Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: oLx1TTXmIGxRgEeeqb73lOuhSxgulBor9IhgVWEi1kk=
Subject key identifier: D2:24:C0:0F:38:C0:D9:A4:80:64:02:1A:3A:78:0A:65:03:C5:6D:EE
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 01987C09CD2ABC4F1F331147C0724F45B8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0779
Signing time: Tue 05 Aug 2025 21:01:13 +0000
Manifest this update: Tue 05 Aug 2025 21:01:13 +0000
Manifest next update: Wed 06 Aug 2025 21:01:13 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: Hzjw0wsn6sxK3TcQpywNlgESg2UNTdS/zdVn1eQQYV0=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:cd:2a:bc:4f:1f:33:11:47:c0:72:4f:45:b8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Aug 5 21:01:13 2025 GMT
Not After : Aug 6 21:01:13 2025 GMT
Subject: CN=d224c00f38c0d9a48064021a3a780a6503c56dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:3e:e9:f5:58:ef:f8:bd:ce:3f:f2:6a:22:
d8:9e:0d:5e:73:ff:f4:23:e5:3a:d9:b0:ea:a6:19:
4c:ed:99:24:7c:5d:50:7f:4f:ab:5a:80:9b:65:f1:
ac:e4:50:ae:93:f5:1a:75:14:be:c4:07:3e:59:19:
69:92:98:72:81:15:11:b2:a7:88:47:7d:00:a6:f7:
b1:24:2c:91:b8:5a:cc:af:0f:8b:31:b7:10:0b:b0:
85:df:f8:24:3b:ca:fb:fe:93:51:1d:3e:91:d3:15:
88:8f:6c:39:c7:52:dc:6c:4d:a5:d3:5e:fc:9d:55:
c1:4b:dd:1f:ea:23:3d:2a:43:d7:ea:38:95:05:01:
01:fe:57:46:c1:f5:a3:b5:6c:22:b1:6c:94:31:ae:
de:38:27:07:4a:cd:ce:4d:05:e6:78:15:df:d7:71:
ba:6e:cc:cd:db:0b:52:53:32:f9:a6:4c:5d:1c:3e:
34:64:92:8a:25:ec:6f:93:c3:cc:c0:94:fa:21:4a:
4d:a7:84:4e:eb:b2:38:74:ed:6d:d0:7e:59:73:be:
7f:99:de:64:f1:c7:a3:ee:91:7a:0e:64:69:7c:ce:
fa:04:70:fe:7a:14:db:c8:98:58:de:0c:3b:a8:f3:
31:57:0d:c0:79:09:52:5a:d4:9d:d6:3a:a6:d4:7e:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:C0:0F:38:C0:D9:A4:80:64:02:1A:3A:78:0A:65:03:C5:6D:EE
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:34:30:1d:09:56:9b:ea:9f:aa:5b:85:26:48:e0:14:ce:4f:
07:41:39:8e:b1:d8:a1:dd:d8:0f:14:52:2e:93:2c:3a:ff:58:
0b:d6:cd:b9:3c:19:eb:88:a3:96:3a:16:bf:7d:24:3f:f8:06:
39:07:ad:aa:4d:88:9b:1d:37:bb:1f:43:ea:54:b7:e1:5d:56:
25:46:83:de:ff:38:b8:97:82:0d:0a:d9:06:89:07:c5:66:a3:
5f:04:3b:7b:05:c1:eb:9b:b9:8f:ed:da:cd:d1:89:e6:59:51:
50:2d:73:47:d9:e7:1e:1e:6f:82:54:37:a4:92:20:6f:2b:cf:
61:b6:f5:68:a9:de:36:40:bb:34:e7:41:3b:fd:ac:51:05:0d:
91:11:62:c6:b2:9f:5a:f5:69:a4:fc:09:a5:c3:07:4b:73:3f:
b8:5b:12:ec:d5:05:fe:58:8f:8a:e7:9f:ef:f6:c7:d1:88:48:
25:d7:c4:4e:f7:1f:d8:6e:4a:d6:f7:03:df:20:de:c3:a7:78:
56:d9:1d:c6:cf:c7:83:c6:18:52:ff:8d:b0:c4:0b:00:d4:3d:
81:e1:70:ae:79:96:6d:2e:8f:96:28:e5:db:a8:6b:98:39:10:
58:2e:15:06:24:11:7e:36:05:97:93:f1:4b:44:33:13:92:93:
44:95:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:36 2025 by rpki-client