Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: DCosxyyAJpRirpXt+oOQuXYZjMeCbVnsZNW2HC7iI0g=
Subject key identifier: B1:87:D4:B9:8F:D7:BB:44:27:7E:6C:50:DE:41:A1:35:46:9D:D4:9D
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 0198752C111533582BBDF2711135EC5A5280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 0E07
Signing time: Mon 04 Aug 2025 13:01:18 +0000
Manifest this update: Mon 04 Aug 2025 13:01:18 +0000
Manifest next update: Tue 05 Aug 2025 13:01:18 +0000
Files and hashes: 1: TPjf70pa6qBZmpfYB0iX9CcL4Y4.roa (hash: swAbvLbVBmlLATlL/hX7o87L+INYtKkOcONzc8lraTI=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: AtGGKAt+XVrgp6yAQ01QHjEFoTpYC7Geym7RLFqhLOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:11:15:33:58:2b:bd:f2:71:11:35:ec:5a:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Aug 4 13:01:18 2025 GMT
Not After : Aug 5 13:01:18 2025 GMT
Subject: CN=b187d4b98fd7bb44277e6c50de41a135469dd49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:58:2a:96:f4:b3:d9:3f:6c:3e:4b:57:15:
fb:17:8d:9b:14:66:e9:f0:31:69:b8:91:74:45:e1:
f6:73:ef:ff:a8:2a:81:f8:4a:fd:6e:47:3f:f8:f4:
64:09:ab:2f:52:da:0e:e1:bd:8e:a2:99:34:48:df:
4a:5a:4b:f7:8c:b4:64:70:97:10:9d:54:41:df:9a:
ee:65:ee:42:7f:54:db:15:5d:19:1a:90:e6:59:35:
13:2a:38:4d:eb:4e:28:bb:67:05:fe:f3:5a:c9:e1:
36:27:85:c6:95:b8:71:9c:22:ab:ec:bc:9d:4c:35:
96:b1:ed:25:76:9c:bc:dc:9e:29:3a:fc:79:50:08:
1f:bf:a3:ad:2b:d2:f2:67:c9:fb:97:f7:3c:3d:f5:
3c:91:a2:c2:43:86:29:a2:0e:94:a9:79:de:e6:f4:
40:2a:1f:ea:0d:21:bb:ff:3d:4a:52:53:44:02:8b:
18:01:3a:6d:8b:7b:ba:58:77:84:de:8b:53:dd:87:
4c:74:a4:82:f2:55:cd:c6:00:72:5b:bd:df:6d:86:
f6:e5:bf:65:55:cc:5e:b9:47:a8:69:f5:05:f1:0b:
cd:97:07:30:fe:f8:53:94:4a:d6:db:c9:47:fa:c2:
81:b1:9b:d6:c8:d5:c9:fa:59:91:b9:32:fc:56:c6:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:D4:B9:8F:D7:BB:44:27:7E:6C:50:DE:41:A1:35:46:9D:D4:9D
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a6:09:32:63:62:04:a3:bf:08:e2:a3:10:e3:2a:7b:48:8b:
12:d6:2b:f8:b2:7a:db:1c:ae:32:ff:b8:f6:30:29:03:59:c3:
1f:64:38:1e:0c:71:57:04:ff:e4:49:43:ad:4c:96:33:f9:01:
f3:69:6f:57:5b:b7:df:93:11:28:bb:31:63:24:28:42:fb:18:
b1:28:58:f5:29:e1:e6:75:95:b0:68:97:23:13:46:fd:88:4c:
ab:93:5c:87:4d:bd:65:4c:39:bc:b9:42:f1:71:68:9b:87:6f:
a0:3b:96:3a:8f:34:2a:36:14:21:29:91:28:15:94:b1:a5:1b:
65:8d:72:55:7b:31:bb:24:a9:98:7a:42:54:88:e6:3a:ce:54:
be:38:01:b5:2a:0d:f3:1c:62:99:c4:77:59:3f:50:d0:3c:c3:
e7:a1:31:b0:a9:bf:3d:2c:09:43:5c:45:56:a2:ac:89:a7:14:
75:fe:48:11:78:86:02:4f:af:c3:c9:c8:36:ff:46:2b:5c:65:
ba:66:c3:83:c4:9b:07:56:2d:4c:e0:14:e2:b3:ab:32:04:cb:
87:76:3c:5c:c2:c8:78:84:8c:38:a1:e7:de:30:4e:03:14:7b:
e0:7c:13:07:26:63:e4:ca:6d:d5:e1:5b:6c:29:9e:3e:0a:d7:
14:3f:cf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:58 2025 by rpki-client