Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: 59kuPXcJzWBQagHwmHzNf+Vc9mk+uOzWrRZFQq4k1x0=
Subject key identifier: 14:6B:21:FA:63:0D:F6:4D:A0:14:5E:EE:30:DD:3A:02:41:7F:D6:5F
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 01988C5838800023D02DAA6CA43883DCF5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 07A3
Signing time: Sat 09 Aug 2025 01:00:48 +0000
Manifest this update: Sat 09 Aug 2025 01:00:48 +0000
Manifest next update: Sun 10 Aug 2025 01:00:48 +0000
Files and hashes: 1: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: lvopWFlxBht0okQVOgHFaaKyg7p2mvvma/JaeOnjL98=)
2: Jj1HHZ3M2IWqEVr2BMPp4ypDwcI.roa (hash: cgzJBvOGYHM0ug0D/FFBZa1jcNvWqnCErJy8L2Lko1U=)
3: cBlGJ5bNODNILYzK1oNt3QzAw7M.roa (hash: 7wWvEWZaVuq+kybNFqA4kbf75m0LmBkO8WIx9pDUDFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:38:80:00:23:d0:2d:aa:6c:a4:38:83:dc:f5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: Aug 9 01:00:48 2025 GMT
Not After : Aug 10 01:00:48 2025 GMT
Subject: CN=146b21fa630df64da0145eee30dd3a02417fd65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:0b:47:a9:16:cb:1d:81:7d:86:c5:46:45:
c1:ce:db:1f:6e:17:45:43:47:f9:cf:9f:9a:c6:05:
05:ca:9e:d4:35:58:f7:82:e0:4d:e9:ef:71:28:f4:
6b:e1:bc:32:9b:1a:81:d6:d8:50:d1:e8:4d:54:e2:
79:25:fb:4f:ed:ca:70:aa:c7:2a:ea:98:19:8a:ed:
70:ba:d3:fa:6a:eb:ae:57:17:5c:e1:00:07:5d:67:
5f:9f:11:2d:a6:d8:91:55:03:01:f5:8e:4f:e6:ef:
8c:df:e0:ec:11:bf:19:ee:82:3f:bc:39:e9:91:52:
94:36:9b:63:f7:34:8b:27:19:a9:f6:6e:6e:a3:37:
c8:f1:50:da:c3:fb:af:26:43:f6:5f:a3:04:2e:73:
9e:7a:9b:c8:d4:0f:b8:40:79:d0:17:ba:ed:47:81:
9d:99:f5:d0:83:e3:58:8f:02:af:fa:af:8e:bc:c3:
13:b1:3a:31:0f:d5:f5:de:f6:c4:a0:9a:3d:96:7f:
6f:2d:5f:9b:f4:9b:49:0c:73:81:16:9c:28:62:aa:
b5:c4:ce:82:6f:b1:ba:4a:0a:c6:d0:99:7c:9f:db:
04:b9:ca:41:cf:c0:fe:1a:77:02:b1:87:be:77:c4:
c2:91:b9:e8:3e:3e:3d:d6:84:33:3e:a8:c6:1a:a4:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6B:21:FA:63:0D:F6:4D:A0:14:5E:EE:30:DD:3A:02:41:7F:D6:5F
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1f:ef:31:52:c1:a4:f8:0f:f1:64:91:08:29:f0:db:87:0d:
15:54:8b:8d:d3:3f:c2:99:43:47:47:8b:22:00:c5:54:5c:96:
ae:8d:bc:5b:a0:2a:64:72:a7:83:4c:41:73:b6:c8:ff:f6:69:
91:f1:b7:ef:eb:78:a5:17:21:55:e4:aa:5f:91:1f:97:30:d6:
51:38:9b:ab:b5:5a:28:e5:a0:63:71:d9:20:47:3f:39:d2:3d:
e7:00:44:50:ac:0e:96:dc:88:13:50:73:64:6e:58:67:b3:c0:
97:e4:13:45:11:74:81:34:2d:6a:d9:67:85:3a:fa:0c:a6:d6:
b2:00:cd:ee:9b:87:b6:a2:7d:58:cb:29:14:f6:29:d1:b9:e7:
64:2c:13:6a:65:f5:b5:5c:d4:a4:93:8e:45:82:06:73:79:7d:
cf:ab:e9:88:05:1c:6b:ec:d3:01:cc:c7:fa:8c:d9:48:d0:fd:
6c:ee:8f:68:6c:c6:da:03:ef:a7:a5:e8:8f:8d:88:75:33:57:
2b:fa:8e:bf:9a:72:5d:f2:0b:53:9c:c4:55:82:39:ba:2d:d0:
5a:cb:44:17:6c:ca:3d:76:06:32:34:80:a7:cc:1b:fb:a1:97:
d3:96:5f:a5:ec:98:b1:17:d2:a3:99:40:65:cc:51:35:91:e8:
26:e6:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:02:07 2025 by rpki-client