Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: wQBIFGgsLdrdBZtKhV0N6FrcsgnM6myT7LrNcu+bWEU=
Subject key identifier: 10:7E:D2:E0:32:10:55:9D:6D:34:22:25:4F:7D:BD:AF:CD:7A:46:39
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 0199240D4BBBD0274CC5DAD1094660E71EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 167C
Signing time: Sun 07 Sep 2025 12:01:15 +0000
Manifest this update: Sun 07 Sep 2025 12:01:15 +0000
Manifest next update: Mon 08 Sep 2025 12:01:15 +0000
Files and hashes: 1: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: h+rtmwrBzkW5LZYfjaBwpd585kcMYpRihswzSWuaq2A=)
2: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=)
3: paZxOmMKFpQKe-8Kne9bRfBeDj4.roa (hash: Ht8nkuSK3tnDGTAuNZ2+oouOY3eOWnt0ge3I9SzF5BY=)
4: tQhpXUNnvGff6XvuqvOKpCTzYwY.roa (hash: Hc4QZ0VrOY7vtGnelWFhq1jyckc5D//hAbmROwzCFcg=)
5: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:4b:bb:d0:27:4c:c5:da:d1:09:46:60:e7:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Sep 7 12:01:15 2025 GMT
Not After : Sep 8 12:01:15 2025 GMT
Subject: CN=107ed2e03210559d6d3422254f7dbdafcd7a4639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:13:58:cf:f4:e1:c1:58:79:bf:47:dd:d6:
5d:c9:4f:84:6f:75:b8:e5:8e:d1:0d:a9:2c:c3:b8:
83:e5:d4:fe:89:50:8d:bd:4f:b4:60:0f:4e:15:8f:
fb:5d:3e:e4:cf:18:8c:2b:f1:fa:8f:ad:75:1a:43:
b3:f8:26:2b:59:55:7d:9d:c3:c8:53:a1:99:c6:0d:
99:52:af:bb:5a:74:9d:9e:2a:c5:cf:31:5e:84:ba:
c8:c9:af:15:a4:5d:22:3f:cb:75:ce:b9:89:23:29:
b7:a3:ff:64:f9:96:17:24:da:b1:85:9d:57:6d:b2:
d2:a3:4d:7c:14:9a:4c:49:fe:5b:2f:dd:71:45:ce:
9e:dd:54:8b:6f:a2:c2:3f:e5:1a:ab:49:60:c9:95:
3d:e1:28:e5:df:df:ea:b2:69:25:05:bb:47:7c:31:
62:09:be:97:80:d1:9c:9a:76:a6:35:22:34:6c:e9:
5c:00:ea:30:73:78:e3:56:cd:d1:34:33:eb:24:88:
89:34:e3:ea:18:be:08:be:78:df:f6:c9:ba:08:25:
00:ee:bc:91:43:ee:a5:e8:ac:d0:8d:8e:bf:a7:fb:
f9:3d:01:c1:f9:b2:19:2e:aa:0d:3a:85:8b:83:5e:
f9:86:9c:a6:83:1f:b6:d2:43:b4:e6:dd:c6:e4:7f:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7E:D2:E0:32:10:55:9D:6D:34:22:25:4F:7D:BD:AF:CD:7A:46:39
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5f:d6:66:5f:11:43:ac:82:7c:4a:21:a9:ff:37:63:ff:1b:
5b:90:6d:29:3c:cc:e0:4c:f2:eb:7b:0c:8e:27:72:ac:3c:e5:
f7:29:b1:74:59:70:3d:07:d9:fe:c6:5c:c4:2d:44:c8:42:92:
39:9e:8e:6a:44:78:18:d6:f7:ed:3c:11:e9:8d:32:a4:37:58:
d4:3b:5d:98:3b:fb:16:80:70:94:a9:d0:c0:4e:13:90:bf:c5:
dc:3a:10:fe:47:14:b1:c5:01:59:35:5e:54:52:49:6f:e6:4d:
f4:08:b6:a8:d9:56:64:4c:66:c5:e3:2a:8d:fa:63:56:cf:5f:
a3:f1:ee:4d:c0:1d:52:5a:a6:af:40:6f:d2:09:78:00:2b:0e:
86:09:a6:91:55:ed:a8:2b:49:93:b5:db:07:e1:70:6c:51:6b:
ee:39:c0:dc:a6:be:a1:a7:0d:2f:a1:74:ce:3d:1f:40:c6:3c:
9c:fa:55:53:0b:9f:7d:76:4a:d4:7f:0b:46:bb:e5:06:e9:28:
43:8b:7d:ba:92:1a:73:1d:f4:d4:2a:8f:60:4a:48:8d:c8:97:
30:fd:a2:da:d1:6e:4d:df:f2:c5:0c:43:19:f6:79:64:3e:60:
27:03:e3:d9:f2:64:9d:1e:d0:04:1c:49:82:6f:f8:2a:d4:0e:
22:19:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:25 2025 by rpki-client