Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier: wJWpBVZEnm9BzhBK12yh3/cCIQZmhbtpWwQouwUBlLQ=
Subject key identifier: 83:39:5C:B9:36:8A:2E:96:9E:5E:03:C6:D4:BC:AF:C5:00:72:D0:0B
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 019853E8934B0DAAE6CFCC8CA258C607A15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number: 1350
Signing time: Tue 29 Jul 2025 02:00:07 +0000
Manifest this update: Tue 29 Jul 2025 02:00:07 +0000
Manifest next update: Wed 30 Jul 2025 02:00:07 +0000
Files and hashes: 1: HaUn7tg_GQoLwUeKln7B89E1Zus.roa (hash: UBP04zlDEuw8zGqO58s8vILU4LoszVd4p1cFKyVRANw=)
2: Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (hash: 2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=)
3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: A8AN7myMglN6VS6tORFB5bKQi6zEIJ4jx7m/EoDJuow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:93:4b:0d:aa:e6:cf:cc:8c:a2:58:c6:07:a1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Jul 29 02:00:07 2025 GMT
Not After : Jul 30 02:00:07 2025 GMT
Subject: CN=83395cb9368a2e969e5e03c6d4bcafc50072d00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:6c:76:a7:d5:69:5e:3f:50:7a:c0:be:ef:
cc:93:a8:ad:7d:08:3e:73:2e:f9:b6:9c:3d:1b:98:
ef:7d:07:23:8c:be:35:36:b2:80:61:d8:2a:2f:71:
4f:28:6a:47:3f:ee:3f:2c:03:f1:02:5a:52:84:e7:
8b:32:01:97:56:0d:1b:11:b5:96:ce:b9:7e:84:6c:
81:c3:20:e9:9a:e8:66:94:54:02:c6:84:64:32:0a:
b6:60:58:75:f1:3e:df:8e:9d:aa:c1:eb:9b:70:3a:
15:a1:02:48:b0:fd:87:e8:c6:4f:33:2d:29:38:31:
73:f6:73:81:cf:61:9a:9b:42:0f:fc:9f:e7:ac:bc:
07:3e:67:cd:e2:35:1d:69:96:14:35:c2:e7:de:4e:
07:a4:e6:0b:a5:e1:ea:17:c7:55:e1:c2:f7:d9:37:
17:9a:75:72:2a:c6:8a:19:70:90:7d:17:19:17:03:
a9:b5:6a:97:b6:d5:01:08:1e:1f:91:d3:73:4c:45:
ce:eb:e4:de:c5:af:c1:9a:c5:f1:76:4d:dc:01:0b:
92:74:cd:3c:e9:38:56:d4:0f:28:2c:95:c9:da:4c:
8e:d1:9c:c8:3f:6e:ab:7d:6d:46:30:0e:fc:57:f8:
36:2f:73:63:72:b9:da:9e:c9:d8:e7:8c:cb:4d:8c:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:39:5C:B9:36:8A:2E:96:9E:5E:03:C6:D4:BC:AF:C5:00:72:D0:0B
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ca:79:ec:09:0b:5c:4f:37:e7:ff:b1:3b:00:9b:0c:78:51:
0a:90:6c:69:b7:32:45:da:68:b4:71:5b:b9:a4:07:46:86:05:
df:b3:cb:1f:1c:1c:eb:e1:c4:cf:2f:ea:e3:fa:e7:61:e6:a7:
42:e0:a6:b2:b5:1d:a0:e0:74:1d:22:01:9b:b2:b7:7c:04:9f:
b8:5c:9a:45:34:07:a6:89:d1:9d:22:b9:1b:c6:df:d2:89:ba:
60:5a:8f:d7:d1:cd:31:c1:b6:b0:82:25:3a:fb:c9:26:9d:ea:
76:42:e8:3f:0f:b8:94:13:c2:dd:8e:16:d5:80:f6:47:bb:c3:
b4:21:53:5e:8e:67:92:4b:55:e7:f4:27:d0:ae:50:3f:32:9b:
c8:97:ca:91:d2:1f:37:1d:c6:ae:d3:ad:8d:be:20:d4:62:75:
75:1d:bb:9c:ca:3d:ee:2c:df:9c:34:1f:d0:06:e3:4b:9c:05:
09:33:2a:9f:3e:f3:30:77:60:01:b4:58:eb:b9:5c:35:a3:8b:
05:b5:2d:5e:3f:d8:1d:00:b9:82:77:05:93:5b:6e:d2:a1:69:
fe:ee:46:90:fd:69:e5:92:5b:fd:75:c0:80:f6:05:53:ae:47:
2c:ee:be:8e:c3:52:97:61:3e:c4:bb:fc:0a:c1:52:8b:e7:d6:
e6:db:f7:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6JNLDarmz8yMoljGB6FfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM5YTIxNzU5Nzk2ZmUzYTFkOTE5ZjliNTczN2ViNjhk
NzA4ZTQwHhcNMjUwNzI5MDIwMDA3WhcNMjUwNzMwMDIwMDA3WjAzMTEwLwYDVQQD
Eyg4MzM5NWNiOTM2OGEyZTk2OWU1ZTAzYzZkNGJjYWZjNTAwNzJkMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NdsdqfVaV4/UHrAvu/Mk6itfQg+
cy75tpw9G5jvfQcjjL41NrKAYdgqL3FPKGpHP+4/LAPxAlpShOeLMgGXVg0bEbWW
zrl+hGyBwyDpmuhmlFQCxoRkMgq2YFh18T7fjp2qweubcDoVoQJIsP2H6MZPMy0p
ODFz9nOBz2Gam0IP/J/nrLwHPmfN4jUdaZYUNcLn3k4HpOYLpeHqF8dV4cL32TcX
mnVyKsaKGXCQfRcZFwOptWqXttUBCB4fkdNzTEXO6+Texa/BmsXxdk3cAQuSdM08
6ThW1A8oLJXJ2kyO0ZzIP26rfW1GMA78V/g2L3NjcrnansnY54zLTYwGxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIM5XLk2ii6Wnl4DxtS8r8UActALMB8GA1UdIwQY
MBaAFGhjmiF1l5b+Oh2Rn5tXN+to1wjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTct
MTNkMTY4ZDU5YjExLzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTctMTNkMTY4ZDU5YjEx
LzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMp57AkL
XE835/+xOwCbDHhRCpBsabcyRdpotHFbuaQHRoYF37PLHxwc6+HEzy/q4/rnYean
QuCmsrUdoOB0HSIBm7K3fASfuFyaRTQHponRnSK5G8bf0om6YFqP19HNMcG2sIIl
OvvJJp3qdkLoPw+4lBPC3Y4W1YD2R7vDtCFTXo5nkktV5/Qn0K5QPzKbyJfKkdIf
Nx3GrtOtjb4g1GJ1dR27nMo97izfnDQf0AbjS5wFCTMqnz7zMHdgAbRY67lcNaOL
BbUtXj/YHQC5gncFk1tu0qFp/u5GkP1p5ZJb/XXAgPYFU65HLO6+jsNSl2E+xLv8
CsFSi+fW5tv3jA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:20:41 2025 by rpki-client