Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier: apBZ43kCVonlJ0SNZ9L8ez3VwHV0APz2cnJ5ELSKuEM=
Subject key identifier: A8:D5:37:15:13:3C:FC:4D:CA:D9:6A:61:2A:BC:60:AD:EE:A2:6D:A4
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial: 0198D65FD9B5565041A61D50DE2AF0697456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number: 0533
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=)
2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: InswFf2w87AEAP+yqMIRrVs8WDPMvdG4zfi0ayc/Ps8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d9:b5:56:50:41:a6:1d:50:de:2a:f0:69:74:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=a8d53715133cfc4dcad96a612abc60adeea26da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:1f:42:61:32:ef:e3:bf:4b:e3:a5:e2:a1:
5d:e3:80:36:3d:12:50:13:6c:ee:2c:66:c5:e3:39:
7e:64:4a:a1:66:aa:48:8f:bd:a8:60:fe:a5:ea:cf:
e3:21:00:1e:58:0d:17:23:45:26:0e:cf:17:c9:da:
c6:cd:a8:72:25:f4:93:83:8e:f3:d0:76:22:19:71:
19:fd:7a:be:c0:11:88:09:01:28:78:80:18:38:1b:
d2:03:7a:14:40:3a:78:15:54:ee:de:eb:7a:a8:c9:
ae:b5:18:e1:24:b0:da:67:df:68:ba:4a:bf:a4:1b:
d6:72:13:d0:9f:01:94:40:d5:ca:cd:8e:f1:d7:ca:
ff:39:ed:93:1d:00:da:07:b8:95:89:14:08:0e:7f:
4a:2b:ed:33:f7:a7:88:38:6b:23:0a:47:71:7c:8b:
32:7d:e9:ba:17:ee:c5:ce:10:ba:c0:77:37:14:19:
75:da:92:f8:70:91:20:7b:0b:f3:27:09:d8:91:88:
ea:d5:9c:ff:0f:8a:ea:3b:e8:71:9b:f9:b1:d0:6e:
a2:86:a1:5d:b8:a6:26:85:cd:ca:4e:69:65:ca:ef:
8c:95:05:6a:98:ef:27:3e:bb:68:00:b4:fc:bf:ba:
31:24:ef:fa:50:61:27:21:2c:e5:bf:94:4c:2b:fb:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:37:15:13:3C:FC:4D:CA:D9:6A:61:2A:BC:60:AD:EE:A2:6D:A4
X509v3 Authority Key Identifier:
keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bf:b5:ef:83:fc:0c:2a:42:e4:65:65:29:b2:62:4a:d6:1a:
cd:2d:3a:49:ba:c3:65:b6:c5:a9:40:51:0b:22:91:d9:ed:36:
14:44:ae:df:2e:7c:fe:c0:e8:79:c4:24:32:65:af:be:83:ca:
8a:53:40:cf:63:4a:96:1b:bf:a2:ca:7e:e5:7f:4b:3e:19:01:
cc:b1:67:bd:a7:81:31:9b:e2:ee:77:06:6e:68:43:90:7b:b6:
05:86:fd:bb:e7:97:20:94:32:be:0b:29:bc:76:7b:72:07:39:
61:4b:c6:da:8f:4b:c6:e1:3d:f6:b5:4a:b5:4b:76:19:45:84:
86:35:b7:56:c4:aa:61:8f:8c:11:11:97:f9:97:34:fb:5d:f2:
03:f5:c7:1a:c5:72:b6:b5:dd:95:7e:21:8b:1d:99:4a:39:49:
3a:ed:53:a4:57:93:42:67:ff:7b:d4:86:78:b5:1b:4c:c4:54:
6d:5c:73:5f:0e:49:23:0e:d7:98:82:7e:9a:f2:2d:e8:62:20:
87:96:8d:1b:d6:b8:d9:0c:8a:2e:4f:2e:be:48:7b:ee:0e:ff:
26:f3:24:f7:2f:c3:21:e1:59:6c:81:bc:e1:0c:8b:8f:9c:8a:
f7:2f:ae:de:ad:1d:95:85:9f:64:85:8b:89:80:02:6d:52:af:
71:45:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:52 2025 by rpki-client