Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier: yjjavZGBBY5ZdWHmng+TDYrX33293TMdT1vZXqDycJc=
Subject key identifier: FE:5A:EA:77:3C:D7:89:5C:B6:AA:14:67:BE:F5:D8:C8:6D:61:A9:26
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 0197D62B447310201C3AA94C4BCDF45BDA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number: 1034
Signing time: Fri 04 Jul 2025 16:00:49 +0000
Manifest this update: Fri 04 Jul 2025 16:00:49 +0000
Manifest next update: Sat 05 Jul 2025 16:00:49 +0000
Files and hashes: 1: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: xt3EqyYBcNKCa9J3TNzPGmovO0+/ewpsjyM3seQX+n8=)
2: bz3fbBHm2ElR6vxL1-cqQoSLlk8.roa (hash: iWv2k5/cNl7lJrUkdCeVYiFcY+HPf8sJg4JbV1Gwcrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:2b:44:73:10:20:1c:3a:a9:4c:4b:cd:f4:5b:da:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: Jul 4 16:00:49 2025 GMT
Not After : Jul 5 16:00:49 2025 GMT
Subject: CN=fe5aea773cd7895cb6aa1467bef5d8c86d61a926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:40:92:f3:f6:47:fb:6a:da:90:25:e9:47:
17:02:81:39:a0:ba:66:20:ea:4a:25:65:b6:88:3d:
95:12:03:c5:56:e2:34:b7:99:d0:3c:48:7a:49:1a:
be:9e:ea:9a:aa:ae:68:bb:92:b8:57:2a:1a:94:00:
b8:f0:55:1d:1b:67:05:fe:15:81:d9:0d:2d:db:27:
78:fc:7f:d0:d5:6f:0d:83:d3:f2:b7:c6:d1:72:14:
2e:fe:a1:11:6c:e1:01:db:a8:a5:31:3a:35:db:0e:
91:4e:23:3d:1c:48:bb:5f:c6:70:bf:0c:ff:f6:ed:
cd:a1:31:d2:f5:20:5c:f4:79:a2:ad:ef:4c:1c:95:
30:96:76:90:7d:3e:ba:9a:6b:78:7d:0e:ec:76:cd:
7e:83:25:49:04:cb:f5:e7:ac:16:57:e3:64:56:38:
88:07:6e:3e:2b:42:ea:07:c8:32:be:fe:b1:cd:81:
25:ed:2e:34:83:ab:f7:1a:0a:50:cf:54:28:0c:55:
23:6a:79:e3:15:a2:6e:cd:c2:3f:73:50:0c:01:83:
f3:98:ab:7a:98:cb:89:64:1f:e2:57:60:e9:5d:7d:
d3:0e:84:6f:85:ae:11:59:4b:ad:f3:dc:80:f3:76:
fb:fa:01:69:79:ad:4b:15:1b:6f:ec:ab:c5:11:dd:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5A:EA:77:3C:D7:89:5C:B6:AA:14:67:BE:F5:D8:C8:6D:61:A9:26
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b2:cb:6b:23:f5:36:cb:36:fc:1b:b8:2f:a7:0b:a4:1f:3f:
e1:1b:24:1b:b0:01:f0:57:4e:54:f7:29:82:cd:70:58:2b:db:
5d:c7:ab:f1:d2:28:cd:e6:1c:28:c1:aa:85:7c:43:35:ee:7e:
c0:55:b3:42:45:a5:8d:71:ea:52:5d:32:3d:c0:18:62:26:b5:
9a:4c:3f:d5:65:5c:54:ec:2a:69:22:82:bf:6e:41:fc:f6:0b:
05:be:1a:c1:97:b3:a9:b4:8a:cb:4d:bd:0a:75:f9:1f:02:46:
a3:26:56:7b:8f:47:1d:e3:85:c7:0e:5b:bc:91:73:e9:bf:b3:
ed:31:d8:9b:6c:bc:bf:fc:03:2e:bb:f8:54:b4:95:3b:7d:42:
42:e1:ec:17:b4:b3:14:23:8a:14:bb:74:3a:e9:d0:12:96:43:
28:60:7e:c3:8a:2c:f2:e8:8f:40:81:58:1c:a1:52:e7:6e:03:
41:2f:7e:83:e7:8e:02:00:0b:40:19:c8:b0:ad:3b:ad:9a:4b:
54:bc:18:a9:86:64:d4:1c:5b:48:e7:83:b2:4d:16:d7:d6:9c:
64:05:f6:6b:52:59:74:43:5a:45:07:32:76:7c:7b:bb:ea:11:
c8:c2:15:fd:87:52:0d:3d:ed:6d:bd:3a:33:fc:be:97:28:9b:
6f:e9:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:44:54 2025 by rpki-client