Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
File: aaKML4THXo0DiGlDVRUt0rcx8kk.mft (raw, json)
Hash identifier: MQ1+LM8N+G+ZnoIUEMiqmRp9Lqd+wP0NbcDtJIf9UJA=
Subject key identifier: 93:CF:11:61:B3:7F:62:34:67:AE:62:FC:5A:84:81:A6:AD:55:8A:2E
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 0198733D650D509EB9A1DC2F55D5040FD753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 04:01:00 +0000
Manifest this update: Mon 04 Aug 2025 04:01:00 +0000
Manifest next update: Tue 05 Aug 2025 04:01:00 +0000
Files and hashes: 1: WdYc6wSLVkfUe7irxf4uyXxEIsM.roa (hash: dpYwLA3RR3eH0lZ7/JtVVQoaXF1Y2bKy7GfyH86APlE=)
2: aaKML4THXo0DiGlDVRUt0rcx8kk.crl (hash: VSqU3edi/SvXH54+fwIQPns0o244eSFXhF2JwOwWFpk=)
3: tUMiGCgmsKV0vxqojlEA4oJxpRM.roa (hash: UydNeJbpnz/tc0fGV+RmvBf+BwmLoVjaXgDPrRLbpVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:65:0d:50:9e:b9:a1:dc:2f:55:d5:04:0f:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Aug 4 04:01:00 2025 GMT
Not After : Aug 5 04:01:00 2025 GMT
Subject: CN=93cf1161b37f623467ae62fc5a8481a6ad558a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:56:1c:ab:47:2d:ca:47:07:d9:9b:6d:98:
fb:ab:14:bf:f6:a1:f0:06:97:7e:80:a5:1c:55:57:
94:32:99:ed:e3:51:d6:43:cf:b9:90:4f:f0:26:4c:
7c:ba:60:76:d7:bb:a1:ed:0e:e4:4c:97:77:97:46:
f5:bc:06:46:a9:97:20:65:09:2a:b2:be:01:cd:64:
45:81:c8:09:06:2b:42:8c:f8:4b:b4:09:70:60:26:
97:57:01:3e:e7:4a:92:20:4c:8b:79:0f:5c:80:15:
b3:a3:17:e8:66:d7:c8:31:73:b0:6b:b4:63:00:8b:
5f:27:46:9b:4a:2f:fa:06:77:24:ff:bd:f0:d9:06:
f4:5e:a6:08:56:7e:e6:69:8a:dc:a1:2d:9b:fc:ed:
84:d6:83:e2:88:b1:ef:37:e6:38:e9:3d:dc:9f:dc:
b8:5a:68:ee:f1:f3:3e:b0:9a:c2:55:7d:55:3f:6a:
cc:7f:47:b5:79:85:0d:89:01:85:32:4f:4e:40:8b:
4b:8a:3d:38:34:21:22:23:dc:2d:dd:dc:1c:2f:b4:
74:3d:b2:71:1d:f4:42:be:2c:77:50:62:c9:f6:3a:
d1:8d:ec:92:47:1c:0d:1a:ea:ff:c9:6e:1a:cb:42:
3f:23:74:a0:53:98:cc:26:8e:84:c6:2e:3b:9e:76:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CF:11:61:B3:7F:62:34:67:AE:62:FC:5A:84:81:A6:AD:55:8A:2E
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:77:64:7e:c3:9f:82:f0:a2:cb:20:76:51:62:be:f2:23:de:
16:91:03:d8:70:96:ad:fb:8b:67:b3:43:3c:34:f4:b5:d1:d2:
1f:40:8f:60:d5:31:95:e5:73:a5:53:e6:13:15:d2:fb:62:55:
21:6e:f8:b9:3e:1b:8a:7f:de:1c:eb:20:c7:b5:02:ca:ea:fc:
99:42:6b:3d:92:c9:37:4c:e3:47:48:d3:e6:c5:65:e9:f7:c1:
23:67:f0:c4:c8:6d:da:0e:71:54:05:3c:2d:14:5d:e4:69:17:
7b:ff:64:90:bf:de:2d:29:be:28:4c:75:43:5a:40:48:e8:97:
4a:e0:2f:a8:0b:a0:14:9e:a5:bb:13:8d:b4:69:31:e9:44:7c:
86:55:b7:0f:a8:c6:ea:86:29:e3:06:d5:95:00:6b:7a:93:2e:
06:82:55:af:a4:0b:20:f3:f2:31:dc:8b:37:d1:b2:49:4b:a2:
8a:8e:00:3f:73:ed:16:ec:68:ee:04:6f:9b:f5:b6:4b:ef:18:
78:dc:38:58:e4:8f:0c:f6:fc:6a:54:df:11:d7:9b:a7:27:d3:
7f:b5:de:b7:a6:0e:04:f6:5c:9a:fb:ea:cd:74:3e:ff:6b:8c:
f8:5e:9f:fd:d4:83:47:54:16:bc:23:50:d6:44:6d:0c:ad:a2:
8a:68:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:47 2025 by rpki-client