Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier: T1VyIKmT1wcXoJA4vpD5SLbGmexYO4pzymydzIjqS/I=
Subject key identifier: 37:07:01:1F:EA:A0:3D:41:3D:E5:EB:6C:B0:F0:63:D1:53:BE:FC:0B
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 0199225530C8E604F67B462C1AF953836E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number: 10E0
Signing time: Sun 07 Sep 2025 04:00:32 +0000
Manifest this update: Sun 07 Sep 2025 04:00:32 +0000
Manifest next update: Mon 08 Sep 2025 04:00:32 +0000
Files and hashes: 1: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: GUT4oWgRxkuRFmUw2wD/frStJO5t7hNL6bz/jAzWYyE=)
2: bz3fbBHm2ElR6vxL1-cqQoSLlk8.roa (hash: iWv2k5/cNl7lJrUkdCeVYiFcY+HPf8sJg4JbV1Gwcrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:30:c8:e6:04:f6:7b:46:2c:1a:f9:53:83:6e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: Sep 7 04:00:32 2025 GMT
Not After : Sep 8 04:00:32 2025 GMT
Subject: CN=3707011feaa03d413de5eb6cb0f063d153befc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:28:80:fb:9e:51:10:5d:3b:b8:b2:96:57:
46:45:21:98:f3:6b:fe:11:72:a7:5a:57:49:cd:ff:
6b:1f:5a:3b:36:05:cd:14:80:ef:50:ee:43:4e:42:
66:00:ec:8e:42:1a:78:a3:cb:8c:7d:1d:fb:02:8a:
5f:66:b0:98:c6:79:8a:cb:4e:cd:8d:41:df:6e:a5:
fe:7e:d6:f6:33:94:4a:16:e0:a1:70:52:13:a7:f7:
a7:53:80:78:53:cc:cf:ef:04:0d:e2:ae:41:ce:e8:
b3:75:49:6f:10:b4:88:bd:85:85:d0:ed:d6:d0:d9:
95:33:91:93:e2:fd:1e:71:05:f8:b8:8f:89:84:42:
b6:a5:80:66:fa:fa:65:6c:46:4c:59:e8:31:d0:17:
46:26:a7:5d:a2:0c:08:a6:ed:3c:02:5b:ad:23:88:
c4:55:29:dc:82:0a:95:a8:13:65:38:4b:c7:91:0e:
3f:02:c0:b6:e3:0a:fb:9e:75:b1:41:3f:86:d5:b1:
c6:0f:48:74:9e:4f:2a:26:32:8f:23:aa:76:9c:b2:
3e:48:a9:83:a2:b1:88:9d:fd:49:13:e9:f8:0a:db:
d8:9d:c5:bd:01:9b:65:82:cf:65:eb:68:7b:8c:eb:
e4:84:21:95:cb:2b:55:74:74:ab:fb:15:a7:d1:65:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:01:1F:EA:A0:3D:41:3D:E5:EB:6C:B0:F0:63:D1:53:BE:FC:0B
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:40:00:a5:31:30:fc:97:e7:68:d7:98:a3:66:d6:db:aa:2a:
ed:9e:d4:79:e2:8d:67:a9:eb:9e:59:4e:e2:aa:09:73:4d:83:
44:bb:71:0e:77:bb:6e:07:fa:f7:04:da:7f:07:f7:2c:ee:87:
f0:0f:fb:86:02:23:61:8a:f5:42:59:3b:cf:67:ea:49:7b:4b:
2a:28:47:4a:cc:27:5a:0e:43:2e:4e:5a:ec:a0:ed:88:42:4d:
e4:4f:7a:30:36:02:9d:c0:ac:a3:00:b8:e6:13:a5:ac:3e:21:
9f:75:9c:c8:34:00:46:ba:92:32:a8:bd:8b:17:19:ea:66:4c:
fa:76:f7:63:70:f9:ba:61:e3:18:b9:26:70:80:1d:45:d3:df:
eb:87:b7:37:25:d2:89:a7:62:be:9b:69:4f:54:e8:ac:b1:d9:
6a:c7:83:35:d1:d9:77:28:53:f8:44:48:09:96:75:f3:9a:8e:
da:49:28:23:e6:54:f8:6e:78:2e:df:10:3b:0f:cc:93:f7:4a:
ed:60:3a:fb:2e:13:69:b6:b3:0e:b2:9a:05:7f:1f:50:d3:22:
22:a4:37:5d:dd:b1:66:26:50:ef:a5:df:0b:94:c1:9c:ff:b4:
ab:dc:65:56:b0:bf:60:51:db:92:30:0a:29:ad:da:ec:0b:29:
f2:f2:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:32 2025 by rpki-client