Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File: aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier: SEcv0v1IqkWkQoEdAx2XngR542xqsXByYqKQtzMP9Z8=
Subject key identifier: FD:1F:2D:67:61:F0:E3:F4:E9:C7:86:56:FA:80:14:0A:CA:14:07:20
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 01987450B033CF28C1D685D6D00B4E34DD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 09:01:41 +0000
Manifest this update: Mon 04 Aug 2025 09:01:41 +0000
Manifest next update: Tue 05 Aug 2025 09:01:41 +0000
Files and hashes: 1: 6c4mStZuLFdhZBFsXfkgnUT06kQ.roa (hash: 9X0qingJMgYTrqsJkiVxYQdXm9VKJ3coL7dPpBcYOeI=)
2: Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa (hash: Dai1lG17fGD9BnTUUlUvQILwXK5E8pX/ztfvO8UR/Sc=)
3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: 2Rl3CX/xCHJ6BbxbPZ+S9B7o2fH9hJcAN2bXIkHG1OU=)
4: ygPca0O99w3Q4m6yQX8TO0Whs5s.roa (hash: qvcmTDWYJNgYWiCmf5F1FBjGQvGT5OVUplX4UvYYEFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:b0:33:cf:28:c1:d6:85:d6:d0:0b:4e:34:dd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Aug 4 09:01:41 2025 GMT
Not After : Aug 5 09:01:41 2025 GMT
Subject: CN=fd1f2d6761f0e3f4e9c78656fa80140aca140720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:a3:08:26:ca:fd:50:95:b3:39:5a:e5:42:
15:38:48:b2:07:59:d2:54:0a:db:fe:65:e1:69:ff:
3d:05:9b:28:52:e2:0c:75:74:03:18:e0:2d:5e:cd:
9a:73:78:1c:12:d4:b4:5d:f9:b6:a0:3d:14:4d:3f:
77:9b:20:4a:6c:75:44:ed:96:04:77:92:93:bf:47:
73:fc:c0:cf:04:f7:4e:d1:ca:e2:f8:06:2e:a0:ad:
eb:8e:3d:28:6c:77:7a:66:6d:91:f4:fd:dc:b8:ef:
de:e6:ff:94:1d:2b:b9:77:07:59:de:49:13:71:5c:
34:c0:cb:1e:11:73:d2:55:95:8a:3e:75:40:92:7e:
77:be:c4:41:87:8f:5c:ed:f4:78:eb:bc:5d:c2:f5:
8a:21:5e:e3:71:27:66:8d:83:82:19:4e:fd:ec:fc:
f2:71:9e:a5:05:15:61:6e:79:d6:4e:fd:2f:b5:a9:
0d:30:f7:b7:c1:c1:97:9f:f9:cc:f3:a6:53:f9:ff:
92:1a:13:ce:7a:a8:21:f0:3f:38:bd:f4:a4:90:2d:
8f:5c:d4:63:4f:ad:9c:a8:05:5c:bf:58:12:f0:f4:
f0:79:47:a9:48:92:8c:03:67:fc:3a:73:52:85:4d:
47:dd:7e:08:84:12:25:f1:5d:0d:4c:8c:23:d0:9c:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:2D:67:61:F0:E3:F4:E9:C7:86:56:FA:80:14:0A:CA:14:07:20
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2f:d2:1b:f6:f3:7c:31:67:44:5a:c9:4f:6d:ae:44:5d:d1:
63:14:a1:c0:2d:ff:c6:bc:19:b7:d8:7a:97:78:44:52:b7:4b:
b8:e4:1a:2e:8c:e8:3e:04:3f:49:cf:60:3b:69:2f:98:a0:1b:
c5:59:38:31:37:ab:da:2e:77:88:04:ba:40:54:68:7b:a6:a5:
55:1f:7b:4c:8b:1a:8b:67:8d:34:61:5a:e0:9d:af:ce:90:df:
c0:c6:d6:6b:39:a0:53:42:67:21:a9:4b:7e:11:a8:e6:fd:8e:
ac:ee:00:50:c1:d6:5e:63:43:d9:26:a4:44:39:88:08:57:18:
b0:8a:56:5e:09:62:40:f1:f4:fa:56:cd:a6:51:24:97:30:4b:
83:30:1d:8c:83:24:d5:99:97:8b:57:8c:36:62:31:48:d1:c1:
cb:cb:25:bd:aa:ae:11:39:5e:2a:86:24:2a:22:3e:37:dc:a0:
aa:e6:89:74:22:e8:e8:94:86:66:15:86:49:e3:cb:15:7b:53:
b7:ab:e5:a8:71:82:e0:6e:fa:33:0f:1d:2d:16:96:92:51:6f:
4a:42:0e:5c:ca:ab:9c:cd:3d:8d:18:dd:2b:51:03:88:59:11:
99:41:91:15:ab:9f:50:02:6b:95:54:a1:0e:37:8e:04:28:96:
61:38:46:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:04 2025 by rpki-client