Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
File: aJQuPste6nkqdvray-wBqFaOl_Q.mft (raw, json)
Hash identifier: 4qg1N9LNIdb5Zj0Az/xToP1r5AQLhAr1diKF54XNImg=
Subject key identifier: 42:A1:D5:DD:A7:84:52:08:4F:AF:EF:0A:C1:F1:D5:F6:A9:BF:04:CE
Authority key identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
Certificate issuer: /CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Certificate serial: 019923310D124772B1EB33ECFACA434E1A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:41 +0000
Manifest this update: Sun 07 Sep 2025 08:00:41 +0000
Manifest next update: Mon 08 Sep 2025 08:00:41 +0000
Files and hashes: 1: 2I7Ug_0TKUirYBKdCRFB3X-yPVM.roa (hash: OuAKBuCtiZrdtqQo3Ia+YQ9DdlyXDqDuhn9BW+I9wGc=)
2: aJQuPste6nkqdvray-wBqFaOl_Q.crl (hash: 4jOZsk8J0YtO0JiwXAaqCOFaHDp6jYnu9MUXWs4E/MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:0d:12:47:72:b1:eb:33:ec:fa:ca:43:4e:1a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Validity
Not Before: Sep 7 08:00:41 2025 GMT
Not After : Sep 8 08:00:41 2025 GMT
Subject: CN=42a1d5dda78452084fafef0ac1f1d5f6a9bf04ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:41:68:a5:da:3c:e3:79:b9:4e:f6:e7:33:
3b:14:1c:b5:48:f9:be:01:87:52:bd:81:fb:21:d9:
d2:63:fd:9b:e3:ca:84:8b:d3:fc:2f:41:08:88:28:
cf:ea:9b:f2:26:35:64:ac:a8:ff:71:8c:d7:bd:62:
0f:c5:0a:68:f2:39:87:22:77:34:0b:b4:ac:82:12:
e7:14:d0:b7:18:a5:f9:cb:a1:74:3a:be:e8:3a:21:
42:b3:ce:ff:d2:3c:d5:5d:37:71:3b:26:9a:e5:1e:
b7:e0:40:e2:a8:28:2c:0f:34:44:b8:fc:fc:fb:15:
19:cd:2a:87:0e:e1:19:15:ae:89:b4:5f:5d:0c:4f:
92:8c:51:95:35:1c:4d:f5:ab:90:69:de:b2:b1:f6:
b0:18:07:4b:27:50:2c:33:f1:76:0d:5b:0a:90:9b:
bf:87:3f:59:ce:ae:a1:45:cb:25:b7:c0:26:a1:5a:
c4:ce:5c:c0:c8:52:d1:ee:86:6b:7d:3e:90:bd:33:
0d:ff:c5:ae:43:fa:a7:6d:7d:70:24:d1:8e:fa:2f:
34:1d:05:5d:a0:59:71:3c:27:4a:60:0c:ea:e1:95:
fd:49:ff:90:46:7e:8c:63:04:15:a8:12:85:d2:1b:
92:2b:db:eb:1a:2c:75:80:94:2d:41:1f:8d:bb:36:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:D5:DD:A7:84:52:08:4F:AF:EF:0A:C1:F1:D5:F6:A9:BF:04:CE
X509v3 Authority Key Identifier:
keyid:68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:aa:4d:f6:8a:e6:89:2a:af:7d:a8:47:32:c4:73:6c:38:25:
f5:65:15:38:ab:9d:3b:63:88:1e:76:37:48:76:d2:1f:03:ec:
db:e3:96:91:63:50:14:83:56:66:1b:43:53:fb:2a:43:da:42:
a4:9d:29:8b:1e:26:ee:40:da:99:22:84:b4:c3:b5:f9:0f:6c:
ca:01:15:a0:8e:44:81:27:6d:50:0b:33:e0:5b:32:05:9c:75:
db:ca:c0:6e:b6:23:31:8a:86:6e:83:12:1f:7a:92:1f:31:e3:
dc:9e:1a:51:ef:9d:c4:2d:b5:46:18:c5:b7:fb:f1:44:59:2d:
4c:95:95:66:37:b8:8f:43:5d:c0:9a:28:b9:e0:9d:61:a3:2d:
a3:bf:a1:1d:ea:e8:df:2e:79:22:28:95:d6:dd:2f:46:87:6a:
89:a1:70:34:f7:8c:df:8d:30:99:02:1b:78:37:ee:e9:b8:c9:
f7:b3:70:d9:5f:e8:88:12:5c:90:71:04:ce:85:a8:2c:f8:a7:
a2:b8:09:1a:2b:d0:4a:00:b4:62:9d:55:4c:9e:ec:83:7f:c5:
8a:bd:11:5b:d8:01:ff:6a:2e:42:9a:26:92:2b:9d:ba:bd:cf:
9a:56:d3:a7:bd:84:8e:d8:b1:33:80:07:8e:ec:e8:46:b1:41:
42:04:bf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:47 2025 by rpki-client