Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: eRhpIg0jWn/bA6kv6HwzVKNBfAZxhSx0eOikyD2438E=
Subject key identifier: 72:E7:47:6A:A1:CB:80:FC:2F:D8:EC:1B:C8:8E:2F:05:54:7F:5C:AA
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 0198D4E00831FDB82925F078B9304CD0C47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: 01DC
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: OXOnare6dVM-zLYHWOSVEGQTw18.roa (hash: dcwy2HRQRShbBLQYZ7Zn1DYc8vKW+hy7H3ObhuzMkSQ=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: TcHUQXTJiR4IpfnWyycwesETAzda90keFup3VyKEt3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:08:31:fd:b8:29:25:f0:78:b9:30:4c:d0:c4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=72e7476aa1cb80fc2fd8ec1bc88e2f05547f5caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:ee:e5:c6:70:a8:6a:cd:a7:2f:c8:b0:a6:
7d:9e:ea:05:21:d8:62:f7:88:e4:5d:97:02:14:8f:
7f:9e:ce:68:bc:66:83:66:72:a6:e7:c3:5b:1a:67:
9d:fd:60:cb:d2:9c:31:37:df:38:78:3d:a0:be:b9:
5e:68:5f:d1:36:93:97:f4:6b:31:00:fe:5b:d0:0a:
f4:e1:08:0b:d4:76:7d:5f:34:a9:75:d8:49:ce:17:
22:95:01:56:db:c1:48:5f:d1:45:66:08:37:a9:38:
74:8a:5a:90:29:95:f1:b0:3f:2e:54:be:40:d9:5f:
22:83:48:ff:01:01:36:23:35:45:f1:69:93:ea:df:
b2:64:c2:ae:2d:4f:ab:3e:b6:c3:6a:28:77:43:69:
37:67:38:79:ff:0f:1d:d3:57:66:e1:58:74:ea:08:
44:b2:51:4f:9f:96:01:97:eb:b4:40:f5:d2:ab:10:
06:be:06:cf:8f:cf:40:6d:72:09:15:37:b5:a2:c2:
c5:58:07:ce:02:56:2b:99:5c:4c:e6:8f:fe:7f:01:
18:33:cb:21:5c:2b:92:fe:42:44:15:eb:64:41:e1:
9b:57:04:a7:cf:d9:fc:4f:b3:3f:33:58:ff:7e:91:
bc:ba:72:9e:c2:50:e4:03:2e:3f:b6:08:8d:76:45:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:47:6A:A1:CB:80:FC:2F:D8:EC:1B:C8:8E:2F:05:54:7F:5C:AA
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d7:7e:6f:75:8b:4a:6f:87:99:c7:7b:4a:ca:1b:a4:13:5e:
a1:82:64:96:c0:12:a0:e9:f7:32:13:ac:a3:e6:eb:5a:34:68:
5c:fb:f4:bc:ea:cd:04:a2:25:ca:37:5c:7a:67:a3:e5:14:05:
e0:4f:c5:df:28:ed:e5:51:07:76:2d:6b:d9:e6:d9:71:d4:15:
b6:15:ed:fe:78:60:8f:1a:81:f9:05:c2:00:d7:cc:93:a8:fd:
bc:a5:fa:7e:4f:87:00:fa:1d:75:97:4e:22:d2:ab:24:23:0f:
95:96:26:ac:91:83:bf:7f:fd:70:bd:25:f0:13:1b:1a:51:4f:
58:81:0b:4a:16:1a:d8:9d:a4:50:ad:a3:38:3b:f0:15:60:9c:
aa:cc:a6:db:46:a1:0b:fa:eb:8d:52:9d:4e:c2:8a:8e:cf:55:
42:63:22:cc:f5:f1:ac:a6:d7:46:47:e4:2b:03:ad:6d:dc:c5:
10:a7:1d:09:80:a9:b2:8b:e5:58:05:8e:7e:95:07:db:aa:80:
d1:8f:cd:ed:ef:08:1b:2c:00:96:9c:a4:3f:11:0a:6c:5b:41:
d3:db:d0:ae:90:4f:7a:fe:6c:18:20:21:46:ed:5b:b9:7b:69:
1e:71:b6:4b:50:08:ff:29:33:64:b6:92:3d:1c:de:b0:1f:ce:
d1:cf:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:06 2025 by rpki-client