Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: IHbDTLd8dijPYejCtdQNAn6b3PQPnmA/dy9BVNjLVPo=
Subject key identifier: 8B:D6:25:4B:AC:17:A8:DE:51:CD:39:C3:A2:41:A6:6A:40:F0:48:21
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 0198D516051FF723EBFF1AD01B712AE19109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 0507
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: N-BSf874DQvK549b1pSEfsfJ-W8.roa (hash: bW40XSisvNpm05Mkk5fR9GiNdKpGc7uzNKkhrhBHqx4=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: Lp53KFFOKlsB+FRcDQEPUbPrF98Z/mS1w0NXfc4hL68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:05:1f:f7:23:eb:ff:1a:d0:1b:71:2a:e1:91:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=8bd6254bac17a8de51cd39c3a241a66a40f04821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:ef:91:b9:9c:86:93:c4:e2:30:bb:ac:24:
f9:d7:5e:27:36:f0:ed:d4:e1:88:22:6c:47:b3:34:
66:bd:6a:33:34:b4:8b:99:c7:d6:4b:ca:04:a2:05:
f8:8f:68:99:ab:21:90:b8:b1:68:c3:4e:0e:e9:fc:
43:e7:34:9c:a8:a9:e3:20:5b:b2:62:46:37:3e:48:
cd:05:c9:9a:c4:be:57:80:95:73:13:ad:a2:03:36:
f5:61:55:f1:17:2e:b0:e4:df:e9:2e:17:13:ea:a9:
0a:7e:67:df:f1:98:a7:92:08:39:e4:15:7f:76:d3:
c9:e1:ad:3a:bd:a6:61:c3:9c:45:f5:17:38:c2:cc:
ef:92:4b:58:fa:88:35:97:91:e5:0d:3a:d6:f8:61:
3a:a6:aa:2e:2a:1c:63:50:78:48:eb:eb:d3:c4:fa:
65:bc:81:07:14:d4:c2:8f:88:10:12:64:17:76:26:
eb:37:64:c2:47:6e:59:2f:ad:b4:69:5e:18:73:85:
85:90:09:4e:fb:b4:9c:e1:bb:39:b4:ff:c3:2b:d9:
ea:b1:52:86:7d:b4:0e:62:d2:40:1f:20:92:07:29:
a3:5d:4a:72:7e:0d:28:9c:f5:b5:17:1c:5e:76:b1:
a9:6f:73:ec:46:22:2b:6c:c9:fc:33:8e:7a:6c:4f:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:25:4B:AC:17:A8:DE:51:CD:39:C3:A2:41:A6:6A:40:F0:48:21
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:78:0d:53:f2:ae:e5:1a:87:54:5c:f4:07:82:eb:8a:f9:c3:
e8:d7:35:26:8b:04:8e:74:c5:b3:7f:c7:51:57:2b:ab:78:8a:
a7:ef:b2:84:51:0b:0f:9b:a6:cc:7e:9b:e2:3e:34:aa:9f:22:
d1:10:3f:93:14:c2:7c:71:69:43:12:ca:64:e6:90:c6:f3:b5:
cc:9f:83:c7:97:cc:c1:28:30:02:eb:c7:3b:87:9c:85:07:e3:
98:4b:4d:f3:11:dc:e3:2b:fb:46:10:b9:be:8f:23:79:77:c6:
53:ac:08:47:49:d9:b6:18:97:b7:e7:fe:61:35:87:1d:27:72:
21:ec:a5:81:50:6a:64:2d:a4:5f:a1:35:4f:2d:e9:df:e3:46:
98:a6:50:3e:b7:37:cd:79:2e:40:7f:f0:ff:20:0f:c4:30:a6:
58:f5:95:78:aa:59:87:dc:b2:90:c4:49:8a:48:44:df:ee:8b:
21:dd:5a:dc:da:e4:4a:99:96:00:f1:3f:f2:29:49:9b:18:aa:
84:ef:28:0d:5f:4a:7c:50:84:27:5f:f0:06:6b:34:97:fb:57:
da:2b:28:4d:04:a6:56:4a:37:85:80:27:56:f2:5d:c5:69:d6:
2e:ed:3e:04:c1:72:a0:78:65:43:09:a5:28:56:94:98:06:66:
f4:bd:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:32 2025 by rpki-client