Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: YTFnLRHTThJ2cf8xwSN/hGCKADI7bFD8eo+Z9bwrHas=
Subject key identifier: 68:B1:C5:BC:42:FD:AF:4D:D6:1B:52:DC:16:14:02:92:EE:1E:F9:FC
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 01987DF8AA1AAA45A1517EE92DC97BFC44EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 1261
Signing time: Wed 06 Aug 2025 06:01:45 +0000
Manifest this update: Wed 06 Aug 2025 06:01:45 +0000
Manifest next update: Thu 07 Aug 2025 06:01:45 +0000
Files and hashes: 1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: drmOZZHFwYd1SJpRc2p7PejctyWm3OcJYYd/3piJfjo=)
3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:aa:1a:aa:45:a1:51:7e:e9:2d:c9:7b:fc:44:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Aug 6 06:01:45 2025 GMT
Not After : Aug 7 06:01:45 2025 GMT
Subject: CN=68b1c5bc42fdaf4dd61b52dc16140292ee1ef9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:18:6e:7f:e5:18:4d:a8:de:bd:c6:35:56:
d5:f4:04:3d:10:5d:35:42:4d:d9:cf:bf:db:8e:dc:
f0:83:11:60:88:c1:eb:d3:b1:91:32:63:15:1d:e4:
af:4e:94:0d:56:7c:94:cb:03:64:de:b5:96:a7:03:
a1:53:05:56:ac:49:09:ff:9a:cd:41:00:6f:74:b7:
f8:ab:d5:a4:7a:fb:68:43:65:b5:1b:7d:ff:5b:13:
37:e8:94:db:f5:07:26:aa:91:48:9a:e3:a6:66:71:
63:de:32:be:30:9e:ee:00:53:07:8a:11:bb:aa:10:
a4:ca:ee:4f:8a:d3:a3:9e:57:e7:51:1b:67:8f:a1:
99:be:35:63:7d:0e:73:35:01:48:54:77:6d:cf:cb:
00:e3:4b:38:2e:fa:df:eb:61:a6:88:5f:d0:74:fe:
45:e7:fb:20:6a:3b:51:0c:88:a0:74:55:a9:cd:39:
7c:06:bd:bb:84:ac:14:59:0e:2f:76:ae:0a:71:ec:
b9:92:c9:76:c0:74:76:96:30:77:d0:85:69:8d:2b:
2f:6a:b2:72:38:84:aa:44:2b:2e:7e:4d:8f:cf:36:
55:8b:01:57:59:c2:83:50:2a:5e:20:ed:e5:51:cc:
51:9b:0b:ba:dd:e1:1e:ff:c5:60:1a:73:90:3b:64:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B1:C5:BC:42:FD:AF:4D:D6:1B:52:DC:16:14:02:92:EE:1E:F9:FC
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:74:af:96:73:82:47:f0:b0:9f:b7:e6:71:21:5c:ac:26:b1:
c3:5a:22:9a:54:ea:4a:a2:8b:fe:13:cb:2f:7d:15:bf:e3:43:
58:cf:f5:5a:44:07:fb:25:46:82:03:73:cd:af:61:0e:ef:66:
80:41:0f:95:de:c8:26:a2:ee:32:39:c2:dc:ab:a2:a9:0e:41:
01:8a:66:90:fe:1d:a8:89:2b:e8:c5:9e:0a:bd:31:cc:99:5c:
a6:5d:8b:5c:53:e4:1d:e4:8b:a4:ac:f9:83:4c:16:96:fc:07:
95:30:2c:d3:04:a7:92:50:f2:7a:8c:fe:b7:f4:a0:0c:47:58:
98:c1:07:14:1c:e5:25:5e:7b:62:ff:13:51:6d:5c:62:41:e7:
42:e2:b4:5a:7d:5b:e7:19:34:d7:5f:ce:b1:33:f8:b1:b0:1d:
e7:0f:e4:91:9a:bc:25:7f:48:3a:96:35:e4:1f:3f:64:14:36:
08:1e:53:8f:ff:d4:2a:5e:f1:fe:3a:d8:bb:4f:1e:30:0c:0b:
f7:af:91:94:aa:5d:24:cf:07:7c:7b:8f:10:42:6f:04:ef:3b:
78:91:72:f3:7e:b6:52:cd:4d:0f:20:1e:f2:8c:0e:ad:2b:c6:
a7:1c:e1:69:b5:2a:64:2b:9a:64:eb:48:94:23:38:ae:a7:47:
03:a1:8e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:58 2025 by rpki-client