:16:58:eb:de:71:76:da:
ac:22:db:28:98:91:29:2f:fa:46:fd:f6:bf:8a:8a:
07:4a:97:c3:21:1e:56:db:2c:03:ba:96:0a:a3:a3:
7a:58:7c:ad:5b:9d:34:db:c1:b4:8c:c4:82:79:f8:
66:60:8c:27:97:50:b0:bb:71:6e:50:53:c6:52:99:
db:15:97:d4:e7:65:cf:e9:11:ae:70:05:34:ab:83:
28:b4:e4:fb:be:af:f7:6d:a1:14:da:b3:46:a2:1a:
54:d0:c5:ce:49:18:b1:88:37:9a:4c:08:ca:7c:26:
30:99:c3:60:0f:2f:42:13:b8:ba:4f:7d:ba:e6:c3:
73:4c:35:48:03:aa:c2:fd:bc:93:bd:63:f2:9b:3b:
6f:20:5a:02:37:6b:06:1c:71:0d:ec:3c:e9:b3:b3:
f5:a9:d8:a8:ea:3e:2c:bb:19:97:ce:96:d8:83:f2:
24:5e:73:7e:50:7d:21:dd:6a:31:f6:88:7d:92:40:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FF:A3:7D:26:FD:03:A7:A2:FE:49:A2:80:40:56:95:4E:13:CB:BE
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d5:6d:d1:59:a2:dd:31:cc:cb:1b:23:d8:20:29:8a:ee:71:
7a:89:bf:e0:76:78:ee:51:b1:a4:a4:9c:78:f0:b3:1d:11:e7:
e4:69:b7:58:9d:d5:9c:1d:f3:2e:44:36:2b:5a:a0:3b:22:1b:
57:75:20:c0:c0:c7:00:81:03:35:19:83:39:e8:fe:fa:5e:c6:
df:35:d5:c4:fc:db:5d:2c:aa:59:32:d9:db:dc:99:ce:2d:3f:
1e:6b:c7:91:ef:21:35:3d:bf:4b:a0:02:cd:32:2b:1f:82:4a:
e9:56:00:3c:bf:e7:40:d1:1e:ec:eb:ee:2b:bd:7c:f8:fe:8c:
7f:a2:fe:92:89:87:5c:e2:b2:1b:60:1e:da:cc:c8:e9:22:01:
29:25:fc:49:42:63:9d:57:82:1b:f9:b4:34:61:55:84:b0:6b:
6c:f1:12:bb:a4:ab:0e:7d:21:40:00:82:87:5f:cb:9f:d9:6e:
ce:f7:a7:ae:46:23:64:78:a1:34:1c:b0:a0:63:0a:47:cc:36:
69:64:e5:d5:67:9f:64:f9:1e:1a:59:fb:b5:6b:cf:f5:2b:f6:
49:13:7f:8d:d5:20:cb:e6:56:cd:26:04:ba:85:d8:80:ea:88:
7e:99:1c:1a:8a:3e:7d:0d:18:dd:9a:9f:d6:96:25:f3:d6:de:
82:ac:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:16 2025 by rpki-client