Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier: h5uoHPRPXTi0PcEOENmtkwX7ZNamxGJqPcMfenSZ0Pw=
Subject key identifier: 20:0A:58:C5:06:7B:28:7A:A9:3C:70:AC:40:72:99:BF:DD:FD:BF:52
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial: 0198820B9C8387C4BEB39587C4A1BC6351CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number: 0312
Signing time: Thu 07 Aug 2025 01:00:55 +0000
Manifest this update: Thu 07 Aug 2025 01:00:55 +0000
Manifest next update: Fri 08 Aug 2025 01:00:55 +0000
Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: pBp7erkkrgzuYZruKdeXSw03OMx3mSZY4IBUL2kiB34=)
2: bFwnlPb3JkTM0-_fQyjycPLTOXg.roa (hash: T3+8uVMg57oldqwBxpb7FIVcJ3Kl6M0sjRANKp19Uzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:9c:83:87:c4:be:b3:95:87:c4:a1:bc:63:51:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Validity
Not Before: Aug 7 01:00:55 2025 GMT
Not After : Aug 8 01:00:55 2025 GMT
Subject: CN=200a58c5067b287aa93c70ac407299bfddfdbf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:fa:25:6f:c4:02:ce:00:f1:bc:ea:56:01:
d2:0f:f2:1c:86:f9:51:6e:94:fa:93:78:83:00:35:
b6:64:97:c2:79:8e:69:22:21:c1:69:19:3f:c6:38:
6b:e3:cf:4b:9d:21:60:bb:c0:d9:14:e3:9a:dd:2f:
0a:49:62:66:5d:50:5a:3e:75:39:e0:ff:04:48:54:
a2:a0:d5:67:62:59:bf:e7:ff:c4:3c:cc:ee:bf:c6:
bc:be:1b:03:1e:a1:90:e5:ed:3a:b8:a2:cc:13:dd:
34:a7:64:7d:81:a8:41:26:e6:af:c0:36:9c:b1:e7:
40:5e:76:a2:37:dc:c1:fc:5d:49:c4:b9:9e:30:23:
39:1b:6b:24:66:3f:8f:18:63:e1:ca:69:88:89:a6:
9a:a7:70:60:5d:bf:4d:28:16:0e:17:3e:3e:59:4e:
bd:eb:50:e2:8a:72:fe:cb:d3:a7:2c:30:01:52:a0:
aa:d3:86:69:3c:24:63:2a:4b:3d:7d:f6:cf:de:3b:
12:2c:00:ea:5e:a0:6d:a6:1c:13:4f:21:e3:49:18:
02:67:08:d4:8c:ca:d9:ee:d5:71:9e:24:b7:6b:6f:
f7:14:0b:71:91:a2:f9:d6:f2:2e:ad:a4:06:0b:90:
98:03:3a:c3:73:3b:1f:98:2f:50:3c:7f:59:e9:31:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:58:C5:06:7B:28:7A:A9:3C:70:AC:40:72:99:BF:DD:FD:BF:52
X509v3 Authority Key Identifier:
keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:80:35:a3:1f:21:ff:bb:c6:00:bf:8f:90:cd:d5:df:73:f9:
66:16:61:9a:0b:45:f5:d0:df:c1:7d:a6:8e:89:c6:9e:42:11:
82:21:4d:fe:7d:1e:1e:a7:93:a9:fe:80:8f:6c:95:a8:76:c1:
d2:73:e3:47:28:e5:71:33:a1:ca:95:ed:3e:54:66:14:82:12:
1a:46:05:f9:b2:8a:5d:57:a6:97:ff:60:92:ee:6a:9a:7a:3b:
4c:fd:62:49:5f:f7:bf:dc:0a:b6:14:99:e9:4c:2c:e6:15:3e:
c4:cc:1b:a7:40:99:66:74:3a:a3:83:03:3b:d9:64:de:4a:35:
9e:b3:77:df:d5:55:a5:40:ce:8a:89:f0:1c:3f:1b:b4:4e:74:
2d:d9:15:6c:5e:78:67:76:d9:ec:c1:73:00:18:9e:1e:0e:4a:
73:8a:3b:6c:03:7d:79:d7:6e:28:be:57:3b:84:33:95:1c:31:
cb:71:9a:9b:f0:6a:b3:57:d5:5a:af:15:d4:db:d6:e0:94:ac:
5b:ab:f9:d9:64:c5:78:b2:62:34:d7:53:85:87:b3:14:0e:b1:
b9:e0:22:36:66:ff:43:b6:df:34:b7:8d:b1:8f:22:3b:98:a5:
2e:ce:90:0c:8d:b8:31:c4:20:92:4f:74:6f:2e:48:be:70:ba:
f0:fc:f7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:05:34 2025 by rpki-client