Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: Ib1R5KENlBL8UQi5Gmc240yly1Glh0F12rF39GpRnFk=
Subject key identifier: 3D:B4:60:D1:7D:40:A1:0D:3A:9A:7D:D5:88:A3:38:DA:CA:8B:A2:E6
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 0198D473492B4A202C48F3D282E211ECB044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:01 +0000
Manifest this update: Sat 23 Aug 2025 01:03:01 +0000
Manifest next update: Sun 24 Aug 2025 01:03:01 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: YNBx1SYNyY9sSfp4+wkhRgLRI3VY4ptYYkgv9F8031c=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:49:2b:4a:20:2c:48:f3:d2:82:e2:11:ec:b0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Aug 23 01:03:01 2025 GMT
Not After : Aug 24 01:03:01 2025 GMT
Subject: CN=3db460d17d40a10d3a9a7dd588a338daca8ba2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:30:13:54:c7:d6:67:3a:cd:75:9f:dc:71:
96:c8:5c:c3:18:f8:28:c5:57:4f:ab:44:03:0b:2a:
f6:8e:72:9f:86:b8:ad:a4:12:db:99:d5:37:05:b6:
81:0d:b8:c0:e6:8d:b8:9e:14:43:3d:4c:21:a2:3f:
0a:2f:09:e2:c4:21:4f:50:0b:fc:c2:27:82:e2:ce:
52:53:49:f8:13:66:b7:2f:d1:16:46:7c:4c:1a:94:
5e:00:92:00:7a:28:6f:05:06:b8:c1:ac:e6:c4:d3:
12:75:8b:61:45:5d:1b:79:15:64:c6:a5:eb:00:04:
68:51:4e:ec:d9:49:1e:7a:01:4b:1b:5b:ba:7f:03:
83:b2:87:09:55:a4:49:60:9b:a5:b3:ed:5d:80:1b:
1a:3f:5f:41:d6:8e:05:18:2a:07:63:c7:79:48:60:
1c:f9:b3:33:b1:13:a8:d8:3b:81:1b:1d:6d:57:4c:
0d:d8:d7:27:20:6c:e5:77:32:fb:ce:8f:e5:fa:35:
9d:14:fa:56:a1:e6:78:93:da:af:db:ee:b5:02:52:
d5:b8:9e:7d:cb:44:08:72:4f:2e:bc:7f:21:c3:44:
cb:df:4d:f2:a1:f1:88:66:b4:8c:59:7a:82:be:88:
a1:13:3d:c2:9c:70:12:11:9b:87:11:68:d7:35:a1:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B4:60:D1:7D:40:A1:0D:3A:9A:7D:D5:88:A3:38:DA:CA:8B:A2:E6
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:50:40:01:0b:97:c3:c8:00:2b:e8:92:25:f3:74:5c:af:b3:
cf:c9:22:62:dc:80:bb:7c:32:aa:1a:f7:14:d0:cd:8e:6d:54:
b6:99:b9:2e:38:3c:ae:49:61:27:aa:6e:39:69:72:c4:2c:a7:
72:fa:af:fe:c6:d7:19:1e:f5:d6:9d:7d:8b:e7:18:8b:31:cd:
3e:59:ce:81:ef:8f:15:c0:04:e8:cd:2f:52:e9:35:ef:b7:18:
62:7f:c7:0b:6e:8b:0b:5b:ef:c1:b8:fc:a5:82:2b:e9:4b:bc:
7f:86:b6:b0:01:7b:ad:6d:50:80:88:a9:3b:55:b5:91:4d:5a:
d5:1c:b3:c6:d4:5e:b2:36:e8:1c:01:10:8d:41:08:70:a3:c0:
5c:d6:d0:e6:d0:72:11:ed:ea:0e:40:e1:06:37:e6:42:96:ae:
b5:7e:1f:90:e5:d0:46:93:f8:ee:a7:d7:a8:1e:4b:06:17:cf:
d5:b1:8d:14:eb:e4:ce:9e:53:ea:a9:b6:a2:a4:20:01:8d:68:
9c:29:21:09:a9:4c:97:38:5b:7d:51:0d:9f:e4:39:10:d8:b5:
11:ad:30:88:d4:a7:f2:f4:6b:ab:1d:1e:ba:12:4a:ba:7b:d7:
ca:f3:3d:64:22:71:8b:7d:0a:a6:54:8d:1a:7a:d7:e3:2d:48:
65:2a:70:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:21 2025 by rpki-client