
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: wKOFnmZT4dKv84YEnvd9NenLHyjkv4lOjxO6n/Ij9y8=
Subject key identifier: FF:56:DA:E7:CF:64:B0:B1:EE:63:E5:7B:32:42:02:3C:D7:F4:EE:50
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019874BDD86913FCDB668C6CB2BA0A0D330F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 14FE
Signing time: Mon 04 Aug 2025 11:00:55 +0000
Manifest this update: Mon 04 Aug 2025 11:00:55 +0000
Manifest next update: Tue 05 Aug 2025 11:00:55 +0000
Files and hashes: 1: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=)
2: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=)
3: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=)
4: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=)
5: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=)
6: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: BPIqI9CYh5CTsKgThID9oxSE3sx+HJznZL93xNgt7lM=)
7: dhCWHEfUE6vusnYr9Cpsw49GGBU.roa (hash: sfCfke9wYtz4NQ6ml95RZDRUqTquZcuUDHPHT8jSjBk=)
8: egq6xFpWrLpO_u50yZL8HaDkVzk.roa (hash: hw9YCYHpnSpyNNxfxUiBMiNI5Kne7OkazLDcgOYFclU=)
9: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:d8:69:13:fc:db:66:8c:6c:b2:ba:0a:0d:33:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Aug 4 11:00:55 2025 GMT
Not After : Aug 5 11:00:55 2025 GMT
Subject: CN=ff56dae7cf64b0b1ee63e57b3242023cd7f4ee50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:b0:cb:1a:1f:76:36:6d:2f:c2:20:ea:35:
5c:e3:6a:2a:99:9d:3e:cc:c9:d8:b7:00:c7:d0:4c:
19:09:5a:10:6e:bb:5f:8b:81:72:ae:9c:97:14:36:
59:e9:66:fa:89:57:e9:8f:06:6a:51:8d:cf:30:58:
bc:df:08:7e:bf:32:09:0c:94:41:e4:a4:30:8b:26:
1d:1b:93:cf:9d:ef:91:81:74:86:d2:07:a5:2c:3e:
71:77:24:ab:83:78:82:2e:33:6e:8c:37:de:22:e9:
47:bb:6c:fc:22:4d:82:7f:76:18:31:4a:d1:f3:da:
56:17:3c:12:be:9d:07:58:57:fc:77:ce:af:ae:30:
98:4b:8b:35:5c:fa:8c:c0:9d:2f:96:9b:ac:df:04:
ab:01:2d:3e:df:d3:f5:d3:c9:32:38:26:f5:82:26:
c2:4e:43:88:19:27:e8:a8:e1:f6:83:a2:a0:78:51:
8d:5a:f5:12:9d:20:d3:de:0b:79:5d:b4:f2:16:d9:
85:75:66:f7:6d:8c:72:c5:8a:f1:e0:fc:7e:e3:3b:
30:9e:48:cc:6a:7e:02:75:f1:1a:1c:b0:f6:af:91:
5d:90:ea:21:de:96:ee:29:98:7d:ce:45:e9:d4:21:
3b:56:42:e4:86:12:97:d3:c1:d9:cf:37:67:cf:fc:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:DA:E7:CF:64:B0:B1:EE:63:E5:7B:32:42:02:3C:D7:F4:EE:50
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a7:5b:f4:26:17:f7:7b:ca:b7:5d:97:62:5a:13:4e:73:57:
e9:86:fa:7a:9d:45:93:46:9e:74:05:50:8d:ab:d0:ff:e4:20:
ff:82:ba:34:43:7c:fa:37:17:ed:df:97:93:f8:74:06:69:aa:
3d:f3:7b:b0:25:c9:e5:c7:b2:13:42:a6:d4:2d:f0:87:d7:55:
64:93:ff:d3:5e:1f:22:aa:7f:88:7c:4a:be:cd:0d:36:78:0c:
e9:20:18:36:93:84:ff:12:e1:dd:a2:28:1d:a9:6b:7d:47:04:
a8:be:7c:01:cf:4e:7c:45:36:4f:08:6d:00:39:26:3a:85:13:
de:33:bb:d3:ff:18:f0:0f:c5:8d:0b:29:a2:61:c0:88:c0:30:
fc:a7:f6:f5:98:f0:77:f5:47:8f:85:d9:2b:a2:75:73:55:48:
68:c9:ed:a7:54:f0:ba:e0:30:73:37:e5:a4:f3:d3:32:7d:07:
5a:05:71:84:c3:26:af:4c:d7:05:b5:17:dd:6e:20:4c:79:f5:
0d:75:17:48:09:4c:ee:85:49:9e:30:ef:ff:76:80:89:eb:85:
3b:f7:4a:db:55:3f:13:bc:66:4f:e2:8a:e8:6b:6b:06:5a:b6:
70:f7:63:74:f8:6b:49:0f:36:88:7a:52:de:14:03:05:42:cf:
b4:c1:03:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:25 2025 by rpki-client