Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier: V/mUIfqCtDVUGjkLxs7YTzGe1kVIgNCKq6AxTkdUNCE=
Subject key identifier: F1:5D:3C:17:C1:61:C2:4F:7C:18:C9:3C:41:EF:40:81:77:5E:50:52
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 01989591F76AB7587B9019529FC55366DAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number: 1372
Signing time: Sun 10 Aug 2025 20:00:27 +0000
Manifest this update: Sun 10 Aug 2025 20:00:27 +0000
Manifest next update: Mon 11 Aug 2025 20:00:27 +0000
Files and hashes: 1: HaUn7tg_GQoLwUeKln7B89E1Zus.roa (hash: UBP04zlDEuw8zGqO58s8vILU4LoszVd4p1cFKyVRANw=)
2: Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (hash: 2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=)
3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: LV7oXsSrwUlX6gnGlH/d3thlFLfKUA4mNr7IniSZSiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:91:f7:6a:b7:58:7b:90:19:52:9f:c5:53:66:da:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Aug 10 20:00:27 2025 GMT
Not After : Aug 11 20:00:27 2025 GMT
Subject: CN=f15d3c17c161c24f7c18c93c41ef4081775e5052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:46:c6:a2:b9:0a:4f:48:52:a8:d9:b9:d9:
9c:12:2c:f6:6a:64:33:7d:39:9a:26:24:f0:1e:68:
4f:dc:0c:72:71:4b:e3:62:06:05:de:b9:00:66:5b:
b0:65:f2:85:27:bb:17:6a:dd:6f:69:ea:26:a3:00:
7f:71:57:c9:52:94:b4:24:ce:13:79:aa:69:35:b3:
ab:8e:42:6c:ee:f9:1b:d0:fa:25:f7:90:57:ad:42:
ff:5d:5e:8c:10:67:8c:99:ae:b8:79:dc:b4:09:ac:
5c:f6:83:1e:ac:22:00:61:bb:f1:ff:2b:dd:5f:b6:
51:9e:80:5a:f9:d3:ea:66:95:a6:a8:20:64:c1:ee:
83:96:69:2f:9e:64:2d:3d:e5:50:25:b6:d8:93:fd:
6e:76:6b:ec:a5:cd:0b:fb:51:b9:a0:0f:cd:6f:d5:
6d:8c:2d:b9:b2:7b:73:ca:f2:e0:ce:9e:ee:03:b2:
15:76:92:e1:c4:e7:66:fc:36:0a:80:8d:d9:1f:04:
58:7b:2f:8d:fd:a2:92:0e:f1:1d:90:4e:23:7e:7a:
c3:dd:0f:f7:ef:3b:4f:ae:1a:fb:d2:ca:c6:b4:fd:
f5:6d:18:19:82:91:56:c4:f7:40:1a:d1:80:5a:74:
45:c9:57:65:84:45:d4:bd:46:80:a1:30:64:ab:89:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5D:3C:17:C1:61:C2:4F:7C:18:C9:3C:41:EF:40:81:77:5E:50:52
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:18:d1:ec:6b:28:72:c5:fe:12:1d:c3:bd:3f:a2:70:21:45:
0c:a2:e5:21:ee:67:dd:90:13:d8:93:92:f9:66:27:1c:e2:eb:
71:a9:27:d7:c0:62:ed:46:12:68:18:a3:7a:cd:b9:7f:2b:9e:
e8:75:70:c3:08:da:85:bf:3a:2e:43:96:66:0d:bd:ea:f9:68:
c3:9c:0f:1e:0d:f9:b9:03:d7:66:35:1f:39:6a:a4:5b:3b:49:
5d:ba:4f:ae:1e:ba:bd:71:39:37:78:ac:8c:c2:ef:c9:a6:cd:
eb:87:e6:a6:40:e9:1c:04:2e:93:5c:bc:d1:53:40:dd:bc:76:
bd:73:10:6d:f7:90:50:c4:dc:10:8b:43:86:72:70:94:2c:3c:
58:bf:a4:8e:62:1d:a8:57:4b:0b:86:25:1f:a8:2b:ae:e8:4a:
8c:ed:52:a6:7b:a9:d1:78:eb:66:21:44:c2:d9:ee:48:da:c5:
7f:84:a2:06:d0:6d:21:40:05:c7:20:b8:46:01:5a:a2:c7:60:
ea:b8:f0:cc:4a:ec:bf:36:f3:1c:90:f3:29:e9:6a:c3:83:b9:
f3:92:9b:a5:8b:4d:a0:e0:a1:46:5c:86:4e:d5:62:20:af:52:
91:3c:75:34:66:78:2e:59:80:4b:ea:d1:a6:d2:c0:4b:03:aa:
5f:f0:fb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:59 2025 by rpki-client