Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: Ho7lmeXsfxhrZkGGVZTUzkUQnR75Fg0Ob3SKsrINiQM=
Subject key identifier: 71:3E:CE:9F:07:1C:B3:16:9C:6C:B0:A8:4C:23:74:00:58:4A:AE:BE
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 019896A4E8915DCD117ACBF4C01CC56DBE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 0309
Signing time: Mon 11 Aug 2025 01:00:46 +0000
Manifest this update: Mon 11 Aug 2025 01:00:46 +0000
Manifest next update: Tue 12 Aug 2025 01:00:46 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: OHsFX++MRjihU99vOJipKrxhF5w537K4F06Fn8/YuiU=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:e8:91:5d:cd:11:7a:cb:f4:c0:1c:c5:6d:be:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Aug 11 01:00:46 2025 GMT
Not After : Aug 12 01:00:46 2025 GMT
Subject: CN=713ece9f071cb3169c6cb0a84c237400584aaebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ee:df:01:46:ca:76:98:7d:36:66:80:94:bc:
67:9c:53:58:83:ba:61:ae:07:19:cc:12:14:2e:85:
98:ed:cb:a7:2b:47:0e:49:55:b4:0a:24:38:5c:a1:
6c:b2:30:fb:45:ef:b0:63:48:4b:6f:dc:9e:4f:0d:
09:9e:55:3a:46:82:27:c3:0d:6d:b2:eb:bf:74:6b:
73:c5:2f:39:29:e9:a5:7f:6b:85:2f:c4:ea:17:53:
14:4e:77:2c:3e:41:8c:f9:5b:71:be:c9:18:ef:45:
52:79:b5:41:b5:d4:15:1b:95:27:09:de:dd:7b:ea:
56:f6:06:73:4e:65:fc:7e:4a:2b:02:72:bd:61:73:
61:c1:12:bd:b5:b9:cd:36:f3:d4:fe:20:6e:06:85:
88:5b:97:41:7e:97:f8:c1:9d:e6:30:d7:c7:b1:4d:
c8:90:46:c5:fd:f4:50:0a:a4:81:f4:85:62:77:10:
8d:03:1f:69:67:10:e0:2d:ea:ba:0a:5d:e5:e3:de:
54:54:ef:79:01:cd:61:42:3f:e3:28:34:3c:1a:4c:
f5:23:21:49:57:85:62:4d:d0:b3:21:ab:8d:d1:7e:
01:28:e8:98:d5:f5:4e:f9:5d:50:17:e8:5e:41:4f:
2d:ac:ba:7a:d3:0a:58:63:48:22:bf:e2:f5:95:06:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3E:CE:9F:07:1C:B3:16:9C:6C:B0:A8:4C:23:74:00:58:4A:AE:BE
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3a:21:2e:8d:6e:00:09:ef:09:d8:bc:e1:3b:59:80:69:ab:
12:25:5c:7a:d2:51:e0:ee:59:ac:ed:47:89:e0:3a:e1:06:f7:
6b:e6:cc:d4:49:b5:28:c2:8a:f2:a9:ec:42:d6:83:f2:8f:e0:
b0:1a:14:89:dc:a1:f8:12:57:d1:f0:29:23:47:7a:31:a0:bc:
66:98:05:09:99:f6:24:a6:fe:aa:70:64:fb:66:1e:97:b6:cc:
85:9d:43:af:2d:30:5b:bd:ab:01:40:03:40:03:e0:81:18:49:
06:90:24:f1:93:9d:1e:c8:90:c4:04:72:10:b9:9b:01:36:36:
e7:90:05:43:52:c7:fe:f4:44:37:26:5b:30:37:72:37:82:4f:
18:88:50:8c:bb:47:ed:29:ea:64:0c:05:ab:1e:ab:d4:41:2f:
4a:b8:19:f1:5a:31:87:38:4b:e4:3a:2b:d2:5d:53:45:7e:d8:
cb:c1:3e:59:c8:aa:6d:aa:15:db:c7:9b:2c:a7:45:6d:0b:dc:
ad:61:95:dd:cb:22:8a:fa:cd:c4:20:10:61:05:06:6e:0b:d9:
d1:ba:03:ef:af:a8:87:ed:f8:10:cb:b1:99:40:d5:d0:09:1c:
cb:2c:15:d5:3d:1b:42:c5:fa:77:9a:86:88:eb:0e:d9:94:e1:
6d:6c:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:20 2025 by rpki-client