Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
File: Aoek4s-o7NArUHMCs8bbF_IRdC8.mft (raw, json)
Hash identifier: XdbXSk917mb4iCLrjorBdUL9yEjjs2qepdoCVk+cvhY=
Subject key identifier: 50:6F:CE:46:B3:E2:83:45:95:6C:F4:84:C0:64:DD:DD:0F:A5:1A:2A
Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Certificate serial: 0199228CCF53E9017E1F126FEAA4399A57D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
Manifest number: 40
Signing time: Sun 07 Sep 2025 05:01:17 +0000
Manifest this update: Sun 07 Sep 2025 05:01:17 +0000
Manifest next update: Mon 08 Sep 2025 05:01:17 +0000
Files and hashes: 1: Aoek4s-o7NArUHMCs8bbF_IRdC8.crl (hash: gzE6B88PeZ0LwsXeuQ46SRzKWOJzk8D4pwDVG1lTHIg=)
2: tlGel_aESKh9Q5NcAJwydSlGFxg.roa (hash: +7ZMdrX7ZPoXi90BV30MCP++snK3AB9I77yJbSA2Q3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:cf:53:e9:01:7e:1f:12:6f:ea:a4:39:9a:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Validity
Not Before: Sep 7 05:01:17 2025 GMT
Not After : Sep 8 05:01:17 2025 GMT
Subject: CN=506fce46b3e28345956cf484c064dddd0fa51a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:9f:2c:c9:03:e4:b1:af:df:37:ac:bc:3a:
0f:b6:30:98:4e:76:5b:bc:48:df:95:22:51:10:02:
20:4a:2a:56:26:38:ba:a2:8e:5c:c3:a5:59:f2:1e:
4b:c7:d3:79:a0:d0:63:72:b5:c2:cf:a2:3d:16:17:
14:22:2b:49:5f:7d:ea:b8:ac:82:03:de:66:b2:81:
0c:e8:45:d4:da:21:bd:eb:13:41:f2:4c:11:ff:c5:
3b:f6:af:d5:fa:9f:24:4d:b3:38:73:36:07:59:0d:
86:6e:a0:cf:0f:a1:b5:96:42:fb:12:9c:e4:77:2c:
ab:a8:f0:6e:42:8f:32:e0:2d:ed:3a:a6:6a:06:c9:
a2:9e:d2:99:a9:7f:03:2e:52:eb:ce:4e:88:18:93:
92:de:24:61:5d:c5:4b:fd:77:63:16:d3:41:a0:c0:
8a:3f:da:93:11:d3:ad:cf:e8:66:e3:b2:cb:07:0f:
7e:f6:1a:6b:b0:3d:27:75:29:63:b3:a1:79:eb:53:
60:21:37:4f:21:92:42:c9:bd:38:a0:53:c8:7f:e4:
00:b9:cd:f3:be:dc:b9:71:37:f8:8d:45:f3:c5:28:
f4:b3:7d:4b:9a:73:31:03:f0:04:6c:59:3a:38:39:
0b:74:bd:ca:05:ca:43:21:d6:15:2c:34:ed:f6:55:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:CE:46:B3:E2:83:45:95:6C:F4:84:C0:64:DD:DD:0F:A5:1A:2A
X509v3 Authority Key Identifier:
keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:36:b9:60:cb:0a:ab:1c:fe:a1:94:45:bb:0c:d1:46:0a:82:
c3:a1:28:05:7c:70:37:33:ea:c5:61:49:b1:50:57:2f:76:9d:
74:df:a8:61:3a:7b:f3:eb:11:d1:d1:57:97:31:94:2c:82:1d:
4d:fb:5b:08:99:f4:3a:8c:1d:a6:8c:9b:7d:1e:f5:62:17:bf:
00:69:db:89:66:86:7e:b7:36:e1:c0:bc:3d:bb:e0:6b:36:ad:
19:22:ae:11:de:6f:82:c7:aa:38:1f:21:79:cd:29:b4:db:72:
a8:6e:e9:b4:ba:44:3d:26:af:07:2c:a3:2a:5b:45:a8:c8:7d:
9e:47:c6:2b:01:5a:93:3b:6d:79:84:3e:3c:00:17:b5:09:bb:
e6:a3:12:dd:14:cb:ef:4e:fc:75:3d:6c:84:89:97:0a:00:65:
e2:80:29:93:46:87:d0:e1:c0:12:70:79:e1:31:5b:d6:9e:9b:
b1:ad:e5:97:b6:02:18:08:fe:04:09:a1:24:72:83:ae:60:64:
bf:9d:f4:a1:9f:e2:7a:ee:54:44:a5:1f:8d:c9:72:b7:b9:20:
61:05:2b:4c:65:d8:ab:6d:0f:40:ec:f0:54:0a:c3:3b:36:de:
af:4a:ae:1a:8c:1b:1e:c1:f4:10:98:53:b5:8c:b2:88:46:bf:
5a:05:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:19 2025 by rpki-client