Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier: MVq3pLUQplDdVHh2ht/Lrf6egJ2u8lp2NmhlgwL4gBA=
Subject key identifier: 77:46:8F:9B:5E:B7:F7:F2:DC:26:49:7E:B1:80:DB:0C:61:C4:D1:38
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer: /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial: 01992256052E746A1DB51F25C15466EE28BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number: 07F9
Signing time: Sun 07 Sep 2025 04:01:26 +0000
Manifest this update: Sun 07 Sep 2025 04:01:26 +0000
Manifest next update: Mon 08 Sep 2025 04:01:26 +0000
Files and hashes: 1: 5qlyqHqHN9fm7YIJbWQAFC8mvBE.roa (hash: i7ncddTAht6A90LZTtfDRpJSDX/ZI6t1vgckOHtmIjg=)
2: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: 2OOueRFHEaG6X76bAUj/lpVQURQ+wLm6EExdZDE6u9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:56:05:2e:74:6a:1d:b5:1f:25:c1:54:66:ee:28:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Validity
Not Before: Sep 7 04:01:26 2025 GMT
Not After : Sep 8 04:01:26 2025 GMT
Subject: CN=77468f9b5eb7f7f2dc26497eb180db0c61c4d138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:6b:d5:29:64:9b:fe:41:77:da:89:00:f5:
d1:35:20:57:fc:cd:61:c7:50:b0:5c:8e:df:e4:48:
bd:77:5d:88:99:76:f4:fa:94:b3:dc:2d:21:a5:f4:
2e:db:5a:d4:91:93:0f:f1:d4:65:9f:e7:c9:c0:e6:
3a:7d:dc:fe:b2:e2:54:18:04:14:10:b1:7f:ef:92:
34:0d:6d:8d:c6:b3:65:88:c8:77:fb:5e:c9:fa:55:
86:f6:d9:24:73:c8:6b:d2:78:96:ba:05:f8:f0:24:
7c:eb:73:ef:53:c9:13:2d:d6:f2:45:80:9a:16:f0:
0a:06:a3:e7:bb:77:99:2b:34:59:b6:ac:0e:b6:df:
53:78:d6:80:6e:ca:52:a7:e8:85:59:1d:6b:2a:45:
41:34:d4:71:11:fa:0b:51:99:c2:b7:7f:6c:41:e9:
14:1c:71:49:11:80:60:19:9f:78:08:9e:58:13:c0:
cd:0a:d3:56:fd:26:01:aa:ab:a0:93:62:67:b3:d8:
8a:4a:04:b7:0a:5a:3b:75:0e:cf:8c:fe:48:c0:39:
b5:6e:a9:a7:f2:7b:42:e7:73:00:19:f7:d0:aa:d8:
44:b8:43:5e:91:b2:9e:b2:2d:bf:0d:79:5d:91:f8:
cd:05:8c:6c:d4:6a:b6:e9:3d:cb:cf:6f:47:03:d2:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:8F:9B:5E:B7:F7:F2:DC:26:49:7E:B1:80:DB:0C:61:C4:D1:38
X509v3 Authority Key Identifier:
keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:75:59:56:f1:8e:95:4a:5c:4b:f6:ad:3b:ac:6d:55:8c:12:
60:28:dc:bc:49:05:c7:7e:ee:32:15:8c:f6:a6:16:de:9c:bf:
a1:42:c7:ee:24:6d:c3:c5:f4:31:2d:96:c7:5d:48:5a:f0:86:
86:f3:c7:d9:3d:e6:dc:b8:6f:32:8c:4f:af:e3:ca:e0:26:4b:
5b:83:61:e7:46:00:3d:c2:11:93:fd:5f:44:ea:26:91:db:77:
ba:fd:45:23:b3:6d:15:a0:4f:59:90:b8:22:11:72:90:08:8e:
04:2f:fb:77:6d:dd:0a:4c:9a:13:3d:40:fa:5b:38:43:4f:85:
17:0f:6f:fe:c4:af:d6:ca:50:12:78:92:38:6d:f0:d3:99:50:
db:ef:77:d8:8b:8a:99:49:34:59:c7:bb:f1:67:ea:db:51:6b:
3c:88:e6:78:49:37:d9:5d:97:15:cd:80:d6:a1:16:f8:af:d9:
ff:d8:23:a6:b9:05:10:4d:21:24:70:12:08:97:1f:46:87:2f:
9e:0b:70:a8:f8:67:fe:33:f7:c8:dc:6b:97:90:aa:c0:1f:c8:
c8:c3:d9:8b:28:90:d7:8b:40:44:42:64:64:e6:9d:8e:00:38:
a2:67:a2:ba:21:7d:4d:ac:bc:db:c1:e2:09:6a:84:16:b6:96:
5f:79:1e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:04 2025 by rpki-client