Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: PBWcCs9NLfABJkcKNY1ZfL7ukdiTGUDyJZ9tbxehy9c=
Subject key identifier: 87:F2:B7:C0:DE:EC:3F:C9:F9:F0:48:18:ED:9B:DD:D8:99:5C:B7:82
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 0197B933ED379AC5357E575E86339CAD190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 0474
Signing time: Sun 29 Jun 2025 01:01:17 +0000
Manifest this update: Sun 29 Jun 2025 01:01:17 +0000
Manifest next update: Mon 30 Jun 2025 01:01:17 +0000
Files and hashes: 1: N-BSf874DQvK549b1pSEfsfJ-W8.roa (hash: bW40XSisvNpm05Mkk5fR9GiNdKpGc7uzNKkhrhBHqx4=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: wVOWqfKpm5HUSVb0NbeAnrNph5rmucR7nQbsyousfFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:ed:37:9a:c5:35:7e:57:5e:86:33:9c:ad:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Jun 29 01:01:17 2025 GMT
Not After : Jun 30 01:01:17 2025 GMT
Subject: CN=87f2b7c0deec3fc9f9f04818ed9bddd8995cb782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:b3:ae:f3:f1:13:9c:db:04:34:3b:43:dc:
8a:88:16:85:af:cd:91:a3:cd:8c:10:f0:d2:90:7d:
1f:79:33:ee:45:6b:b0:22:fa:0b:b5:b2:4f:8c:9b:
1a:ce:80:22:ac:b5:2f:4f:f1:13:f1:7a:73:f2:10:
a4:4a:7b:cc:82:3e:62:a3:7b:76:03:b8:8f:1e:b7:
fe:8b:97:b1:f4:9c:d7:99:ab:6a:7d:5e:80:11:69:
cc:12:2e:90:6d:d3:1a:1d:bc:be:20:f4:f5:24:a6:
61:c2:db:14:3a:79:7e:cc:86:bb:1e:44:bb:a3:fc:
d7:c8:5d:3d:45:8d:f4:ce:cc:52:73:4d:cb:d6:bd:
72:06:b3:d0:79:0c:cd:b5:76:08:8a:e6:36:3e:14:
8b:d0:c4:c4:0c:22:f4:38:2d:ac:56:f5:e1:08:32:
a5:01:24:31:9d:5d:8e:fa:9d:63:df:6c:0f:2b:3f:
a0:ec:cb:59:d1:4a:a6:80:b0:5a:c3:f4:e0:5b:a7:
88:fa:29:40:c1:f8:1c:4f:9e:31:96:db:89:8f:5a:
86:28:b1:1e:f1:c3:b5:7b:28:7a:b0:a1:8b:ca:28:
f5:78:a8:84:d9:b1:a1:59:35:db:37:f9:b1:6f:47:
00:e9:bf:01:b7:2a:b4:da:85:27:6a:9b:e4:36:0d:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F2:B7:C0:DE:EC:3F:C9:F9:F0:48:18:ED:9B:DD:D8:99:5C:B7:82
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:85:29:39:65:1f:48:72:08:db:34:c8:65:d4:f4:2c:b1:
7a:76:53:be:3f:39:fe:5b:a8:7f:0e:35:3f:f3:99:55:d1:ea:
03:b1:8d:1a:8a:58:70:6f:38:cd:47:cc:e4:72:7a:e5:66:c0:
88:17:34:1b:19:d6:fb:b9:9d:af:9f:23:b6:0d:00:dd:f5:1d:
37:64:d7:0c:02:60:27:03:5e:70:bb:89:bc:08:a9:02:3b:6a:
a0:54:54:e7:a5:57:fc:87:4a:d5:a4:02:ab:4b:9c:4f:01:eb:
5d:f2:5a:b7:55:0f:b5:96:ff:3e:1d:d8:a1:bf:89:f4:21:16:
91:31:75:5f:63:c4:b5:ec:8d:fc:ea:66:bf:5e:33:db:af:7d:
06:9c:cc:9e:60:eb:1c:44:44:11:a7:70:c2:44:d9:4f:8e:7b:
c4:89:f5:54:7e:ff:4d:0d:bb:d3:be:c8:d0:64:d8:ad:3f:2c:
87:a2:09:02:e3:fe:55:e1:ef:70:53:92:6f:bf:63:18:6a:d7:
df:b2:94:60:06:76:48:d1:08:55:87:1c:7e:1b:63:18:c9:39:
8b:1d:50:85:d9:09:f8:0a:54:9b:93:ce:cb:e6:fa:23:42:f8:
07:43:aa:be:30:c2:eb:cd:0d:02:3d:53:ea:0c:bc:91:36:e8:
ce:d6:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:45 2025 by rpki-client