Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: oOC0fu4J8mj0+mOoksWVIG7i3Cp6fphJiBJnuu95idw=
Subject key identifier: A9:36:F6:93:7F:FC:FD:A6:C9:94:D4:2E:B0:1C:80:85:17:D6:9B:2A
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 01988D343BAB87D923356B926DCA9387A826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 10EC
Signing time: Sat 09 Aug 2025 05:01:07 +0000
Manifest this update: Sat 09 Aug 2025 05:01:07 +0000
Manifest next update: Sun 10 Aug 2025 05:01:07 +0000
Files and hashes: 1: TBGpVFI2lLvyIH4AY_XvgasXlhQ.roa (hash: tvFeHcNNfQ4t5ATDiY+/Dak2Xl/WexRzcSGHjDplBZM=)
2: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: DkRFGehoFPIzwrKxGeyW4hE0JKGpkxJbnVWjVo/ELSc=)
3: rbkwFcYLaEEcgP57xj9znwlpmj4.roa (hash: enJo8AXIWRTz+79R6txrBmjabj1OaXyVz0RKSwmCnM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:3b:ab:87:d9:23:35:6b:92:6d:ca:93:87:a8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Aug 9 05:01:07 2025 GMT
Not After : Aug 10 05:01:07 2025 GMT
Subject: CN=a936f6937ffcfda6c994d42eb01c808517d69b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:91:bc:fb:22:cd:d9:d9:c5:65:b9:f5:05:
e4:25:b5:bc:c2:f7:17:d1:3a:1a:82:9d:19:ca:23:
9e:ae:93:2c:f8:c1:58:bb:a4:61:35:07:43:55:d8:
85:1c:c2:4b:dd:23:78:0f:d5:55:12:5a:0e:88:80:
11:16:91:0c:b3:de:d4:82:24:c4:de:b1:ee:53:4e:
8a:5e:43:53:07:08:00:03:72:32:92:ad:28:54:e8:
a9:80:81:d9:b6:1d:ea:07:6c:a4:b9:22:bd:19:e7:
38:11:77:e7:6d:7c:c7:bc:30:03:1d:57:e9:a4:69:
80:15:92:8c:52:b5:0e:8c:b8:35:69:b7:67:ee:71:
a9:86:02:f6:03:1a:3b:aa:14:f9:53:d3:d8:de:15:
d6:03:0f:bc:66:41:43:79:e0:e0:6f:50:3b:6d:8a:
72:aa:9e:5c:97:85:58:a6:b4:b7:bf:6c:d5:8d:14:
ea:a9:40:ea:43:a1:50:ef:23:dc:27:90:15:91:a3:
c9:8d:28:86:f2:23:15:26:36:2e:89:be:0a:83:60:
49:b4:3e:3a:47:7b:4a:b8:59:c2:b9:f0:c6:ec:52:
f2:db:22:c2:84:31:8a:4b:f7:c3:c0:67:76:bb:7f:
1b:a3:65:36:c4:bb:4b:34:e8:fd:19:0e:88:f2:cf:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:F6:93:7F:FC:FD:A6:C9:94:D4:2E:B0:1C:80:85:17:D6:9B:2A
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:73:40:05:97:ba:b3:85:c5:ca:fa:49:4a:69:5d:96:f4:d5:
d6:a4:53:29:33:f6:72:32:09:98:8d:bc:89:f1:06:79:9f:68:
0b:d4:37:36:f7:af:33:9f:db:f1:aa:5b:68:99:0d:ff:6a:45:
62:c3:10:84:c9:b3:68:55:c2:05:53:6e:8d:87:59:3d:0a:b6:
f5:97:d3:4a:99:8a:67:a3:58:a2:c7:d0:0f:25:d8:42:1a:2d:
72:68:26:6f:48:cc:1e:c8:11:f6:be:d8:2d:68:13:a6:e2:50:
f0:63:0c:c1:25:6d:b5:55:0f:c9:2a:b0:a8:bb:cb:98:df:9f:
70:00:b5:12:e9:cd:ae:8f:bc:dc:2d:95:7a:7f:af:00:24:7f:
6b:28:a8:b9:67:15:3e:84:81:cc:bf:b1:ad:62:54:d1:66:0a:
cd:c9:fc:38:eb:95:6c:34:02:9c:6e:fe:b4:ff:2a:9c:4d:43:
4c:9b:6c:e8:15:71:88:77:5e:48:bc:05:6c:11:46:78:5a:1c:
f8:bf:61:25:6b:ca:a1:0a:b4:b0:15:e6:fb:59:82:58:f2:66:
dd:c2:73:a1:b1:10:f3:75:3e:13:06:2a:95:f9:c0:19:23:a7:
03:92:aa:31:0f:58:39:c0:9d:78:aa:05:65:f4:f0:9f:43:93:
e2:6c:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:56 2025 by rpki-client