Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: OrxZP2XVtl8a5owYN4ZxnIdNw4dG8kSHVVdWGA98LbA=
Subject key identifier: 9B:17:FF:E5:DE:BB:CB:2A:F0:9A:EA:7B:8D:86:16:71:57:F5:84:85
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 01992330F471D9CB13406ECC99732C92B77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0B5B
Signing time: Sun 07 Sep 2025 08:00:34 +0000
Manifest this update: Sun 07 Sep 2025 08:00:34 +0000
Manifest next update: Mon 08 Sep 2025 08:00:34 +0000
Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=)
2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: zKLskXhxCMMyn6dVw+8Uc+QjHidclMJj1Y/MhIx3bKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f4:71:d9:cb:13:40:6e:cc:99:73:2c:92:b7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Sep 7 08:00:34 2025 GMT
Not After : Sep 8 08:00:34 2025 GMT
Subject: CN=9b17ffe5debbcb2af09aea7b8d86167157f58485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:40:0c:6f:ab:cf:20:90:62:b1:d8:e5:43:
c7:34:d4:ea:af:da:b6:53:c9:e0:f4:e9:2c:fd:82:
23:a0:82:27:f6:90:c2:cf:4b:7d:4b:ac:63:f2:50:
de:bb:42:ee:3f:8c:85:aa:84:00:e5:e1:31:cd:aa:
27:4e:a6:f7:4d:0c:f1:11:42:cc:05:85:9c:9e:d8:
84:f5:f5:85:8b:90:80:a5:c6:5f:0c:02:8d:d9:64:
4f:2b:27:cc:c7:8f:00:86:05:47:19:55:67:f6:a0:
38:d1:c3:b0:27:54:3c:e5:54:7b:ea:b0:de:a5:72:
7f:7c:ac:cd:fb:42:bc:cb:71:cd:88:2a:e0:9a:51:
df:41:4d:f8:37:eb:8f:84:3d:79:df:31:6d:be:7c:
13:d1:ff:e1:3b:ae:e5:b6:f8:16:64:04:1d:ab:9e:
32:0e:72:b0:9c:1b:e1:4d:40:70:a0:ab:82:f0:49:
48:4d:94:06:2a:24:27:79:2c:20:a2:27:89:3c:d6:
73:3c:af:2f:be:80:3c:6f:59:04:83:9d:8e:20:8f:
6b:42:dc:14:c1:2e:b5:24:7b:0d:8a:7c:0d:85:fd:
bd:5b:ec:aa:5d:82:f3:83:00:46:e2:d1:4c:a0:a1:
af:1a:3a:37:57:43:b6:19:5e:a7:81:d6:49:d8:6a:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:17:FF:E5:DE:BB:CB:2A:F0:9A:EA:7B:8D:86:16:71:57:F5:84:85
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:da:37:97:3e:92:4c:fa:23:db:34:ea:ea:5a:5a:56:32:1d:
d2:14:a7:28:92:4b:07:b2:c5:97:4c:6b:4e:0f:1d:06:eb:d2:
20:d0:63:9d:72:8c:d3:ff:fc:c0:2c:22:9f:d4:02:83:b6:62:
9b:f1:d1:e6:42:44:af:b5:33:17:72:a8:b0:a8:5e:1a:3b:f7:
bf:bc:b5:e3:8a:4b:e9:01:06:3c:ee:eb:2f:ec:d5:fa:f0:3d:
ce:28:ed:dd:45:f3:f8:9c:3b:43:79:37:e7:b7:2e:1e:db:ad:
28:ff:46:21:34:39:b0:12:cc:dc:92:d8:d8:9d:5b:70:c7:d8:
16:6c:03:b8:be:ae:a9:b0:fa:36:8f:11:80:7e:f8:86:8b:bc:
e2:3a:8c:af:38:b8:50:76:78:52:4e:df:6b:b9:21:21:f2:60:
34:e5:a9:50:1e:62:45:0e:27:ae:a3:57:3c:68:e8:08:41:73:
98:9a:2a:b8:84:7a:a5:6d:1c:55:0c:49:d3:0f:fc:09:4f:f4:
ec:1f:bd:4f:ec:b9:18:a8:e6:17:1e:7f:3e:a7:33:8e:8b:cd:
81:0e:40:ac:8d:82:35:f1:9f:a8:16:35:d2:6e:d0:6f:f2:da:
9e:c7:b8:c1:cc:17:5a:e5:e3:c6:94:08:81:d8:f3:cd:de:96:
32:a2:b1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:57 2025 by rpki-client