Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier: NF306VVhjTaTNlbvCLs5NqFu0fKjS1gCEaZoQSXRJLM=
Subject key identifier: BE:BC:64:1C:75:FA:3E:D4:CB:FE:FD:D7:C5:3A:57:26:51:8A:FB:AA
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 019922C3508EEAC1645F31212A3E076CFC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number: 81
Signing time: Sun 07 Sep 2025 06:00:49 +0000
Manifest this update: Sun 07 Sep 2025 06:00:49 +0000
Manifest next update: Mon 08 Sep 2025 06:00:49 +0000
Files and hashes: 1: WtSCnO3gEAdA7CmHDm-1TgRanxo.roa (hash: zjCTfpdCrELIYE4h5CqDKN3D0MJfeRneuUlzKy7CY2A=)
2: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: hYZQAr5WAwVR2IiDnkaQieooKxvqskiAHqQrtsglRQM=)
3: kvtNOhaPDDcYSNhoNOrRM4T-fmM.roa (hash: Z6M9k5kPeExTY6hgAM3xRd+EQBgJ9P/v9dQD7xXO8UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:50:8e:ea:c1:64:5f:31:21:2a:3e:07:6c:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Sep 7 06:00:49 2025 GMT
Not After : Sep 8 06:00:49 2025 GMT
Subject: CN=bebc641c75fa3ed4cbfefdd7c53a5726518afbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:8a:fc:68:63:17:7b:2f:bb:e2:7b:15:05:
cb:fc:f8:f6:dc:6f:eb:b0:28:df:8c:76:db:4c:5b:
d6:e5:cb:86:c5:15:f0:07:d1:ef:3a:90:94:b2:af:
24:60:4b:40:0b:7f:f2:fd:35:22:10:4f:4c:63:76:
79:a5:6d:ff:77:89:81:b4:29:b8:00:0e:bc:d7:48:
51:b0:ec:30:34:4e:7a:2b:c5:bc:cc:d0:f9:55:21:
24:4b:5d:7e:05:22:c0:7d:87:7e:c1:f1:36:99:bb:
95:f0:ac:25:db:e9:5b:63:55:6a:69:85:7a:94:c6:
d7:5d:04:ac:54:ba:6d:97:94:47:2b:63:a5:52:5e:
c3:0d:1e:2d:86:66:a4:43:94:29:8e:93:8f:42:c1:
b9:cf:f0:d2:2c:ac:45:f6:a7:de:89:9e:a8:9d:91:
8e:57:c1:8b:a0:05:c6:28:66:1c:c1:53:0d:34:5e:
6c:9e:c0:d6:66:ce:f0:8d:79:c0:e4:4d:f6:e9:72:
ef:cc:6b:75:30:b1:31:05:93:f0:c0:74:a5:4b:10:
4d:46:81:4a:c6:19:6b:ad:b7:49:97:e7:43:ab:76:
fc:b6:b6:f1:91:90:94:4c:fa:46:26:98:15:bf:e8:
5c:36:83:e1:34:6e:1a:58:ca:35:16:aa:c3:6a:3d:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:64:1C:75:FA:3E:D4:CB:FE:FD:D7:C5:3A:57:26:51:8A:FB:AA
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e8:fa:43:6b:79:ee:7b:4d:79:8c:56:8f:33:b2:49:6f:ae:
b2:b1:ab:7d:57:6e:68:4d:04:c9:9c:6d:2d:da:f4:08:95:41:
a7:fd:d2:00:17:2e:8c:22:6c:d7:6d:c7:0c:e1:dd:1e:9f:ba:
61:03:c2:d5:0d:af:c5:27:b0:4e:96:ce:01:82:75:15:62:21:
d5:e2:f6:35:7b:30:af:78:ad:2c:92:50:0e:90:a1:92:2c:6b:
74:ff:03:81:f5:93:c7:cd:31:7f:82:02:5b:29:94:51:54:83:
f5:81:61:88:68:d5:9a:ba:c7:9e:da:7e:51:8a:e7:b8:7b:9d:
9e:38:89:b5:e8:8d:5d:cf:8a:ec:85:4f:42:4e:c3:2b:3f:89:
be:fd:0c:8a:53:d2:d1:cc:ff:2b:a4:9e:76:50:83:40:88:4a:
b2:07:e9:cd:5f:55:20:4e:ca:a2:22:e2:e7:02:dd:3a:81:33:
51:0c:7b:e7:9a:b2:9f:a2:29:89:c4:aa:a0:2b:5f:fa:d5:7f:
5c:70:98:72:cd:ee:21:2c:31:4c:b2:5c:36:97:e1:73:01:d1:
f5:08:bb:9a:62:96:84:9d:84:31:09:b4:f0:34:f3:f3:c1:58:
fd:6f:5e:9f:ab:06:19:2b:69:d8:d6:9e:75:b3:ce:f0:c3:dd:
1c:ab:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:16 2025 by rpki-client