Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: riaO+gS9eCgiDKkFZCQHlAEvrb0mTif8f2bsItUTaRw=
Subject key identifier: 16:A9:E5:7D:85:DE:44:95:36:14:80:13:3E:E4:78:9D:BC:C1:EE:3E
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 019849D3307DBCEAB4FDA01582C925A72C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:00:33 +0000
Manifest this update: Sun 27 Jul 2025 03:00:33 +0000
Manifest next update: Mon 28 Jul 2025 03:00:33 +0000
Files and hashes: 1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=)
2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: riUzxYZhxnaoB+JHCcHY2buG26+1stwiG0bwOh/VsyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:30:7d:bc:ea:b4:fd:a0:15:82:c9:25:a7:2c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Jul 27 03:00:33 2025 GMT
Not After : Jul 28 03:00:33 2025 GMT
Subject: CN=16a9e57d85de4495361480133ee4789dbcc1ee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:76:aa:6e:41:fa:de:c4:e2:92:a7:14:04:
8c:a7:ea:3b:70:19:c5:f8:f9:5e:c0:c9:eb:22:86:
bf:1e:24:78:35:83:79:dc:19:64:0a:4a:04:92:72:
68:8a:2c:ab:ea:97:01:1f:52:bc:2b:a5:46:07:23:
cb:6a:3b:eb:38:15:39:65:44:b1:f3:a8:c3:30:95:
af:e3:e9:fb:3b:fb:3d:2e:cf:dd:21:41:03:70:3c:
1f:ad:47:30:e2:37:6a:ef:ca:03:6c:fe:a1:ab:32:
77:b5:c2:3a:31:6d:88:95:8c:9f:19:4d:d1:44:e6:
0f:e1:c9:32:d5:85:12:db:3b:2a:17:3f:90:44:8a:
af:36:cf:d7:fa:bc:b8:a8:bc:64:3e:fc:23:c1:38:
78:ae:1b:21:4c:99:b4:a2:79:d0:da:15:5f:62:78:
9f:6a:b3:0e:3a:ff:c0:e1:22:37:46:b2:46:30:4a:
0d:76:38:43:84:90:b1:0a:01:88:16:16:4f:a6:b1:
13:d3:9c:db:bb:7a:99:4a:dc:6c:e9:65:09:2b:f3:
fe:a9:12:bd:7c:46:4c:35:42:3d:ce:34:7b:3e:f7:
1d:7d:74:00:0f:30:ef:06:ac:00:5f:49:fd:6d:fd:
5f:8c:1d:f1:66:a1:72:da:e0:7d:67:d1:36:12:1c:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A9:E5:7D:85:DE:44:95:36:14:80:13:3E:E4:78:9D:BC:C1:EE:3E
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7f:73:b8:e4:1f:46:22:69:69:39:a1:59:c1:96:59:1e:95:
ed:5e:aa:2d:5f:71:8c:ac:55:af:c9:5b:4d:73:03:0c:ba:0b:
6c:c8:4c:23:be:a3:1c:6a:8c:53:28:b8:54:89:8c:36:96:1c:
a6:87:0a:7d:7a:56:88:ea:b2:6d:c6:5a:dc:fd:c3:8a:f7:fd:
b3:28:ed:ad:69:c6:f8:f3:51:30:11:a7:48:d2:e1:2f:8d:53:
b2:ac:41:f6:78:d4:3c:2c:f8:ff:1e:d2:e7:ae:55:69:8a:6d:
1a:cd:37:a1:30:27:1f:52:7d:ca:af:02:cf:aa:15:1d:3d:be:
4d:16:6a:10:8c:42:cc:d1:2e:75:67:c7:70:2a:e3:e0:3a:e6:
a3:e7:4f:a3:3b:3d:20:58:8e:09:40:ab:f6:5c:ab:99:77:0b:
ef:c6:aa:95:42:e6:b1:43:e6:3b:03:60:eb:f3:09:e5:d6:61:
12:de:b3:b3:58:85:de:5f:80:54:36:e3:0a:90:ec:20:38:51:
f7:03:88:34:81:f7:7f:40:d3:6d:bf:77:76:97:4e:33:fe:e8:
b0:18:62:cc:75:54:fd:a7:d1:e8:01:bc:85:79:c0:b6:e3:8e:
b1:61:63:30:4c:77:52:b5:ce:39:14:be:1b:22:04:10:07:47:
94:a1:01:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:49:16 2025 by rpki-client