Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: pmtKXLPTJqI7o/3Q8ttey8ed5wHSpKpanvPDICMfmhM=
Subject key identifier: 42:22:99:31:E5:28:15:84:31:FC:BE:31:A1:D4:F3:22:26:C7:38:A8
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 0198D4731C67152626C529B9CDF9549FA360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0B74
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: 0aQtmLNF3Tp7xqZr+hHMIv1aEU5/+Xc7po7yM1EGuuc=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1c:67:15:26:26:c5:29:b9:cd:f9:54:9f:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=42229931e528158431fcbe31a1d4f32226c738a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:1e:f3:84:aa:5e:1e:0a:d7:71:70:90:0c:
68:90:67:82:e1:93:27:45:a1:80:16:61:e3:79:6b:
8d:b6:be:ae:d8:42:a9:79:bf:b8:ac:af:57:94:69:
83:3e:5e:d9:81:35:22:5d:59:a6:a1:30:58:b4:23:
92:b9:d5:93:bb:d9:27:67:90:da:70:f5:74:8d:60:
cb:b5:26:3e:ba:f5:7b:48:ad:f7:df:14:23:14:c7:
7e:ab:17:59:d9:f6:2b:eb:2f:94:a1:ef:46:69:64:
7e:31:72:b0:03:3b:38:0d:31:21:f8:d8:6b:29:77:
a3:41:f9:92:49:89:96:d9:7a:8c:c5:66:b3:1a:fc:
af:3e:fd:0d:db:cc:4e:e0:eb:09:ff:33:d3:8e:03:
65:55:8c:7c:1a:6e:27:8e:e8:61:2d:27:c0:93:f9:
93:93:a0:96:6e:67:be:fe:6b:06:80:8c:80:44:13:
66:69:3d:c9:36:6a:ee:83:22:35:22:8a:ad:a9:94:
2e:f5:29:08:ea:6f:1c:07:a3:a3:5b:1e:07:bf:c1:
e6:0b:7f:1c:da:78:b2:15:9b:16:4a:fb:2e:88:5c:
4f:7c:fa:33:3e:d1:91:c3:a3:52:54:a0:86:78:a6:
1a:ea:e8:d3:74:f2:78:21:cc:6a:28:60:10:67:45:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:22:99:31:E5:28:15:84:31:FC:BE:31:A1:D4:F3:22:26:C7:38:A8
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:44:8d:44:2f:38:74:49:c7:45:67:e3:5d:1a:1a:b2:d1:cf:
1c:5f:fd:26:0f:83:b8:c1:72:83:e3:f5:d8:4e:a5:98:19:e9:
a2:e9:29:de:e0:3b:67:df:62:ea:13:d1:f4:69:57:5e:80:e0:
5e:40:8b:0d:22:ff:ef:b8:fd:52:b0:44:bf:49:64:f6:d2:f3:
49:9a:ee:23:5a:9b:c1:76:e9:b7:d2:21:9e:a0:79:8a:fe:1d:
a4:8d:b5:36:05:b7:a4:cb:70:56:b9:2c:b0:26:b1:d5:05:88:
1e:4b:ab:fc:50:82:bb:d1:a8:92:c0:9f:d2:a0:74:dc:e2:6c:
a0:39:50:27:b2:4c:aa:c5:72:43:a6:28:1a:55:f2:84:f1:8c:
9a:41:56:46:e4:39:4c:9a:69:d5:73:3b:72:66:f1:79:03:56:
88:63:64:6c:3f:10:64:18:e0:f2:6e:28:1a:02:e0:7e:5a:2d:
39:5a:ec:d1:8d:de:fb:58:6f:a0:24:67:3d:b4:58:fa:b8:de:
13:5c:ad:3a:02:10:a7:a5:27:6f:e5:11:35:16:a3:c8:24:99:
9b:95:9f:2e:78:88:ff:7a:18:52:8e:12:42:a2:9b:65:45:46:
ac:70:45:ce:5b:b8:12:71:fb:35:64:80:39:2b:af:37:d3:58:
03:2a:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:35 2025 by rpki-client