Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: S0c6RrY7xaLBbsEMGAG+gZElEoSEzwS4Zc7Z5mvbK9w=
Subject key identifier: E7:21:C5:37:47:AD:91:D3:A6:BB:2D:12:00:13:AA:64:81:63:81:4D
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 0198D7A9706C65388A4F9EAF3DAC5E0D28E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 16:01:02 +0000
Manifest this update: Sat 23 Aug 2025 16:01:02 +0000
Manifest next update: Sun 24 Aug 2025 16:01:02 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: GSybJfJ4IKJ2uIksva0GhC+mVqYOZXuCk2sWHDVKkjw=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:70:6c:65:38:8a:4f:9e:af:3d:ac:5e:0d:28:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Aug 23 16:01:02 2025 GMT
Not After : Aug 24 16:01:02 2025 GMT
Subject: CN=e721c53747ad91d3a6bb2d120013aa648163814d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:59:ad:77:1a:f0:ba:f5:15:b6:ca:41:00:
da:19:41:92:6d:cb:4a:b7:be:7c:db:78:b0:72:ea:
90:6e:ea:3e:75:eb:07:24:46:33:21:59:68:00:80:
05:8f:bb:b6:2b:d8:57:6e:8a:3f:39:70:b3:be:f5:
0c:ac:f5:3b:fc:29:e3:ac:c0:96:90:c9:88:5c:03:
73:f0:4a:ba:0b:00:12:b8:be:10:d1:2d:1f:11:6f:
6d:12:ed:62:af:b7:e2:4e:29:ba:4a:ae:af:b2:96:
6c:fc:d5:42:e3:5c:1e:3c:97:75:3b:7d:aa:71:36:
a2:a8:9d:59:3b:c0:94:b8:9b:d6:03:f8:0c:63:59:
fd:76:1e:19:cb:ed:a0:9e:47:a6:a6:87:d7:8b:ab:
fd:bc:35:44:f1:b2:18:06:21:8f:8e:4a:f2:cd:ab:
3d:68:e4:e2:ed:f3:3e:39:1b:97:f5:27:93:52:c4:
7e:d5:ed:78:0c:8d:6d:da:57:6d:63:75:95:9e:af:
0c:9a:06:c6:a6:9a:75:06:37:6b:3f:81:70:ab:b3:
1b:60:29:99:68:77:d8:9d:36:ef:17:56:48:52:04:
8a:98:a3:56:a3:08:07:69:43:04:a0:34:61:13:66:
0e:d4:3f:f0:99:ea:91:7a:cd:42:dc:ca:23:38:6f:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:21:C5:37:47:AD:91:D3:A6:BB:2D:12:00:13:AA:64:81:63:81:4D
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6d:e7:a9:49:5d:11:89:9c:0e:39:dd:6c:ee:46:ec:64:5d:
dc:ca:49:06:2c:46:d6:26:bf:49:bd:dc:d7:ae:1a:5b:44:44:
9d:e2:30:c5:ac:81:d2:07:be:df:0c:8b:b0:63:cd:2e:eb:4d:
c3:e2:b2:73:79:2b:c0:0c:de:67:ba:f3:bf:92:fb:66:55:e0:
e3:96:c7:ff:73:a5:4d:07:ac:1b:47:f7:9a:ec:17:ac:94:d0:
cc:3b:f5:cb:17:05:70:a9:b2:4d:e1:f7:d5:a2:05:af:45:ba:
35:9b:e9:2f:c9:56:49:b8:62:78:66:50:7d:91:31:ab:a1:22:
67:c4:d0:49:8e:41:b7:85:48:40:c8:a5:fa:b4:79:1b:d4:e6:
a8:28:01:f3:e3:d4:d0:a6:36:9f:f7:b7:6b:ba:4b:df:06:17:
b7:b1:80:b0:19:ea:99:41:fa:9b:fb:52:64:bd:68:b5:54:43:
8d:c8:df:a0:5b:fd:1c:04:ab:ad:5e:f4:75:15:0b:70:52:a5:
b5:0e:e4:7b:51:5e:97:37:98:05:75:bd:10:73:23:3e:06:4b:
4a:25:02:81:a4:20:70:4f:23:52:bc:5d:7d:a1:e3:0c:7b:f1:
12:16:67:bd:8e:49:c8:6d:36:e1:fa:38:d2:74:56:2d:60:15:
cb:25:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:51 2025 by rpki-client