Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: b66q3ruC1wE2Xm7N5ANubr15aaFv/e2f5JyguADIHAw=
Subject key identifier: 36:7A:D9:A8:2D:AD:DC:EC:8C:26:3C:C3:67:5E:54:87:AE:06:95:EF
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 019874192A9D34BB4C306A903FE1039B373A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 08:01:02 +0000
Manifest this update: Mon 04 Aug 2025 08:01:02 +0000
Manifest next update: Tue 05 Aug 2025 08:01:02 +0000
Files and hashes: 1: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: ULC/tQslh67zBVkNhTD6QC5vhhRCFqERQafA2QhJS/c=)
2: dUqyD5dBwTvJ_qoTBxGI93eGedY.roa (hash: u/v6Ya7ReNYFR+FOK7OzZoy9GOIB91+hBxT7UAGsW1U=)
3: xf5euvYwoNkCugSTZpIpZIs6gdQ.roa (hash: TROZHBrJUwOEntOqJDRdHWhVUC4xDktW9XYJSjQLr0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:2a:9d:34:bb:4c:30:6a:90:3f:e1:03:9b:37:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Aug 4 08:01:02 2025 GMT
Not After : Aug 5 08:01:02 2025 GMT
Subject: CN=367ad9a82daddcec8c263cc3675e5487ae0695ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:b0:21:d6:27:99:8d:0a:73:c4:dc:85:d0:
4d:d2:69:18:22:54:eb:f0:eb:ee:3d:49:4c:01:65:
02:06:1d:d1:20:0b:91:c0:96:6c:63:f1:77:54:19:
ce:b6:d0:8e:2b:90:14:c7:85:d0:cc:df:bd:29:5f:
70:d1:a6:ea:a5:d5:86:d3:90:c5:1c:77:46:21:c7:
ce:d0:6a:1d:4a:bd:70:fb:93:7b:cc:3c:ce:98:cf:
b5:61:d3:f6:d9:fa:b5:6c:2d:3e:26:65:e6:48:8c:
7f:98:39:c9:a9:ee:eb:7e:d6:ac:bb:ed:9c:1a:68:
77:97:88:1f:bd:97:b9:7d:66:38:3f:48:7d:37:1b:
dc:c1:45:1e:8f:91:8a:20:64:d2:4b:0a:57:fc:16:
12:68:71:06:76:dc:bf:1c:6d:16:bd:e1:b5:0d:27:
79:e2:bf:89:13:8b:1f:be:05:61:8a:0b:e4:7e:89:
f3:e3:3d:35:85:ec:7c:61:a9:26:b8:f4:a7:be:28:
34:bf:5b:fb:b2:65:2e:72:03:24:61:c7:43:a7:7d:
f7:e3:9e:6c:76:eb:0d:fb:7b:ab:9c:c7:5e:3e:9d:
5f:d4:38:94:49:2f:3b:83:12:b0:47:5c:74:44:2e:
5a:39:2e:1c:3b:94:6f:49:a1:ea:b4:65:95:cd:de:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7A:D9:A8:2D:AD:DC:EC:8C:26:3C:C3:67:5E:54:87:AE:06:95:EF
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:46:ff:86:fc:33:57:6a:79:25:f9:21:ae:37:4a:bb:ea:92:
8b:e6:04:0c:fa:46:b7:11:14:a0:ae:8b:cd:21:05:9d:a1:bb:
9e:df:45:00:52:f8:17:81:b7:f9:d0:ee:7b:ed:48:13:9d:ef:
e8:11:55:ca:33:67:df:c8:b7:1d:71:ee:f3:bf:11:98:23:b7:
11:5f:9f:c8:97:46:9b:77:31:b3:9c:de:02:60:f6:c8:b1:23:
23:2f:eb:64:28:e1:21:5a:0d:2f:2c:b1:90:7c:15:f8:f9:fb:
85:95:97:25:d2:c3:9f:32:3a:a6:a9:52:ee:2a:e0:78:d2:6d:
63:82:b1:f4:bf:9b:27:ce:6f:2f:6a:18:29:b3:0f:9a:17:d3:
5b:85:6d:ba:7a:98:eb:3a:48:20:a9:52:11:8f:a8:a6:ed:11:
57:46:4a:48:6a:80:69:41:eb:1a:78:be:28:c8:71:60:91:61:
d1:70:c7:27:02:98:a8:30:3c:59:21:d3:1e:ee:6e:c0:2c:44:
46:5a:ee:2e:c7:9b:e9:a7:21:56:d7:ab:55:18:e7:f3:66:62:
54:ee:69:3b:41:56:b6:d2:77:ba:40:6b:95:45:90:49:ce:a1:
20:62:3d:9d:0b:fc:da:86:27:af:b7:17:79:9c:ca:b6:2c:d6:
7f:b8:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:28 2025 by rpki-client