Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: CKkE1/zkpdYgHX8bOPgvT6iG7lPTgT017CtRn3meoTc=
Subject key identifier: 17:99:82:9D:4C:CE:BC:1D:BA:3D:03:5D:4B:93:46:10:BF:6C:EE:A9
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 01993A270226A9C0CD99E6DDC293F79A56E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 19:00:58 +0000
Manifest this update: Thu 11 Sep 2025 19:00:58 +0000
Manifest next update: Fri 12 Sep 2025 19:00:58 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: xBL7rYb64SSKRvFC3zAKQadEjtsQAlf9L3YuLcT3Wys=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:27:02:26:a9:c0:cd:99:e6:dd:c2:93:f7:9a:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Sep 11 19:00:58 2025 GMT
Not After : Sep 12 19:00:58 2025 GMT
Subject: CN=1799829d4ccebc1dba3d035d4b934610bf6ceea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:f8:c0:3e:c1:49:46:6c:1e:43:c1:c0:61:
fa:c8:e2:29:54:c9:90:61:50:3d:e5:33:6d:36:a9:
77:85:79:17:83:3a:64:9c:2e:d2:43:11:54:96:4b:
6d:79:c5:6e:3c:93:d1:96:bd:6c:c2:04:04:5a:9b:
05:5e:c7:50:c8:90:cd:62:db:38:e5:0b:13:80:18:
64:55:6d:64:82:29:9f:58:d0:52:12:b0:bc:ad:fb:
f9:96:ce:50:cd:6f:1e:c4:5e:8c:8f:81:07:31:d4:
6f:09:fd:25:2a:66:28:bd:49:55:59:20:f5:9e:29:
44:ee:b9:4a:d2:15:3b:f8:fe:1c:80:64:08:a3:ab:
d6:3c:6c:7f:86:8c:cd:23:83:0d:c1:3d:5b:41:4a:
0e:03:e0:61:66:de:d6:ca:4f:de:a7:05:fd:4f:d6:
d7:0d:11:94:68:8c:c3:2d:2b:ca:0e:1e:ef:0d:ad:
a7:13:18:ec:db:13:53:f2:33:29:2f:04:19:9c:eb:
6c:0b:28:3f:bd:5b:32:0a:0e:b7:db:56:fd:3f:9e:
1b:87:cd:52:72:83:de:71:8f:80:78:3f:33:5f:bd:
1b:d0:68:d7:37:b5:08:58:62:8b:63:18:4d:69:69:
8b:05:50:36:99:05:ed:92:9e:4a:79:0f:ac:7b:95:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:82:9D:4C:CE:BC:1D:BA:3D:03:5D:4B:93:46:10:BF:6C:EE:A9
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f0:0d:3c:e3:65:b5:2b:8b:c4:0d:6a:c2:7a:60:51:91:04:
b1:8c:29:71:34:99:92:2a:f9:f4:98:e9:59:6a:3e:e2:1f:dd:
b6:86:c0:f5:17:ba:b4:8d:b4:02:0a:dc:c7:85:c7:46:19:f6:
5b:75:f6:44:51:d8:05:71:08:f1:3e:f9:ef:34:d5:fb:97:57:
ac:d0:c7:29:bd:e2:85:33:4b:92:a8:29:34:18:92:7c:c8:54:
c0:ee:43:a3:aa:21:2c:d1:d3:e0:d9:dd:54:db:9c:c3:8a:4c:
01:cd:1c:c2:bb:56:c7:e8:62:63:e3:f6:cd:5c:41:ec:85:0f:
c7:8e:99:2d:87:37:5c:a7:97:4e:f4:99:80:47:0f:28:e1:12:
d2:ec:46:2a:5c:34:d3:f9:41:49:f2:37:ea:3e:c3:d3:17:e7:
88:ce:7c:fc:32:51:63:54:ec:67:10:8e:5f:51:9c:a1:1f:00:
48:b6:14:1d:66:a4:36:7e:0b:0d:32:9c:1d:00:ee:b7:aa:80:
7e:d4:d4:bf:e7:77:80:39:ec:ec:4f:bb:a3:18:e3:cf:d1:20:
64:09:d4:06:53:df:e1:e3:91:14:fe:64:15:85:d9:4a:2b:7e:
93:17:51:04:34:b5:45:45:c9:5f:e0:a1:3c:ef:4f:d6:8f:cc:
4a:c4:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:24:11 2025 by rpki-client