Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: Knp/EpkB2ivf4USGlzKVSieLe6pSyxhDz8Hk6xYxwfE=
Subject key identifier: B3:E2:2B:05:D3:3B:C9:CB:84:40:CB:42:24:11:E6:D9:2B:E8:46:14
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 01987261F9A3DD408FDD8A95A26F7F795F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 1620
Signing time: Mon 04 Aug 2025 00:01:20 +0000
Manifest this update: Mon 04 Aug 2025 00:01:20 +0000
Manifest next update: Tue 05 Aug 2025 00:01:20 +0000
Files and hashes: 1: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: vbck6c+uXnoSJd9FR4aRPPRxnVcbG60ZFaM1Isyyzro=)
2: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=)
3: paZxOmMKFpQKe-8Kne9bRfBeDj4.roa (hash: Ht8nkuSK3tnDGTAuNZ2+oouOY3eOWnt0ge3I9SzF5BY=)
4: tQhpXUNnvGff6XvuqvOKpCTzYwY.roa (hash: Hc4QZ0VrOY7vtGnelWFhq1jyckc5D//hAbmROwzCFcg=)
5: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:f9:a3:dd:40:8f:dd:8a:95:a2:6f:7f:79:5f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Aug 4 00:01:20 2025 GMT
Not After : Aug 5 00:01:20 2025 GMT
Subject: CN=b3e22b05d33bc9cb8440cb422411e6d92be84614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:8b:00:44:0a:2b:8e:c4:24:b6:4c:51:52:
e8:55:78:6e:3a:43:4d:5c:53:74:10:4a:24:ea:ba:
0d:52:64:e8:89:5d:52:c3:ac:15:b5:6b:35:6b:06:
77:3d:af:96:79:8e:3e:b6:a5:7a:0d:da:69:79:e3:
97:d5:16:0a:88:94:fa:82:c3:a0:4a:0d:89:c7:f6:
0a:f6:b7:ea:a1:2d:44:b6:dd:76:0c:2f:70:4a:24:
89:5b:d2:b7:95:c1:79:c6:13:8f:c6:06:fb:f8:e6:
88:bd:c8:ff:41:3b:69:d5:b0:ce:ce:6d:f1:05:b1:
54:8e:e9:80:f4:43:47:0d:75:16:fd:e1:4c:33:c4:
5d:c9:49:59:0a:73:9d:fb:92:d1:4c:44:d3:8b:43:
7b:77:98:38:ae:8a:60:b2:dd:34:40:8b:4d:67:81:
6b:50:b3:c0:9f:16:05:db:90:63:a2:88:44:cf:30:
4d:92:14:46:a9:89:a9:30:9e:1f:9b:53:ec:73:f0:
a6:84:68:40:1d:2c:a9:4a:48:d1:41:d1:4b:72:43:
95:3a:cb:59:6f:52:e3:f6:d2:0b:e2:15:71:55:23:
2e:f7:ed:a5:c5:19:ad:4b:03:36:b7:e5:7a:8c:cd:
be:a6:3d:56:25:c1:36:83:04:ee:5d:70:71:79:0b:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:2B:05:D3:3B:C9:CB:84:40:CB:42:24:11:E6:D9:2B:E8:46:14
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:49:29:64:bf:a2:8e:8a:2d:a1:d0:27:c5:dd:4d:c2:44:7f:
c0:5c:70:3c:5b:ad:94:ae:aa:8e:90:b6:7d:af:96:74:73:76:
dc:33:ca:07:87:cc:53:f5:c3:5c:a2:e1:25:e8:bc:8c:b2:25:
17:76:f7:4a:97:ff:cc:0f:c4:3a:b2:52:21:de:a8:66:4f:3e:
32:e0:7e:e8:87:ea:fa:cb:c8:22:7d:2d:20:a9:66:98:dd:80:
91:92:7f:16:28:56:1c:7d:31:1b:04:f1:ba:92:7a:9d:1a:a5:
29:b7:83:f1:3d:25:a5:35:c2:58:c2:12:c4:61:2e:f8:4e:3c:
82:b9:13:bf:a2:dd:c7:14:fc:b4:0f:93:4b:48:48:0b:06:e5:
9f:7c:0c:0d:87:cb:54:d2:ea:f1:b3:93:12:8d:9d:5b:bf:b1:
80:44:92:84:66:69:bd:40:ff:0d:5c:a6:98:8a:d0:9c:98:c7:
32:54:7f:c4:58:d8:7f:c9:b9:4a:fc:c6:c7:bc:08:4c:52:ce:
77:e6:fd:b0:c1:34:52:d0:1c:45:a7:01:f1:90:5a:b7:c7:ae:
80:a1:fe:6d:61:25:e2:84:78:9c:0a:20:fb:5b:12:68:dd:58:
c7:58:5b:24:95:aa:e1:27:bf:95:0d:78:cf:f0:1e:f6:b8:ad:
ed:c7:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:27 2025 by rpki-client