Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: UVRK/ZKjSDSe3SQ2a1bdfydf/YuqJpc0nsodYe1vX3c=
Subject key identifier: 8A:C8:2F:C5:70:D8:86:1E:9E:A8:2E:CA:69:7B:2F:4A:36:E8:FB:C6
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 01988242B3EDC71181238180B3384BF8CACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 86
Signing time: Thu 07 Aug 2025 02:01:06 +0000
Manifest this update: Thu 07 Aug 2025 02:01:06 +0000
Manifest next update: Fri 08 Aug 2025 02:01:06 +0000
Files and hashes: 1: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: hS1aeeyioSR5/FwBTWBJT+6S85TLznkpBkmoN8IZKeA=)
2: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:b3:ed:c7:11:81:23:81:80:b3:38:4b:f8:ca:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Aug 7 02:01:06 2025 GMT
Not After : Aug 8 02:01:06 2025 GMT
Subject: CN=8ac82fc570d8861e9ea82eca697b2f4a36e8fbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:e1:ed:ba:1a:42:15:c0:9f:8c:dd:f9:52:
7d:33:25:64:c5:dd:94:27:69:ad:69:6e:b5:4e:69:
9c:e0:d2:e3:40:79:1d:e9:01:d1:e2:79:eb:1c:0b:
bb:59:5d:8e:8a:12:aa:e5:d3:5c:8e:9e:9b:da:5c:
6a:ba:93:49:c3:b5:1b:eb:bd:f7:cd:1c:da:63:7a:
0e:c5:ac:b5:3e:3f:94:d7:d8:b1:0f:7c:be:9b:f9:
82:b8:d4:29:95:76:85:67:86:fd:64:e5:c3:99:ed:
95:d6:74:7d:9e:33:9d:6b:56:ca:53:1d:05:79:5d:
39:39:c4:92:15:f7:ce:08:9f:cb:e7:18:85:b7:b5:
dd:3f:57:9d:8a:d7:e6:dd:06:d7:d5:cb:80:b8:7f:
8d:63:33:12:78:01:a2:c1:08:c8:1d:95:26:74:44:
a8:24:21:1c:4f:d9:b8:86:90:67:d9:58:cd:66:88:
36:ab:8f:61:93:46:96:39:69:a6:ba:88:30:2f:8b:
a6:e6:b1:77:23:36:65:f2:b6:e6:4b:7b:ac:68:01:
9e:a8:23:b8:01:de:b4:77:25:d2:6e:84:1c:9f:40:
03:52:82:ff:45:a6:e6:40:97:ef:a4:71:c0:b5:ba:
55:5e:a7:5e:63:87:df:ed:64:d6:51:e9:50:b4:60:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C8:2F:C5:70:D8:86:1E:9E:A8:2E:CA:69:7B:2F:4A:36:E8:FB:C6
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:da:c7:d2:f8:33:8c:37:c8:e8:81:d5:40:04:07:a1:23:e4:
b6:75:1d:2d:39:78:7f:f2:0b:6c:1e:94:29:0f:e9:cf:12:c5:
16:eb:50:9a:c6:ed:a3:2c:d8:47:6c:56:c2:54:8d:52:0c:a5:
cc:52:e5:44:19:b3:6f:b3:16:63:ac:5d:ea:21:d6:80:bb:68:
7b:42:4e:42:f3:81:48:1b:c3:19:90:02:21:0b:58:9c:cc:54:
81:eb:0e:4e:e9:f5:6b:9b:74:38:e0:9d:d9:39:f1:9d:a2:a2:
12:77:8c:2d:9a:99:ee:3d:78:89:ec:c0:8c:01:36:ee:d0:d9:
f9:88:78:f7:0d:1e:3b:42:44:70:ca:09:46:c8:a0:ec:23:5a:
85:80:a0:86:ed:14:d7:85:81:80:4c:b5:b5:08:62:91:79:7d:
0b:48:5e:3a:05:86:cb:1b:3e:79:ff:6f:ee:e2:a6:ed:7f:79:
80:55:64:32:2d:a4:7e:dd:8c:60:ea:e7:ea:47:36:66:0d:19:
2e:12:10:53:b0:d8:3f:21:f0:9d:9a:41:c3:3e:d3:d5:c2:86:
a1:bb:ba:da:5f:e3:fa:64:c9:00:17:cf:26:fe:cd:38:d9:61:
bc:b3:ac:58:eb:04:b9:80:b2:f3:21:26:2f:0f:2b:87:83:cd:
db:f1:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:15:52 2025 by rpki-client