Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier: k+xDzXYnfaCjEEHZmQeIR81OjILUPJ98foXshcM4NC8=
Subject key identifier: 1A:F5:33:09:B3:B2:D3:25:DC:F8:16:DC:EB:BE:9F:C5:A1:44:F8:90
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 01984A77F5AC5CD89B146F5C3B1DC84304F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number: 1344
Signing time: Sun 27 Jul 2025 06:00:32 +0000
Manifest this update: Sun 27 Jul 2025 06:00:32 +0000
Manifest next update: Mon 28 Jul 2025 06:00:32 +0000
Files and hashes: 1: Jqr-CXHYnZmzg_xVdImaXbMmVEI.roa (hash: XvpOhA/u1tpu0r7xTILje32qKTHGeywG7gPta8XZExU=)
2: S7cvUB4j_UAWLlorKkQpKplvSek.roa (hash: BzDMJKCxDcsJF5G/pnwJpmaeHc/VSanQaPg+mRpgeIU=)
3: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: uOpSVpljrpxgHjr6OWlyO4rRDZEI8wlz3T4stWAXD7Q=)
4: p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa (hash: 8XfSlLN4HMzOCIW1k555GHmyKjvtxd9c3WvZ5/ZNc5E=)
5: qGNxVRIhvMDYI5LZ_Vl9S3rhWPc.roa (hash: A64MjanIkQ8ukg/riCQQDjM5t/zWrzXBJspszNezj3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f5:ac:5c:d8:9b:14:6f:5c:3b:1d:c8:43:04:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jul 27 06:00:32 2025 GMT
Not After : Jul 28 06:00:32 2025 GMT
Subject: CN=1af53309b3b2d325dcf816dcebbe9fc5a144f890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:4d:7a:8d:76:84:35:1c:eb:8d:1c:95:9b:
90:48:fd:6d:c4:d4:d2:57:c2:49:34:34:17:b2:b8:
7c:25:05:cb:de:e0:c2:59:ab:ae:96:c3:85:f9:b0:
83:d5:cb:99:30:4b:7f:0f:a5:dc:6e:d1:b3:4e:89:
b4:f5:20:1e:c1:6f:c0:d2:f8:d1:93:c2:ab:7a:23:
58:48:8a:e8:f5:bc:29:a8:a6:21:52:b5:2e:c5:4f:
fa:6a:3a:fd:d3:6d:24:68:82:4f:88:17:20:39:1e:
32:37:4f:94:de:48:1c:26:ef:07:ad:09:f2:ca:7a:
fd:4f:7f:d4:bb:d3:fc:74:cc:4a:20:44:e8:49:39:
cc:7c:3e:04:77:af:5f:20:5e:ab:98:4b:31:ca:03:
31:7a:a1:2b:ca:21:94:22:03:38:06:59:bb:9f:93:
8a:02:e6:92:11:51:83:8e:11:b6:df:59:fc:12:ab:
4a:80:31:bf:5a:82:ac:76:cc:1c:20:01:a6:a9:41:
08:fb:c1:25:13:92:5f:44:53:7d:99:65:8c:61:a6:
6a:d0:31:12:b6:3f:36:72:af:6b:e4:34:53:67:7f:
45:49:c0:24:3d:e6:8b:6d:aa:f9:d4:4e:b6:8f:46:
83:fd:1d:10:0a:15:1b:bb:4f:a8:3a:5c:56:5c:1a:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:33:09:B3:B2:D3:25:DC:F8:16:DC:EB:BE:9F:C5:A1:44:F8:90
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3b:e3:25:f5:22:ca:e7:59:d3:8c:02:71:c6:2b:b5:97:72:
33:45:12:89:cd:27:30:4e:af:a2:12:04:76:6a:32:63:5b:4d:
21:c4:64:e2:18:6a:12:bb:2d:99:d7:26:c6:88:f1:e2:00:96:
59:74:2a:b5:26:56:e5:27:83:fa:62:f2:3d:5c:37:b9:7c:8e:
23:1b:0e:0d:d1:72:10:a6:df:f6:e5:8a:38:15:b2:e1:ec:d9:
60:85:f2:54:79:40:13:1d:c6:47:9c:df:50:63:a8:be:1f:1d:
91:f4:94:ca:f7:2f:8c:98:1c:ad:b3:5a:46:e4:5a:ff:15:e7:
ee:e7:87:90:a3:85:f9:a6:be:ba:c6:67:ed:03:94:c3:75:20:
4d:f8:68:d6:74:ee:0a:67:d1:60:01:fe:b7:e8:17:a5:2c:cc:
ef:2b:ed:ce:07:dd:73:b2:03:0b:ea:85:a6:22:af:58:4a:35:
4d:ac:27:ba:23:ce:d0:07:bc:0e:9a:f2:df:34:3f:68:58:a2:
12:1e:7f:e3:1a:6c:7a:26:e1:3f:f6:f3:ff:b4:3d:fa:b8:c0:
74:ff:3a:1c:01:ae:fd:e0:ce:6a:0a:d8:b3:69:7a:47:b4:25:
ed:c9:30:77:2f:74:8a:73:8a:5a:dd:d9:71:f2:e7:8e:2c:e5:
1f:62:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:13:34 2025 by rpki-client