
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: kef591Fy4+WL4gdV9SYYEtakooBfnFcq5rYxFZdSTQc=
Subject key identifier: F5:6D:AB:A8:69:4C:DF:1F:92:5C:BF:ED:E3:CE:7A:20:79:93:1F:EE
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01992A7CA5C9F54374258B8B6596DAFDFF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 155D
Signing time: Mon 08 Sep 2025 18:00:35 +0000
Manifest this update: Mon 08 Sep 2025 18:00:35 +0000
Manifest next update: Tue 09 Sep 2025 18:00:35 +0000
Files and hashes: 1: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=)
2: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=)
3: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=)
4: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=)
5: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=)
6: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: dRtXhEJrk6bqjuqNFusbI2UGE9uOkfFBcQea/6YZXPA=)
7: dhCWHEfUE6vusnYr9Cpsw49GGBU.roa (hash: sfCfke9wYtz4NQ6ml95RZDRUqTquZcuUDHPHT8jSjBk=)
8: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=)
9: yw5vGp8F-wq8PHmMa9xy_6a1sNo.roa (hash: +t/O1FCcNd8m1cdK/0R5uMlJp79H097Pt7F0twr+l3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:7c:a5:c9:f5:43:74:25:8b:8b:65:96:da:fd:ff:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Sep 8 18:00:35 2025 GMT
Not After : Sep 9 18:00:35 2025 GMT
Subject: CN=f56daba8694cdf1f925cbfede3ce7a2079931fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:73:ca:c6:d1:3e:f4:79:05:77:72:ab:bc:
3d:11:a1:49:7e:02:4a:84:59:f6:c0:9d:a1:58:97:
15:80:93:4c:73:3e:ba:05:40:b2:21:9f:30:38:df:
5f:6a:9a:10:bd:f6:1a:70:1f:54:a7:89:7c:bf:12:
cb:fd:ca:27:14:b0:20:a0:f4:1b:1a:56:cd:50:4d:
0a:a2:58:e6:d0:23:fa:6c:87:9a:19:21:0b:89:84:
cd:90:e2:cd:b2:a6:e4:15:2e:81:9f:b6:5f:50:8a:
22:5a:8a:cc:39:b9:99:57:48:57:a5:23:68:6a:90:
8f:b7:8a:41:ae:a2:3c:8d:c6:5a:a0:3d:23:68:19:
dc:00:b8:f4:49:98:cc:8b:72:7f:4f:55:f8:4b:4e:
64:2e:fc:cb:5b:56:c9:4e:ef:f5:62:c6:d6:0d:50:
f9:b7:9f:57:eb:3e:54:d5:8b:ef:1a:1d:4a:3c:25:
f7:0c:17:73:ee:83:a3:ae:9d:c0:3d:7e:6f:1d:85:
a6:2e:ce:0e:93:b4:bd:71:72:fa:96:7c:e9:be:3e:
8d:25:f3:b5:15:dc:28:cf:b0:86:c6:90:b3:29:91:
d2:6c:0b:85:e3:32:2a:b6:36:04:77:fa:45:73:ab:
48:6e:06:52:83:c7:2a:db:58:f8:b4:d3:76:f7:f6:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:AB:A8:69:4C:DF:1F:92:5C:BF:ED:E3:CE:7A:20:79:93:1F:EE
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8a:75:84:dd:f9:59:57:48:14:85:2c:e1:0e:93:03:9e:82:
ce:d4:75:a3:b7:db:77:3d:20:17:1e:6b:f7:9a:97:93:aa:09:
8a:a4:e2:da:d0:6f:b2:07:25:07:9a:58:af:5d:e4:fe:29:91:
38:e0:2d:29:58:aa:f7:1c:6f:a3:23:63:b4:ba:bf:d3:23:86:
95:47:ac:c5:d3:15:0c:0b:9f:a6:1e:86:6a:bc:b7:69:a1:14:
51:88:3c:ae:bb:97:f1:ff:3e:e4:cf:34:86:c8:7b:e7:e1:b5:
ce:6f:d4:9e:0e:bc:dc:bc:9f:ae:67:b5:27:2d:c4:27:79:e3:
19:67:28:c6:20:ca:2f:6b:82:7d:bd:49:c4:dd:1d:05:fe:1f:
59:1d:b9:99:33:05:26:3d:7c:d0:f9:f4:4b:12:e3:b9:ed:0a:
4d:77:31:78:c1:4d:ea:e3:47:26:16:2c:91:c0:50:02:98:f2:
54:b9:ba:3f:91:1f:e9:e6:33:a4:56:c9:fc:aa:0b:41:db:4e:
16:7b:5a:dc:61:07:19:25:93:b5:fb:c2:ea:39:6e:44:85:ce:
43:08:a1:f7:ab:c8:b5:ef:90:34:17:87:47:43:21:a2:e6:ea:
a6:4e:93:0e:9c:9b:9d:e5:08:43:a7:00:ca:09:c5:1e:f7:a9:
7f:3f:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:34:46 2025 by rpki-client