Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: 8jw8TcW/S0IC63i05mzMNO79ix5UFv8OnqOUBrb6hRo=
Subject key identifier: A0:EB:70:50:E3:8B:93:32:EF:2D:F5:05:C1:C3:8A:8A:22:A8:06:54
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0199319183AF1A6D32B5134E352C074238B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 1370
Signing time: Wed 10 Sep 2025 03:00:43 +0000
Manifest this update: Wed 10 Sep 2025 03:00:43 +0000
Manifest next update: Thu 11 Sep 2025 03:00:43 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: 6Nee8ysuCFce45OVcIwpgI/gyzH1urcrE7WAzb5RpDs=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:83:af:1a:6d:32:b5:13:4e:35:2c:07:42:38:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Sep 10 03:00:43 2025 GMT
Not After : Sep 11 03:00:43 2025 GMT
Subject: CN=a0eb7050e38b9332ef2df505c1c38a8a22a80654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:e8:ef:42:8b:6c:87:88:18:36:4c:63:98:
be:11:20:24:1b:c0:53:0d:ac:34:4c:6e:a7:71:4f:
2e:03:10:3e:c9:b0:9e:d3:ee:98:e7:51:eb:c1:36:
8b:ae:8a:bd:29:e0:e5:dc:83:17:30:d8:39:6d:4f:
64:eb:20:9f:8e:a5:8f:19:bd:6d:7c:4a:a9:6e:85:
9e:c6:f7:15:83:23:59:73:ee:79:5c:1c:20:02:c7:
73:7d:ad:fe:d7:a2:eb:0c:b0:99:f5:de:93:9e:b4:
30:8f:e3:00:37:9c:ae:c5:aa:d2:d9:b7:21:67:d5:
70:a2:ea:a9:93:9c:bc:d9:07:15:fc:51:e4:14:68:
dd:a4:2b:c2:a2:5e:c3:99:ab:09:1e:37:ab:e4:b6:
f0:36:b6:05:8a:0f:40:35:c2:f1:34:11:ed:09:1c:
95:05:28:40:ad:91:27:17:bb:c0:da:cf:d1:ea:5f:
9a:43:f4:15:6c:49:0d:73:7c:5f:43:0f:58:12:2b:
78:ee:08:6a:a9:9e:6d:2b:7f:c3:48:b4:95:8b:91:
18:c9:ef:cd:5e:c7:c4:0e:ac:34:ae:26:e3:2e:8a:
36:86:ff:9b:12:ce:3e:af:d6:08:a1:8e:79:7f:57:
6d:d2:6e:5b:08:1d:c9:2d:82:1b:ca:fa:56:c1:23:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EB:70:50:E3:8B:93:32:EF:2D:F5:05:C1:C3:8A:8A:22:A8:06:54
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:27:36:98:3f:fe:0b:32:9f:b8:40:ec:a7:b5:8b:96:6e:2f:
5e:2d:b2:7d:d9:c9:9e:52:7e:2b:5d:6a:82:78:13:5f:38:14:
fd:99:8e:4e:bb:23:99:2a:e7:7d:2e:2b:c1:08:de:d4:9e:60:
e0:3d:dc:5b:5b:39:f0:c9:c7:31:0f:ca:15:28:f1:6d:00:00:
49:26:df:df:26:b3:ce:4c:32:b4:31:36:70:09:c1:91:66:51:
b9:6a:99:c2:7c:8d:ec:32:ee:27:1e:e5:7a:6c:6d:5e:20:fb:
f8:d2:43:da:f1:c1:56:14:bf:27:34:10:17:17:ba:bc:e0:d5:
9d:6d:6d:66:82:63:01:aa:84:4c:1c:5e:00:55:7e:5e:fa:d6:
18:71:d5:a5:b7:6d:2f:8b:64:72:26:48:0c:b1:a6:b1:1f:59:
f8:d0:9a:cd:22:13:a3:b3:c1:a3:71:d3:45:4f:fb:1d:bb:b6:
5b:90:89:be:35:b8:51:8e:0c:74:14:41:fe:64:b1:01:06:36:
2f:f9:8f:08:11:da:f8:86:0b:62:2b:b5:36:a2:ab:d9:12:f1:
cb:f7:a2:e5:9f:aa:48:0e:f0:c9:35:73:53:0f:73:75:77:c5:
cc:6e:25:29:e0:37:c2:f9:54:e3:50:73:38:c3:ab:43:cd:eb:
cd:e5:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:56:13 2025 by rpki-client