Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier: D1eHL2etMQEsUX+Pa0t5HqmosIZvKOXCeOWR6v4SNcI=
Subject key identifier: B5:27:16:A5:E5:CA:90:72:62:EE:F0:8F:7F:E9:8B:47:8D:03:84:04
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer: /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial: 0199225570EBEA2EC873100F678769DF7C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number: 02B2
Signing time: Sun 07 Sep 2025 04:00:48 +0000
Manifest this update: Sun 07 Sep 2025 04:00:48 +0000
Manifest next update: Mon 08 Sep 2025 04:00:48 +0000
Files and hashes: 1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=)
2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: 92vo39ok6qkVdQjxs4wWsSVihJSFRrwq7Y/8ctl1/o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:70:eb:ea:2e:c8:73:10:0f:67:87:69:df:7c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Validity
Not Before: Sep 7 04:00:48 2025 GMT
Not After : Sep 8 04:00:48 2025 GMT
Subject: CN=b52716a5e5ca907262eef08f7fe98b478d038404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cf:29:88:3b:ed:4b:08:29:0c:2e:00:62:67:
bc:f8:38:7e:7c:40:6e:0b:2b:5b:05:9f:7e:08:cd:
ec:c2:ea:1f:0c:bb:78:7e:f8:da:40:93:ca:61:b3:
47:d1:10:09:3c:dc:43:27:9f:40:7b:55:35:40:af:
3e:4f:bb:d9:70:27:e5:4f:96:20:e1:c1:d0:d0:2d:
56:3d:54:a1:b7:39:99:5a:2e:99:f0:06:e8:b7:df:
71:7b:56:12:51:3a:a6:2d:6c:9e:82:df:13:4a:3c:
7a:2e:b0:a5:c9:f5:5f:68:fd:21:c6:7b:2d:3f:0b:
27:10:39:6b:08:72:b7:86:90:31:cc:32:4f:d8:8d:
19:3c:46:3d:ea:d2:0f:0f:78:af:f1:82:2c:4a:4b:
51:5c:f3:a5:75:23:57:d9:78:46:a4:e5:bf:c4:48:
52:84:6e:98:c0:7a:ea:56:d9:75:1b:0c:9b:34:61:
f9:bc:a2:24:ba:f4:3f:3c:2e:42:8c:ce:ae:24:c9:
3a:f7:0c:ae:a8:64:38:a8:bd:90:3f:12:3f:17:48:
ec:d5:35:b3:d2:59:d5:76:59:ae:25:c8:a1:d6:bc:
b7:ed:50:6d:ba:07:8b:53:e1:40:36:56:ff:f9:da:
7e:e8:c8:02:89:4f:c1:b4:b5:f1:06:f1:34:f2:52:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:27:16:A5:E5:CA:90:72:62:EE:F0:8F:7F:E9:8B:47:8D:03:84:04
X509v3 Authority Key Identifier:
keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:13:b1:90:2c:7d:1b:d9:f5:7e:d7:b0:95:7b:20:6b:73:78:
cb:ec:7b:f0:29:5f:00:0b:ab:e8:d4:27:b1:af:6f:8c:68:b1:
cf:00:dd:b4:a1:48:64:07:21:c4:48:52:b4:0a:54:b1:90:c0:
00:ca:90:97:b3:51:7d:3d:93:e6:5b:49:5b:3a:69:25:f5:3b:
99:94:4e:e4:b1:d2:56:8d:ed:4a:bd:95:88:ff:b3:9f:21:0e:
9b:d6:5a:f5:be:24:a3:7f:2e:20:fe:c4:87:4b:0b:04:03:b0:
eb:b8:87:36:b4:21:4b:b9:e2:e9:c8:a5:c9:ad:ee:98:8a:37:
fa:ad:07:29:92:7d:7f:50:ba:4b:46:f9:03:f1:8f:4c:84:0f:
71:4c:49:ae:d6:7d:6a:24:de:94:95:f1:5e:30:42:68:c3:22:
ab:bc:07:e4:29:df:ee:5f:0c:7a:c7:ab:e2:13:c7:57:cf:5d:
29:e4:ef:09:ae:c7:0b:e5:e4:b1:8e:3c:e2:84:76:e9:03:64:
ed:57:f0:99:ed:e3:ba:c0:04:de:b6:d5:0c:f6:f7:db:dc:aa:
da:9f:eb:00:a5:2e:de:fe:2e:81:cb:30:ad:16:e0:f4:ad:60:
69:eb:93:f4:52:37:c4:2c:6b:ba:e3:24:df:7c:7c:b6:b7:50:
28:92:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:13 2025 by rpki-client