Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: fHFwQ95rwo4zDm6wNBN0H9J9s6aGKrfFgk06ZZiNDoQ=
Subject key identifier: 39:D9:A8:82:F4:26:7B:8F:65:8E:76:40:1A:A4:99:32:4D:86:00:AF
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 0198D54EC5EB1A8BFF589C642126037E896A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 029D
Signing time: Sat 23 Aug 2025 05:02:46 +0000
Manifest this update: Sat 23 Aug 2025 05:02:46 +0000
Manifest next update: Sun 24 Aug 2025 05:02:46 +0000
Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: GkjmsTcM3l98IyltQZ4s8WG1NDrpfZW2AX2eRoCE+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c5:eb:1a:8b:ff:58:9c:64:21:26:03:7e:89:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Aug 23 05:02:46 2025 GMT
Not After : Aug 24 05:02:46 2025 GMT
Subject: CN=39d9a882f4267b8f658e76401aa499324d8600af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:fb:a8:be:a8:7d:97:e2:0d:08:70:9b:a4:
ba:ef:84:61:98:c3:59:0a:87:51:be:af:cd:6c:f7:
86:09:6f:7f:93:29:c1:c8:d5:1a:9b:81:82:d0:a5:
e7:57:94:b5:96:7e:b7:a9:1e:9b:67:03:e0:11:98:
55:00:e7:80:45:ff:c9:28:2e:a2:96:65:1d:27:96:
87:8a:b8:14:8b:a3:fd:1d:81:d4:82:8d:9a:b6:31:
25:0f:73:8b:7b:05:54:7d:bf:fb:c0:f3:2c:6a:df:
fd:4a:66:1e:67:6e:9c:af:db:8f:b0:2a:dc:e8:00:
1b:db:43:c4:af:c7:0e:47:4f:92:ef:90:b2:b7:41:
b0:53:9a:f4:d0:eb:33:0d:19:5b:a4:7c:95:f4:d4:
08:e8:c6:9a:45:98:65:2a:08:b4:7d:2a:2d:d7:55:
0b:6f:64:f8:52:80:35:57:03:f3:f0:ee:da:28:d1:
07:91:61:50:ca:05:6a:72:51:ba:5a:fd:58:8f:14:
b0:3d:d2:16:88:d1:d0:2d:fe:63:11:c0:5c:f0:4e:
3c:39:01:93:cb:06:24:6e:19:80:71:9d:e5:77:74:
d7:92:e9:3d:c3:6b:14:f6:81:7f:6b:91:37:52:34:
50:b6:58:d0:72:3b:c2:d1:b2:db:1e:8b:dc:ca:2d:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:A8:82:F4:26:7B:8F:65:8E:76:40:1A:A4:99:32:4D:86:00:AF
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d2:04:3e:76:ad:aa:c8:85:49:6f:2b:14:99:01:dd:83:27:
7d:1e:c3:cb:48:bb:cf:7a:e5:cd:6c:66:03:8e:76:18:3a:ff:
cf:7c:dc:b7:73:c6:90:34:99:d1:3e:9f:1c:8a:f3:c8:e4:83:
ac:86:99:81:50:00:81:9a:0b:6d:6e:f4:d8:21:f5:5f:24:ee:
78:b3:33:7c:a5:04:cc:5b:63:2d:78:51:77:8c:71:45:1e:ff:
0e:81:08:c3:44:4f:2b:f5:70:7a:95:f0:90:4d:d7:03:62:b7:
8d:13:53:f7:a3:bd:5b:15:bd:bf:79:14:2e:cf:98:d9:07:e8:
07:d0:fc:71:e3:22:ca:e0:20:14:0a:b4:82:7a:61:bf:f1:0d:
7b:46:e2:8b:9c:da:d9:7f:75:b4:8a:90:b9:44:7a:a6:10:d2:
4a:4a:84:7b:39:cd:a7:b9:fb:13:05:94:57:a7:80:a4:e6:68:
67:48:65:5c:cc:bb:f0:c9:bf:91:2d:67:95:32:9f:0e:b8:b6:
5a:0a:f7:fb:ca:6a:b8:1c:30:c3:9e:f5:e3:69:64:ab:c2:e8:
c0:e3:e0:69:f3:6e:b3:54:62:8a:2c:24:96:42:22:38:be:21:
af:35:aa:a2:52:c9:9e:88:f2:68:6a:67:2f:ef:71:ae:2b:1e:
e4:de:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:33 2025 by rpki-client