
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
File: aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json)
Hash identifier: FhpPGDgrxSZYJFLORGhwcnPseAZxF4LoqEm64vBa9KI=
Subject key identifier: DC:CA:D0:C7:DD:82:12:C0:94:E5:50:6C:92:61:10:51:6E:2F:77:84
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial: 019850B11270D4337984813C7CC7EC59AC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
Manifest number: 0425
Signing time: Mon 28 Jul 2025 11:00:38 +0000
Manifest this update: Mon 28 Jul 2025 11:00:38 +0000
Manifest next update: Tue 29 Jul 2025 11:00:38 +0000
Files and hashes: 1: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: JaPmYa6ZWDGRg1RXvtDLMZY44Rj5/q+VRbGBs0+SOh0=)
2: jlBmv3dPRy-aCAm4zGP5hP0eED4.roa (hash: x5w57iUiMtF5F3KiCgNFCVpxtjw/vaZ568ZRMFNq7qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:b1:12:70:d4:33:79:84:81:3c:7c:c7:ec:59:ac:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Validity
Not Before: Jul 28 11:00:38 2025 GMT
Not After : Jul 29 11:00:38 2025 GMT
Subject: CN=dccad0c7dd8212c094e5506c926110516e2f7784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:66:15:73:b2:e8:76:d3:5a:01:c9:27:66:ea:
4e:86:21:93:d3:55:c9:cc:4a:51:19:27:85:41:c0:
e0:ec:8d:b9:6f:f6:88:48:1c:cd:0e:12:fc:52:a7:
91:5e:fa:61:77:d0:04:6a:23:50:36:01:c0:a6:da:
50:38:53:5a:3a:4e:53:f2:c9:6a:dc:08:d6:8b:e7:
77:2d:cb:9a:60:df:09:2c:e6:fe:ac:42:33:d1:5a:
3d:a3:5f:87:d3:60:76:2a:57:c4:28:5b:59:67:3d:
bf:1a:21:84:82:08:c4:0f:df:10:a2:13:41:bc:31:
51:93:d3:b3:28:44:db:e5:fb:62:af:7c:c5:3f:20:
bd:9d:e8:7d:46:f5:9e:a3:dd:ad:1b:3a:5d:c5:25:
80:61:c1:51:7d:45:d3:eb:f5:06:ea:cc:a1:1e:7b:
be:32:7a:af:4d:ed:14:6b:cc:a1:c6:9f:ac:6e:6e:
38:e1:df:39:0d:e6:32:95:da:e9:4f:7d:09:b7:86:
49:00:dd:b0:a7:f4:75:50:50:dc:55:25:7b:c6:14:
a0:37:b4:0f:e3:9b:78:c4:6c:fc:15:21:71:e3:94:
4c:83:4e:ed:6b:44:59:7d:50:79:52:b6:24:7b:38:
4b:08:40:f7:c7:df:39:be:d2:7d:f9:c6:cc:b1:6c:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:D0:C7:DD:82:12:C0:94:E5:50:6C:92:61:10:51:6E:2F:77:84
X509v3 Authority Key Identifier:
keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4f:a9:99:ad:78:97:74:bd:96:8a:28:a4:d8:86:64:a4:d6:
5c:6c:51:14:8f:4d:e8:3f:aa:0c:78:33:71:7a:b5:2d:9b:8e:
cf:34:e5:16:e4:e1:0f:d8:58:c0:bc:a3:72:f1:cc:e3:89:53:
89:f2:50:e5:87:89:94:f0:db:cb:6f:7a:ed:d3:c4:df:d1:84:
f2:27:1b:df:dc:b5:d5:e5:5f:b7:c8:72:ec:83:be:29:6d:94:
33:a9:6c:6c:8b:26:e8:80:07:8d:21:0f:f3:18:eb:d6:a3:b8:
1a:1e:b1:7a:cf:1a:5c:9b:41:a9:1c:01:68:30:b1:2b:33:06:
e3:07:01:12:a5:ba:a3:f6:02:15:ed:b4:88:c8:4d:70:cb:fd:
21:80:1d:f8:58:56:d3:2f:8c:79:e9:e3:67:ac:9d:09:22:41:
12:8c:ca:6e:d7:3f:38:50:07:be:7a:28:9c:d9:60:b6:79:34:
ab:d0:7d:2b:a6:67:c1:bf:20:ae:84:81:51:e0:a8:e6:d8:6a:
44:52:24:ee:78:f2:ed:5d:4c:1a:17:df:a2:c9:5b:98:44:f6:
62:8f:98:68:b6:f7:88:ad:ed:30:03:46:2d:bb:35:38:ac:ff:
e7:76:fd:e4:cf:92:06:3d:1f:38:5d:df:f6:0a:90:cb:26:b9:
c6:b1:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:17:51 2025 by rpki-client