Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: 8qn3KPRGxNA+nFsMJOrSevOS+Ynv1fKLXheShTNAW4A=
Subject key identifier: 2C:A8:54:53:AF:53:BE:4D:AE:9E:E1:87:E0:8F:87:9B:53:5A:66:B1
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019848C0DF680366C9E79F2EDD5D145EB9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1319
Signing time: Sat 26 Jul 2025 22:00:56 +0000
Manifest this update: Sat 26 Jul 2025 22:00:56 +0000
Manifest next update: Sun 27 Jul 2025 22:00:56 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: Vs7KBs0ynz+7S3bpbda6+xoWyoxI0k4cZMSnSL3J2HA=)
2: s3MszUL2Sssrqjezj_btDkPTmQg.roa (hash: rgkSdfEiUESbKFQA8EcHOyD2UnXv2kAlPQ3EqnLhSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:df:68:03:66:c9:e7:9f:2e:dd:5d:14:5e:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jul 26 22:00:56 2025 GMT
Not After : Jul 27 22:00:56 2025 GMT
Subject: CN=2ca85453af53be4dae9ee187e08f879b535a66b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:bf:da:2a:e7:35:c2:2f:5e:1d:8a:27:0e:
1f:d6:f7:ff:54:f4:74:ac:0b:5f:74:ca:33:9b:89:
fb:db:f6:b7:5e:19:ef:e7:c1:1c:5c:b5:4a:5b:d5:
ff:94:09:fa:b3:2f:d0:29:56:d9:74:04:10:5c:a3:
b5:ea:db:c7:fe:93:55:30:2c:50:92:6d:6b:74:81:
cf:58:8c:52:51:05:f5:c7:1a:71:11:3b:fe:df:de:
a5:7e:91:13:7a:db:fc:ca:5f:f9:08:d8:75:f8:d2:
cc:6a:c2:ed:0b:38:43:65:44:34:1f:f7:8b:a9:ba:
27:40:28:b8:2a:52:f1:9e:7b:8c:0c:ac:46:70:87:
7f:5d:fa:bd:a5:c6:63:09:8d:43:ce:be:73:11:54:
0a:e5:9d:d3:d4:15:e0:97:1e:cf:03:c9:ba:46:3e:
77:e8:da:dc:62:79:ae:0b:d3:23:94:3c:59:53:86:
6c:5c:14:08:f4:17:87:a3:fd:43:2b:db:4d:9a:43:
6b:fe:6d:71:c9:06:f3:ac:ac:1b:32:d5:4b:01:2f:
48:38:74:24:96:7a:02:03:01:44:1c:10:98:a2:4a:
6d:29:17:c9:41:d7:33:e6:58:00:42:c1:58:36:90:
82:e0:92:80:38:66:8b:25:06:57:33:70:97:36:51:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:54:53:AF:53:BE:4D:AE:9E:E1:87:E0:8F:87:9B:53:5A:66:B1
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e8:68:e5:8e:f6:6f:f4:1b:7a:d7:90:47:5b:9e:de:1c:ed:
20:ff:3e:6b:83:35:c7:29:99:90:c9:a8:f4:d5:f9:26:5e:7b:
d6:49:5e:29:1b:bb:72:a8:b3:74:03:5b:9b:b3:5a:92:bb:5a:
ee:b6:49:5a:10:a6:57:b2:5f:2f:10:52:6e:b1:e5:d9:4a:81:
6e:56:fb:58:5f:73:e9:5c:fd:75:89:97:eb:0e:7f:6d:3e:38:
64:cf:d9:fb:60:f1:d0:a8:67:e4:49:f9:71:28:73:9a:ed:17:
d1:45:ae:bf:3a:7e:28:ef:a3:58:92:88:22:46:da:4a:03:06:
5d:af:79:39:4b:3a:0a:ce:d8:3a:3d:4e:ee:5b:1a:fd:69:4a:
64:55:33:56:e5:80:40:64:66:58:0f:32:f0:03:4a:84:0f:66:
59:c6:5e:b3:f1:c0:f5:37:88:7b:1b:1a:0e:bb:53:08:09:e2:
f6:98:9e:37:36:7c:d6:16:54:63:4a:fa:f8:2c:08:d1:60:d5:
c3:7f:c7:0a:cb:4a:23:c0:25:8d:1b:79:9e:21:bb:68:bb:b4:
db:ad:0c:69:33:2c:f5:ca:ed:0f:8d:c7:b1:ae:a4:15:46:99:
87:a8:76:33:ee:66:49:3f:35:80:31:5b:e9:28:cf:ed:c4:aa:
57:84:dd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:26 2025 by rpki-client