Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File: aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier: UtQQL1dGJ578/6P5/tCz6/FaId8e2gd9LDHVkr9G16c=
Subject key identifier: 7B:B3:16:11:90:2B:75:FB:E9:BA:39:AE:3A:2F:63:21:21:36:EF:EE
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 019873E26613E2D263F292503A1C7A3FCE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number: 0678
Signing time: Mon 04 Aug 2025 07:01:13 +0000
Manifest this update: Mon 04 Aug 2025 07:01:13 +0000
Manifest next update: Tue 05 Aug 2025 07:01:13 +0000
Files and hashes: 1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=)
2: VRgzvsIGyVGSMvCfEEXMwDue8MA.roa (hash: PsTu4TZ4HzWVeuIcWadKHbXlWOA/8zFocM48RCXa9/k=)
3: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: AfXY7Xurtr+3g7TWNcuox1iz6ii/wLiVou+E/jyilUY=)
4: jjkZ2yb-jO_dwKLdx8H317IXScQ.roa (hash: HCz04W3HLqaOC0rvZdH98CWQlK6DEnW7DscRc2ODf9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:66:13:e2:d2:63:f2:92:50:3a:1c:7a:3f:ce:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Aug 4 07:01:13 2025 GMT
Not After : Aug 5 07:01:13 2025 GMT
Subject: CN=7bb31611902b75fbe9ba39ae3a2f63212136efee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:1c:e3:cb:a2:58:9c:ac:c8:3b:22:09:43:
7f:f5:6f:c1:f3:a9:25:05:f7:e9:a1:73:38:68:c6:
db:c5:84:37:71:fe:42:3f:ea:56:0a:70:9c:02:d8:
13:ce:c9:23:85:98:4c:d0:36:4c:43:2b:79:fb:fa:
43:ad:c5:6f:d6:38:09:c8:1c:d1:0b:53:c0:bb:75:
9f:3f:46:27:59:42:d1:6a:97:d6:d8:f1:ed:05:06:
56:c2:23:a1:52:75:b7:c2:b1:bb:34:93:39:bc:fd:
7d:77:8d:18:8c:73:77:21:a1:a3:d9:dd:9a:5d:39:
7d:e3:a5:5c:47:a3:63:2b:70:91:31:98:47:a2:ce:
5e:e8:b5:79:59:c8:f3:08:f2:44:5f:fe:56:b4:63:
5d:ee:b7:40:2e:de:51:73:d6:d0:75:77:bb:a5:69:
bc:3c:a1:07:7d:ac:a0:ef:1e:22:ef:d5:f5:a8:bf:
cd:0c:e0:0e:91:6b:47:95:9e:a2:e4:5e:49:c1:4f:
6a:d0:7c:d8:ff:06:e3:45:53:d2:51:04:60:cb:72:
30:c1:9c:ba:3a:18:7c:20:fa:1c:16:e2:dc:91:4f:
47:5a:9f:e8:88:3c:72:d9:3c:15:0e:ad:03:42:da:
f1:c5:42:11:e0:bc:7f:b8:78:4a:11:58:20:b1:08:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B3:16:11:90:2B:75:FB:E9:BA:39:AE:3A:2F:63:21:21:36:EF:EE
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:56:ba:93:dc:b0:54:3d:eb:73:72:ac:c7:1c:59:2d:a3:0f:
ff:1b:81:d8:95:81:8d:00:88:4d:70:20:e6:c8:be:a0:5e:8c:
18:6c:41:11:d0:fc:27:fe:44:0d:be:a1:7b:0f:9d:6d:c1:da:
f4:07:40:5d:ad:a1:83:e5:a1:0a:82:57:f0:c2:28:b5:b4:7c:
a4:9e:b5:85:12:41:ce:86:85:75:7e:cc:a5:ae:f0:c1:3c:0c:
51:eb:52:cf:23:13:ea:6e:8f:d8:8a:7f:28:18:82:e2:9a:fa:
bd:2b:07:ad:38:4f:da:08:c6:47:01:98:f6:98:d4:ab:f6:b9:
7a:11:d6:86:17:78:df:fd:93:a4:98:16:0d:14:83:69:6b:54:
a5:1f:74:e6:81:6d:62:eb:ed:67:53:cb:b5:0c:5b:35:e3:8d:
78:3a:f6:c5:ec:0f:45:29:60:62:7c:f0:b5:1f:04:40:f9:bf:
5a:72:85:86:2e:7a:f9:bb:f2:8a:78:a2:ee:ea:90:33:7f:b8:
ca:1f:f3:76:ab:76:2c:14:a0:d5:c5:9c:95:b7:26:26:52:1b:
d7:cd:96:07:bd:67:d7:13:71:66:1b:58:30:04:33:ba:38:88:
80:a1:6e:c7:c3:4d:8c:76:42:a9:4c:25:4d:ac:9f:0a:f7:9c:
b6:94:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:32 2025 by rpki-client