Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier: 3nvTbqEKhFwyL+88Y8Nn8CAdJu//HM7Tla7MW1zJ9YQ=
Subject key identifier: 73:F5:73:0E:E0:6B:F7:65:07:23:76:79:AA:70:9A:2A:F2:AE:8A:A4
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial: 0198D69811A7E8DE9CE053D75FFC4D6A6F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:26 +0000
Manifest this update: Sat 23 Aug 2025 11:02:26 +0000
Manifest next update: Sun 24 Aug 2025 11:02:26 +0000
Files and hashes: 1: 2sc4xknukJW-o5vl5Fz96F0QucA.roa (hash: MbYv6i++8VmdaYHm6adLazhX2ff10i5IN4qgNm5FoPs=)
2: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: BDrkWwt4+qiih1Gzdzx7rqDNE23/nEJ+kBqt/fMM4BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:11:a7:e8:de:9c:e0:53:d7:5f:fc:4d:6a:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
Validity
Not Before: Aug 23 11:02:26 2025 GMT
Not After : Aug 24 11:02:26 2025 GMT
Subject: CN=73f5730ee06bf76507237679aa709a2af2ae8aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:b2:79:c3:91:04:99:85:58:8f:37:42:39:
c1:99:a0:33:ba:63:ea:72:c9:72:51:36:29:b3:38:
d1:86:b5:f9:4b:89:25:05:06:f5:b2:ff:2e:b0:b1:
a1:5f:3c:78:af:42:ae:0f:57:68:fd:59:8f:0d:a1:
b3:7c:ed:5c:eb:32:2d:38:4e:37:13:c4:08:5b:c4:
26:b5:22:f3:79:06:f8:f4:51:b7:cc:9b:40:b7:4a:
ed:56:c0:05:1d:01:8b:d1:17:76:a5:2e:cf:1e:d3:
8a:94:e9:dd:6f:9b:6b:ac:33:7c:0c:15:85:8a:4a:
a8:78:8a:6c:9b:d9:7c:8d:1b:5e:d6:9c:7f:9c:ea:
d8:d3:aa:d9:71:db:f6:91:ba:47:07:5f:53:3f:94:
83:df:0f:94:ca:41:61:3d:ef:f4:89:18:9e:8a:ee:
41:0d:23:d7:40:8a:a2:35:6f:5e:1f:6d:0c:e7:a9:
08:18:1a:b8:2a:bc:5d:37:8d:6e:a3:d1:05:11:3d:
61:96:da:0d:86:55:20:a5:3f:a4:57:8b:49:ba:75:
f0:8a:db:df:f5:8b:99:d6:5c:25:03:81:38:e2:8b:
92:b4:1b:87:9b:83:0d:92:5e:de:78:5c:84:af:3e:
63:fb:ff:99:2b:4c:db:be:13:12:2d:b7:4a:ab:75:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F5:73:0E:E0:6B:F7:65:07:23:76:79:AA:70:9A:2A:F2:AE:8A:A4
X509v3 Authority Key Identifier:
keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e9:a7:f9:40:16:e0:e7:6a:b9:f8:80:35:d4:fb:5d:12:12:
fb:3e:a8:d7:45:78:ed:69:a6:35:0e:6b:09:f4:d7:be:71:30:
7f:f5:b5:44:c1:86:65:f6:79:1b:01:fb:1e:af:93:4b:bf:6f:
93:b9:c8:5c:2a:61:4f:ef:55:5f:95:55:c9:ad:71:20:b8:6e:
f1:79:0a:26:23:08:32:c4:9f:b5:00:64:c2:af:7d:4d:21:86:
9f:0d:d1:86:43:f3:95:ea:ad:6d:f6:eb:4c:71:97:92:d8:45:
93:df:9d:42:2d:bc:65:eb:3a:36:a9:ba:cb:35:4b:ae:c9:59:
9a:45:54:7d:03:66:87:6d:75:cd:bb:5b:0e:25:ec:71:37:39:
86:5d:ad:07:a7:1b:32:3b:2c:24:5b:df:a6:df:1a:f7:87:fa:
62:b7:47:15:d8:29:cc:5f:05:ee:f1:79:7e:b8:04:14:07:14:
8a:92:d1:17:b5:61:a4:55:6e:3a:25:fd:17:70:b0:45:0b:19:
65:f4:90:b5:80:f3:4d:4f:52:b4:4d:03:a5:e8:7a:27:a0:86:
11:1b:25:56:b8:d3:da:d7:5a:eb:e6:3f:e7:c9:cf:eb:9b:e3:
29:5e:c0:4c:10:7a:5d:25:1f:1a:f9:f1:4f:7b:dc:79:41:b5:
2a:d7:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:04 2025 by rpki-client