Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: ZpKMEmT0nx0aCwh5hotW6wOw9Z5e+2SzGmrfM24i4Io=
Subject key identifier: 22:34:E0:77:A7:F0:EC:61:89:D6:FF:EF:EB:57:76:6F:88:23:95:BF
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019894B87DC88DD7315E05F28B11E5635DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0B53
Signing time: Sun 10 Aug 2025 16:02:55 +0000
Manifest this update: Sun 10 Aug 2025 16:02:55 +0000
Manifest next update: Mon 11 Aug 2025 16:02:55 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: Se85+B1/j/SbZsxAhEASZ/Q1IeN9dFdv1f2HyDwgtFM=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:7d:c8:8d:d7:31:5e:05:f2:8b:11:e5:63:5d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Aug 10 16:02:55 2025 GMT
Not After : Aug 11 16:02:55 2025 GMT
Subject: CN=2234e077a7f0ec6189d6ffefeb57766f882395bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:8b:48:0a:7e:cd:86:b7:b3:bd:52:86:a9:
cc:2c:cf:fa:18:33:6b:75:06:33:b5:9b:99:33:37:
3f:23:c2:68:14:94:8f:53:2c:73:e9:16:fa:49:ad:
58:cd:9c:20:e9:3f:2d:e3:ee:b6:63:44:f3:ed:c8:
a0:d1:69:44:86:ef:43:7c:c1:0f:93:a4:42:22:a4:
bb:7f:d0:00:70:35:09:b0:f0:f4:db:ae:69:cd:d9:
09:c7:02:14:c5:29:e6:70:e5:67:8f:0c:f6:0d:f5:
c4:b1:c8:1e:3d:c1:3e:71:97:a2:49:78:69:5a:f9:
e3:89:f6:ce:67:02:a4:26:9a:2c:37:78:02:13:e9:
f8:68:94:50:93:17:33:12:91:2c:29:6e:0c:6d:94:
8e:fa:b9:25:43:8f:86:ae:24:4d:ef:26:da:3d:6b:
5b:34:a1:c6:be:d4:36:8d:7b:95:fb:e8:f9:96:0b:
da:be:30:56:10:8e:00:e2:dc:78:5f:2f:e4:79:ae:
71:03:bd:1b:e3:62:07:c7:63:38:d4:c4:63:af:6b:
fa:bf:94:52:18:73:aa:2e:1d:9e:8c:1d:fd:65:de:
79:23:35:99:da:62:1d:43:cb:a5:94:35:7f:68:29:
3d:18:ea:0b:ab:d3:6a:fd:24:ab:b6:26:62:b2:d9:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:34:E0:77:A7:F0:EC:61:89:D6:FF:EF:EB:57:76:6F:88:23:95:BF
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:63:1f:ae:71:ec:ba:8c:f8:32:f5:35:5b:48:12:2c:0d:86:
9e:34:bc:02:a7:a2:84:85:30:d4:94:e7:6c:61:6c:6a:a2:c3:
95:b9:97:6a:c9:fa:08:3c:6e:5e:43:e7:d8:e5:d5:e4:13:6d:
18:57:be:34:f3:ac:00:18:2b:cd:4a:99:2a:06:d2:22:e6:0a:
a1:39:57:3a:ae:5c:0b:76:93:91:79:71:cd:55:a2:fd:51:ed:
f8:27:00:8e:13:0e:fb:e2:ef:93:4f:35:9a:73:0c:15:9c:22:
12:86:65:d3:b0:0e:1c:1b:72:a0:36:cc:d7:f9:37:a2:b2:84:
02:f6:30:92:66:22:2f:eb:4c:0e:f5:54:a5:c0:40:d6:d0:1b:
62:97:b3:c3:f6:c2:72:fa:f4:d3:e6:ab:31:84:73:36:8f:8a:
e0:ba:3e:36:f1:c6:fa:a0:f8:7f:55:73:47:35:c4:89:d9:13:
fd:94:9c:5f:06:54:2b:7c:c9:c6:42:63:0e:83:8b:c3:bc:a7:
f1:bd:49:8e:28:63:f1:11:1c:07:65:de:41:08:3b:fa:a1:f6:
66:c3:51:c3:58:e5:46:ee:e8:39:dc:09:00:d0:b2:5b:b5:72:
c9:78:ca:8a:ac:ad:d8:73:a0:34:7d:38:f3:9b:00:19:3d:61:
1a:0a:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:05:45 2025 by rpki-client