Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: HgupR1B2LHDAJKM8mEjqNq4txHUdQ0HTaPMjGbEQGZc=
Subject key identifier: 5F:05:7D:AE:2E:6D:9D:0E:52:F9:1C:3A:98:14:78:5A:74:A3:14:E8
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 01989E5E3FDD46C799071FD8D8E175DA409E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 1439
Signing time: Tue 12 Aug 2025 13:00:33 +0000
Manifest this update: Tue 12 Aug 2025 13:00:33 +0000
Manifest next update: Wed 13 Aug 2025 13:00:33 +0000
Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: BEVHe+cVG42uVHQ9VqyKMRdYoQGZCVPWEvST3QyEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:3f:dd:46:c7:99:07:1f:d8:d8:e1:75:da:40:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Aug 12 13:00:33 2025 GMT
Not After : Aug 13 13:00:33 2025 GMT
Subject: CN=5f057dae2e6d9d0e52f91c3a9814785a74a314e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:7d:7b:7a:63:2d:f9:ca:df:c0:3c:0b:a2:
2a:78:e4:30:9f:0b:24:de:f5:a4:95:ee:5b:92:a1:
81:d6:f7:c1:6d:65:62:31:8d:02:e2:32:5d:59:f1:
55:fd:b4:89:06:29:17:dd:97:4c:0f:4b:00:63:1d:
50:c3:80:bf:32:cb:f8:ed:8a:18:ae:67:de:08:e5:
32:a8:99:ae:85:02:2b:91:6e:ec:44:38:d2:44:15:
b3:2b:39:9e:52:9e:34:fb:9d:cd:3f:7c:5e:91:b7:
bd:b5:81:b1:a2:00:c9:27:87:b7:24:13:77:62:12:
50:1a:12:b8:1e:5f:11:27:9e:83:d5:1a:1b:23:4d:
e0:5c:cc:7d:2f:8e:63:55:4c:92:1c:09:1d:79:5e:
68:10:f4:a2:62:9f:d2:1f:7b:59:fe:93:2b:c6:93:
3a:10:27:de:14:d4:18:83:5f:61:81:7a:8b:36:e9:
98:49:0d:e4:d1:a0:c5:e3:e8:b3:a0:be:f3:8e:41:
7e:ec:fe:0a:c1:3b:94:17:9c:ab:27:80:3a:a3:1b:
c5:48:d5:09:74:21:23:9a:70:01:d6:8e:f7:c4:dc:
86:36:b0:96:1b:70:39:0a:5a:9f:d2:c3:a4:94:50:
ed:25:42:64:5f:26:f7:58:6b:ba:f5:97:cf:70:70:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:7D:AE:2E:6D:9D:0E:52:F9:1C:3A:98:14:78:5A:74:A3:14:E8
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9a:49:52:62:bb:6f:25:91:c9:3a:e6:5e:05:7a:08:53:77:
f3:2a:04:b0:8e:1a:e3:2d:21:72:e6:77:6b:c5:05:e1:40:8a:
48:ed:2b:22:3e:5c:5b:b3:62:02:eb:0c:a3:e9:85:42:1b:dd:
e0:af:86:fc:41:2a:da:43:6d:ce:2a:a3:6a:8f:6b:8c:1a:f2:
66:4a:50:a8:0c:00:c6:3d:62:84:67:69:c1:3f:d1:87:12:7a:
85:21:af:57:75:b8:2d:1a:a1:c5:5e:2f:2a:08:67:fc:dd:0f:
a2:45:c2:32:f9:65:ba:a7:5b:82:06:11:a0:ea:92:c1:ee:a0:
01:55:91:1a:9f:d5:48:6f:1a:76:b3:77:df:21:8d:39:4f:34:
6d:82:12:8e:19:16:2a:ba:35:a1:50:62:7b:f8:1d:d4:c4:ef:
26:aa:83:9b:e8:37:89:f4:ec:4d:54:fd:71:55:13:4a:27:6c:
1d:23:85:c6:b4:a9:2a:d0:45:f9:d9:e8:99:88:33:09:48:15:
e6:33:12:91:2b:3a:87:40:72:e1:f5:f2:0b:8f:bf:08:0b:5a:
21:e3:ed:ad:b5:b6:72:45:45:71:81:77:de:6f:58:56:15:59:
e9:d9:94:02:19:0c:b1:65:ab:34:60:8b:de:f4:c5:5d:00:4b:
8b:d8:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:29 2025 by rpki-client