Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
File: AUa0KfjElhH8_qHvoaUbnA7dtuc.mft (raw, json)
Hash identifier: JJ0eB7sGi0vP1CjoAVeVg+sFfJIs0iPUXS37lyEXGG4=
Subject key identifier: B8:3C:31:B5:74:F1:7A:AC:04:4E:02:D2:04:84:13:37:81:B9:66:6B
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 019921E7D9BBEA67DE45C808A9ECFB9D2491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
Manifest number: 1505
Signing time: Sun 07 Sep 2025 02:01:06 +0000
Manifest this update: Sun 07 Sep 2025 02:01:06 +0000
Manifest next update: Mon 08 Sep 2025 02:01:06 +0000
Files and hashes: 1: 4lSW2DqUUyfLAwCJxmdcakNOOAc.roa (hash: 0bkR+y4/sbmt2mM+LAt7tzsFlo9ay8a2libMzm6BQSQ=)
2: AUa0KfjElhH8_qHvoaUbnA7dtuc.crl (hash: 6xE/djTRUDkuKJx8x3bYJxfa8rldvM+SzE9IZwkFxwM=)
3: EGYTjO7QUfpx0ulGevFYUIiqj3s.roa (hash: g2MIGdqU/L1bshOQ8N/mggpTuJ9tqqfK/SHJoPKbENM=)
4: PUvtKljRLvuOqowlndxBwGQKDl4.roa (hash: U5kHad25poEIvcwR4qtcel7KCFYyUvjuPf1N4FDV5NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d9:bb:ea:67:de:45:c8:08:a9:ec:fb:9d:24:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Sep 7 02:01:06 2025 GMT
Not After : Sep 8 02:01:06 2025 GMT
Subject: CN=b83c31b574f17aac044e02d20484133781b9666b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:da:df:25:b6:6e:d5:52:b1:af:3f:1a:4a:
21:5b:b6:f3:94:44:94:4c:45:5e:51:29:ce:ea:f3:
e4:40:c0:e8:fb:b7:0e:d4:91:58:3f:a4:ad:51:41:
4b:18:d5:f1:59:b6:97:86:95:a8:72:b0:93:9d:46:
ea:1a:28:5d:a1:79:21:7c:56:b9:dd:c5:43:08:f2:
5b:04:31:da:79:ad:6c:b5:00:66:07:35:18:28:30:
8c:ae:45:79:f4:2c:fd:53:3a:dd:3d:4c:b6:d6:19:
e4:c5:bf:b9:22:ab:31:4d:e3:f6:89:c2:8d:51:18:
c5:ae:99:a4:be:87:a0:12:45:8a:ac:a6:be:10:f7:
60:ff:c5:3d:92:a0:8d:76:53:02:8f:54:42:04:d0:
ac:2d:d6:1f:77:7e:cd:0f:de:0b:38:fa:29:ea:33:
b6:24:89:e9:c5:0b:c5:d8:5c:28:e9:14:26:07:e3:
6a:be:a9:2d:e5:c5:c9:49:df:8f:be:15:68:a4:27:
96:fd:a1:b2:3c:6c:6a:45:66:d1:87:c7:59:7b:f7:
ce:ae:76:3e:28:df:9e:be:94:44:ed:44:30:3d:f1:
35:35:87:ad:e9:22:d5:c2:c7:96:19:6f:45:3b:82:
77:be:0e:f8:6e:20:0b:a4:3c:a4:f1:01:98:20:ed:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:31:B5:74:F1:7A:AC:04:4E:02:D2:04:84:13:37:81:B9:66:6B
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:74:d3:2d:18:7c:a9:38:ac:f1:67:e8:de:a1:63:bf:8e:a8:
6f:5b:05:93:a8:70:cb:6e:27:54:1b:0f:0a:fa:2a:9a:29:2e:
16:2b:50:a4:94:06:e9:ac:bf:55:a3:cf:49:28:54:38:95:1a:
7f:1e:ae:37:d4:ed:f8:4f:ae:56:b3:00:b4:be:db:3e:14:24:
05:97:c0:82:fc:00:fd:5a:3e:e4:ff:e1:72:0d:75:df:cd:79:
fa:b2:4e:68:74:8e:ec:c2:04:c9:ab:94:6f:cf:7e:2f:ea:e2:
92:eb:e2:a5:8b:e8:b4:3e:b5:7c:41:71:6a:b7:23:60:98:64:
dd:0d:0d:f6:24:e5:f6:2d:5a:59:60:92:20:b8:de:ee:7d:fd:
af:06:3f:ee:72:f6:bb:69:cb:fc:3e:01:a5:5a:e1:e9:c5:ee:
93:c3:eb:76:21:c2:d9:9a:91:73:f1:7a:fa:07:ab:0a:d3:46:
57:2f:1d:9f:0e:ab:5e:69:3d:38:5d:8f:0c:b2:d6:05:92:57:
7f:95:c4:70:d0:27:ab:cb:a7:e7:29:ab:7a:59:eb:8e:29:87:
68:37:41:7b:1e:ab:35:73:09:3c:50:ce:f6:6e:07:9b:aa:82:
b2:ea:b5:28:d3:35:16:e6:3f:46:f2:2a:bd:34:3f:c4:ca:f6:
01:eb:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:56 2025 by rpki-client