Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: xYqQsi7sWe8M1L5JqmNXMfy3pAarcx7V2Me7PLXD5tA=
Subject key identifier: D4:DD:49:23:2F:F2:3D:1D:7C:AC:1A:78:97:AF:94:E3:5C:5B:45:1D
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 0198D47378475B706090EF8CB661E03176E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0D65
Signing time: Sat 23 Aug 2025 01:03:13 +0000
Manifest this update: Sat 23 Aug 2025 01:03:13 +0000
Manifest next update: Sun 24 Aug 2025 01:03:13 +0000
Files and hashes: 1: Hk8OntQ5zqlTFn040DQPSldzYiE.roa (hash: KP+8WLsncYNj0fRydYrCKf8Ah12qAHLXgrBdfpvlTN0=)
2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: B4sWqsdnWxbWL0EjGWqxArItPCiKuhUQry4OWd3inMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:78:47:5b:70:60:90:ef:8c:b6:61:e0:31:76:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Aug 23 01:03:13 2025 GMT
Not After : Aug 24 01:03:13 2025 GMT
Subject: CN=d4dd49232ff23d1d7cac1a7897af94e35c5b451d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:8e:79:b1:63:90:3b:72:75:f2:6a:79:c9:
8c:18:ba:98:dd:c2:88:63:b2:1d:cd:55:d1:2a:58:
a4:35:97:00:a0:53:13:9b:d4:1c:3d:3a:2b:9f:a2:
7c:ad:84:92:00:6c:7d:93:94:51:ab:db:14:32:fc:
e5:cc:ae:e0:23:9e:00:75:38:91:b8:30:2b:83:c4:
3e:3c:03:1d:87:37:67:ce:a6:a1:dc:32:51:34:8e:
f2:cb:3d:b8:54:47:f6:a0:bf:6f:b5:03:1f:75:cb:
ca:75:e2:bd:7f:72:ac:c2:fc:4d:94:bf:fd:36:90:
1c:59:f1:ee:43:16:22:6a:18:32:7e:78:e7:8f:49:
7d:f5:c9:f4:f3:9f:d7:a8:ac:94:61:aa:7a:09:f2:
cc:07:2c:c7:eb:79:4b:c1:06:e4:14:8f:99:00:bb:
c8:64:da:06:a3:1b:a2:aa:91:bf:3d:28:0b:89:3e:
17:06:2f:61:36:61:d0:ff:bc:3e:a5:d2:39:3f:c7:
6b:9c:74:c5:d9:a8:eb:12:38:a2:d8:63:dc:6b:5f:
3c:37:10:99:7d:68:f9:d0:de:49:50:c6:b4:88:29:
c2:43:d6:43:15:3c:f0:92:b2:19:52:3c:98:0c:82:
6e:94:ed:d8:fd:51:22:16:e9:50:8b:05:1f:f3:90:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DD:49:23:2F:F2:3D:1D:7C:AC:1A:78:97:AF:94:E3:5C:5B:45:1D
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b7:4c:56:c2:4a:92:d5:4b:b2:ca:c1:02:5a:f8:9c:31:84:
19:6e:ad:45:a2:4b:7c:32:1f:08:a3:3b:4a:d7:9d:0b:3d:09:
6d:cb:81:7c:58:5e:d4:15:d0:90:15:78:9a:12:7c:11:a9:c7:
61:97:16:42:4d:25:b2:db:28:c4:a7:98:17:f9:eb:e6:16:32:
e5:62:e1:aa:cb:ca:f2:85:38:c7:88:0d:2d:c7:79:6c:a6:e0:
73:ca:dc:b7:ad:4a:ef:71:5d:86:05:eb:aa:64:ad:67:27:2c:
da:99:cf:f8:d6:f1:be:61:da:a7:6b:20:34:a2:c4:da:86:f7:
7b:18:aa:15:9d:ee:ba:c5:6f:b2:f1:35:3d:09:cb:81:d3:80:
47:30:0f:87:d5:21:95:fa:84:b1:35:49:52:3f:73:76:e8:58:
04:f8:c8:07:30:a0:73:47:0d:32:0f:31:48:d0:7e:54:77:c3:
8e:2b:55:32:4a:b2:1e:53:1a:05:77:c3:0b:23:3e:d0:a4:b8:
9f:cd:50:3e:37:19:49:ab:4f:57:78:6c:83:d9:81:03:aa:c5:
9b:e1:76:c7:ac:cc:fa:16:ca:d2:47:48:00:13:44:60:c9:ec:
c0:59:19:d0:ba:3e:a5:1e:0b:85:0e:63:e1:89:22:db:4a:2d:
d1:36:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:21 2025 by rpki-client