Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier: crqNlDVDbxxhRAl7aX30otzj5kVIUVHejTqfyhIHYXc=
Subject key identifier: E9:DC:60:1B:85:5E:87:43:DF:60:06:0D:78:19:AB:D7:ED:C0:93:B5
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial: 01987418D47F3F276AECF19B4E5C9219E4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:00:40 +0000
Manifest this update: Mon 04 Aug 2025 08:00:40 +0000
Manifest next update: Tue 05 Aug 2025 08:00:40 +0000
Files and hashes: 1: 2sc4xknukJW-o5vl5Fz96F0QucA.roa (hash: MbYv6i++8VmdaYHm6adLazhX2ff10i5IN4qgNm5FoPs=)
2: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: H4wVk+3i9ZHKmIG74Z7ky2inTDedS73buGJTO0TKQz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:d4:7f:3f:27:6a:ec:f1:9b:4e:5c:92:19:e4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
Validity
Not Before: Aug 4 08:00:40 2025 GMT
Not After : Aug 5 08:00:40 2025 GMT
Subject: CN=e9dc601b855e8743df60060d7819abd7edc093b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:58:fd:4e:8c:85:56:7b:1f:08:6f:3b:92:
31:8b:ec:96:37:fe:44:a9:3b:22:d5:fd:fe:3c:d0:
0e:a1:34:98:41:e3:9b:b2:91:19:df:88:cf:5f:5e:
79:9c:30:76:6d:fd:25:c9:fd:5d:51:d3:17:14:56:
9f:42:62:5c:e6:b0:f0:65:02:cb:09:1f:41:92:5f:
87:ac:c5:a2:c8:31:cb:0a:37:9a:cf:e4:9d:7c:97:
8e:ba:f6:d7:f1:2a:bd:a0:f4:91:94:1d:83:5b:45:
81:e9:96:d5:ff:f1:c0:38:b9:8e:ad:17:a6:ea:7f:
60:9d:d9:e7:1b:f6:78:f7:2b:16:11:54:84:4d:ba:
46:75:27:ee:bc:c2:97:51:77:6d:48:01:bd:3a:dd:
33:e2:05:e0:b5:1b:77:64:a6:07:43:e4:27:51:ac:
9b:92:6b:81:97:72:fd:ca:5b:b7:03:f8:04:06:ad:
1b:27:fe:f5:bd:5a:58:ac:76:5c:9c:a1:ef:27:cc:
56:ef:99:5f:d7:93:0b:26:51:5e:35:73:ce:c0:63:
e9:55:84:ab:e9:e6:67:0e:ac:5e:7b:25:43:d7:6d:
20:88:08:0b:73:c3:ee:58:90:98:85:c7:14:20:f1:
64:12:dc:46:ef:fb:83:ec:f6:b3:8b:ea:66:d9:89:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DC:60:1B:85:5E:87:43:DF:60:06:0D:78:19:AB:D7:ED:C0:93:B5
X509v3 Authority Key Identifier:
keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7a:b7:0d:fc:86:3c:00:5e:e8:f8:72:30:7c:94:ed:88:e7:
dc:93:8d:c6:cc:1d:1c:20:01:9b:52:76:7e:4b:c1:aa:06:a6:
31:88:48:73:8d:97:72:0a:49:d1:03:67:e2:bc:21:79:c5:e2:
4e:bb:ca:86:36:d7:69:1c:df:8c:7b:e0:a5:48:8a:70:75:a5:
07:91:2d:e9:79:f6:a4:82:cd:5c:83:a6:b5:4f:e9:36:6f:6b:
19:7e:26:28:55:f9:a0:4f:95:02:54:ea:a9:37:b2:67:bb:a8:
21:a0:2d:e7:4e:7a:db:43:4b:ff:0d:b2:e7:6d:1e:02:93:47:
32:7c:55:19:13:3a:65:d4:22:c8:76:e6:6d:6f:4e:81:03:c6:
4f:89:61:83:aa:54:51:89:eb:7f:9e:02:d5:30:d4:0d:14:b8:
99:64:47:aa:e2:84:30:b3:8d:29:10:0a:f7:c9:44:4e:8f:fd:
38:99:e0:91:8e:4c:32:c9:bc:e6:84:aa:93:d9:6f:4f:43:7a:
7b:87:dd:bc:8a:ff:af:cc:e6:97:ab:22:2f:8d:20:33:7c:39:
3d:b5:14:35:f8:8f:40:d9:35:25:4f:8c:f1:71:e4:3c:1f:ab:
a2:8c:63:cc:51:f7:0a:63:43:bc:42:96:bb:d6:a9:c0:c0:75:
74:5d:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:13 2025 by rpki-client