Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File: aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier: VNPRayX/Xa8FlxJYyqvO9KLGTEVDK+gFLVf7NAqoCpM=
Subject key identifier: CA:5D:C9:EB:75:CF:ED:DE:70:FC:B2:A0:33:89:4F:51:93:21:80:83
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 01991DD3C550F6970C0682196A2F154DC793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number: 1673
Signing time: Sat 06 Sep 2025 07:00:41 +0000
Manifest this update: Sat 06 Sep 2025 07:00:41 +0000
Manifest next update: Sun 07 Sep 2025 07:00:41 +0000
Files and hashes: 1: PXiDqudXgKmzyY9YiAzq4s46dWE.roa (hash: 5TBNAVFbP2ChjbJK1BJdzLBXEkgEKjRymZk/TEDkDEM=)
2: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: WwIIDET8dLWZ+4v0S8ZJEkqmoqkBU3MScsn+g0frnug=)
3: q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa (hash: acnCrGpXIM7lWKiBoJxoUduhJbjnt+3LzoU7dLDO7Fo=)
4: yX0Sl7S1CDrX-G7aHHH7HF-0TIU.roa (hash: Y4Ls4yPY2OiPCKdVraBwQCc1dEKhm1VWZBF9yLJSXfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d3:c5:50:f6:97:0c:06:82:19:6a:2f:15:4d:c7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: Sep 6 07:00:41 2025 GMT
Not After : Sep 7 07:00:41 2025 GMT
Subject: CN=ca5dc9eb75cfedde70fcb2a033894f5193218083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f5:69:1a:44:a9:f6:a1:79:63:2e:13:4f:24:
c7:3c:6d:52:ac:34:b8:d4:fb:d8:d0:c1:df:d7:05:
9f:93:a7:d6:a0:01:ad:5e:a2:79:11:e9:ce:4b:2d:
8b:8e:9b:87:d4:cb:06:9f:e8:33:34:d9:f3:cc:59:
ff:f4:91:86:55:4c:0b:83:d1:7a:d5:77:29:f1:cc:
49:75:b7:88:61:69:39:f6:c6:7d:83:0b:cb:80:c8:
92:b0:d6:ee:b8:42:f1:09:18:67:29:4e:83:ad:b9:
fb:45:40:5e:b0:12:72:16:52:90:1b:c8:b9:ed:7a:
f0:46:7e:9c:a2:48:bd:e3:aa:68:36:95:3b:32:70:
4d:db:da:c2:42:25:de:7c:c1:f9:12:99:9e:cf:5a:
08:c1:bf:f6:85:28:45:f6:13:81:50:b3:df:42:dd:
a9:81:31:d4:b3:59:38:2a:d1:d8:4e:93:5e:92:6d:
1b:35:c5:56:05:a2:73:60:82:01:8b:60:84:29:e6:
37:88:8c:73:d1:58:d7:3f:5c:b7:6b:b6:e5:e1:a5:
9b:4c:d5:a8:4d:9b:e7:3c:9c:9b:c5:59:1c:76:ff:
35:f7:d6:1f:1b:9c:4f:8b:fc:ce:2a:1c:85:2f:9b:
bb:65:23:eb:41:04:ec:dc:8c:c1:eb:3b:7e:9c:31:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5D:C9:EB:75:CF:ED:DE:70:FC:B2:A0:33:89:4F:51:93:21:80:83
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:6e:9d:ca:cb:de:d6:cd:f8:8e:73:cd:fc:3d:55:9f:0e:2b:
63:64:fa:a5:89:75:9e:54:06:fd:91:dc:ff:d6:0f:0f:01:be:
a8:14:fc:66:8d:66:6d:d6:f1:2a:f6:8f:e8:ad:b1:f9:0d:3f:
b6:21:53:58:13:b6:7a:a8:b5:67:0d:87:a5:b1:d2:8f:cd:7a:
d3:3d:90:2f:ea:3e:fc:5c:12:e9:9d:94:ef:2a:56:71:a0:46:
d3:7d:ba:48:57:bd:75:4d:d6:29:87:31:ab:b2:fc:c6:df:5f:
e8:b4:c8:a0:2d:81:8b:57:98:40:28:72:3c:61:46:21:1d:04:
ce:a3:31:dc:b9:e1:cd:2b:a7:64:d3:4e:e9:18:e5:87:62:08:
38:b4:7a:28:35:97:07:e2:77:d5:5d:0f:e4:a9:e4:04:55:40:
d6:0c:4b:37:35:f7:97:2f:8c:02:8c:95:a7:ac:59:02:5f:7e:
7a:05:be:e1:40:a4:1e:83:9c:28:99:20:16:d4:83:2d:28:b8:
e0:27:79:3c:7c:3b:4c:93:65:3a:0c:c5:be:a2:27:e8:53:55:
e8:ff:4e:d9:22:27:ca:30:38:7d:e4:7e:8f:6e:71:1c:7f:db:
f7:b5:c3:2e:4f:5e:f7:3a:e9:85:2f:eb:54:ae:dc:fe:ea:16:
6f:91:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:08:13 2025 by rpki-client