Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
File: aTHX56mXSaOF6usn-FCridqPLuA.mft (raw, json)
Hash identifier: CVEYuD8XbooKaMOj+te2RffF1M7JlWR9LfjDzqnxx2Q=
Subject key identifier: 7F:E1:C5:11:AA:B1:EC:3D:EF:33:62:39:9D:58:32:E1:D5:D3:C2:63
Authority key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
Certificate issuer: /CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Certificate serial: 0199240CACFC1AB138B54BF912EC994C4A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
Manifest number: 05AF
Signing time: Sun 07 Sep 2025 12:00:34 +0000
Manifest this update: Sun 07 Sep 2025 12:00:34 +0000
Manifest next update: Mon 08 Sep 2025 12:00:34 +0000
Files and hashes: 1: NluQuRsgOiFaIXTWt3y3rez6Bh4.roa (hash: JKkT06F430W2THw9Cv6TXAFRcJ7i7LHFoCLoKhmOqSc=)
2: aTHX56mXSaOF6usn-FCridqPLuA.crl (hash: CV7ktA2Bqzjr5jPQhLOig5KIGdWjpRQckP92O9Y+0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:ac:fc:1a:b1:38:b5:4b:f9:12:ec:99:4c:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Validity
Not Before: Sep 7 12:00:34 2025 GMT
Not After : Sep 8 12:00:34 2025 GMT
Subject: CN=7fe1c511aab1ec3def3362399d5832e1d5d3c263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:a0:28:2e:2b:84:a5:6b:b7:42:94:17:b8:
88:b7:f4:ce:c7:68:bd:8d:c2:15:0b:0b:92:bd:ce:
e9:2c:7c:16:b3:15:82:8c:75:8e:0d:c0:81:ce:9b:
c4:c8:29:e2:e3:40:14:eb:a3:aa:6b:60:5b:a7:a6:
6a:b4:fc:bb:3e:52:aa:af:87:3b:e7:67:19:d1:a1:
83:9b:8d:1c:de:d0:d6:b0:57:f4:9b:8d:82:dd:ef:
69:b6:f1:31:13:7e:22:97:e6:46:ee:53:cd:46:ce:
c5:f5:ea:cf:d6:d3:38:3f:50:56:e7:73:61:1b:28:
4d:5d:89:4e:74:af:13:0a:64:9d:5d:6a:b2:a5:f7:
79:5b:ad:4f:13:c7:6f:bc:a5:f7:bf:16:ee:ba:2e:
27:b2:6f:15:bc:ac:bc:7d:3a:a6:21:78:7f:69:62:
1c:2c:2c:a5:40:21:99:0e:cf:da:bd:fe:b9:83:98:
1f:03:77:48:59:a7:bf:c9:40:ce:e7:f5:e6:c4:18:
6b:0e:7d:38:b4:4f:01:cf:90:71:3c:95:3e:3a:bb:
06:49:70:1c:e4:7c:f9:dc:ab:90:b2:21:7a:33:45:
6a:b0:33:e6:2f:56:fa:b8:55:0d:41:d3:71:24:43:
e2:c5:8d:ba:45:0b:93:70:06:66:94:97:e8:10:55:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E1:C5:11:AA:B1:EC:3D:EF:33:62:39:9D:58:32:E1:D5:D3:C2:63
X509v3 Authority Key Identifier:
keyid:69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:90:54:95:bd:63:4e:a9:eb:91:73:00:52:dd:ca:74:73:1a:
66:b3:53:e4:fc:93:f7:26:65:2e:78:b5:90:ca:f0:f9:44:fe:
76:4a:dd:8d:d4:36:4e:ce:76:6f:73:b8:15:a4:09:c7:00:06:
b2:ef:b6:ac:32:a0:15:43:e6:d6:fe:d7:d5:00:76:a3:b5:26:
f3:d2:0b:94:4e:f8:aa:59:26:70:5c:a2:10:22:95:5d:a7:d2:
c6:3a:96:70:54:37:db:d9:d2:4d:2d:5b:9c:5f:85:72:df:48:
68:b4:72:fe:ce:7d:87:ca:fd:96:3f:03:ec:2b:9a:b2:99:4a:
00:12:c7:d6:96:d5:3c:33:0e:58:ce:66:7a:66:56:a8:c1:3a:
cd:a0:eb:09:1f:6d:c6:5d:d1:4a:08:d8:3a:d1:d2:24:0c:98:
57:e4:02:3e:c2:8d:77:a6:33:da:ca:18:6f:7a:fe:fd:5a:f0:
fb:16:bc:05:cb:da:fc:45:7f:c6:07:a4:05:83:95:34:f7:74:
4c:3c:43:e1:a7:9c:b1:b7:aa:5d:74:08:cc:94:c2:cd:63:b0:
f2:d9:4f:f6:18:6d:9f:4b:0e:d6:99:62:21:43:33:17:6d:1b:
9a:cc:f1:81:d3:61:8c:cd:ff:89:38:f1:75:c9:e8:8e:68:84:
76:ae:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:48 2025 by rpki-client