Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: SeVtiVJhgOB646U8KLFUgGkRkm2L2nibI5gJTvMnUsc=
Subject key identifier: 4B:17:E5:44:25:7A:D5:4F:32:98:8B:BB:69:2B:6E:92:50:4C:25:62
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 0198D8BD7F6D199481185C63E7D070D14D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 07A9
Signing time: Sat 23 Aug 2025 21:02:34 +0000
Manifest this update: Sat 23 Aug 2025 21:02:34 +0000
Manifest next update: Sun 24 Aug 2025 21:02:34 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: VcWCKjDccQ5r3QIOWSsoKLOr8RDVsJj3MSy1pyh+cUQ=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:7f:6d:19:94:81:18:5c:63:e7:d0:70:d1:4d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Aug 23 21:02:34 2025 GMT
Not After : Aug 24 21:02:34 2025 GMT
Subject: CN=4b17e544257ad54f32988bbb692b6e92504c2562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:bc:28:17:88:04:10:c9:0c:78:b7:82:6d:
0c:1c:ba:51:b0:e4:a5:47:d7:3e:0b:f9:36:49:ed:
a4:53:87:0d:35:a2:d5:c2:9b:73:e1:06:25:93:25:
14:5f:69:74:18:b0:1c:11:49:4b:db:3f:96:cd:7e:
44:83:8c:1c:fc:7a:9c:59:15:2f:01:24:3b:90:f7:
6a:1d:fd:14:9f:fb:b1:cf:e4:c3:ec:3c:ad:e7:8e:
e2:7d:03:3c:e8:7f:5b:05:cf:86:1d:98:74:78:d7:
cf:71:d6:5d:8b:e1:86:36:dc:df:6b:08:24:78:a9:
f8:21:70:a2:0e:d0:31:5c:dd:28:d1:4d:ca:36:92:
4a:81:64:6d:95:16:3f:76:8c:f3:5e:5e:ff:6c:2e:
57:c3:df:b0:b3:ce:12:68:33:f2:42:b8:7a:7c:52:
2d:db:57:50:2a:80:88:43:f5:63:e9:31:50:0d:23:
1a:1e:28:2b:92:ee:5b:71:f0:19:be:e2:e9:8e:8d:
cf:ac:3f:57:ce:9a:bf:d2:00:d0:6d:57:7b:1b:48:
40:3a:56:d5:b2:05:e0:19:f7:36:fd:aa:a3:57:c1:
18:b6:e7:d9:a8:00:13:20:5e:83:1a:47:7b:ff:72:
68:c2:b3:1d:17:d1:fe:50:57:a0:1e:e0:e9:60:3a:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:17:E5:44:25:7A:D5:4F:32:98:8B:BB:69:2B:6E:92:50:4C:25:62
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6b:26:5a:37:32:3a:f8:1a:09:a2:76:b7:41:dc:81:48:1b:
ff:ee:aa:93:77:26:24:c5:6d:cd:66:49:12:b3:8f:95:55:ea:
13:64:27:fa:3e:0b:52:23:5b:d6:4a:f4:10:cd:a4:29:85:b4:
fd:17:aa:3c:9e:11:60:5b:0d:fe:11:0b:26:af:54:6f:36:cd:
ef:e5:62:ec:e9:dc:b9:ba:e9:b7:74:ad:88:47:c3:80:cd:76:
0a:68:02:24:5c:06:fe:3f:dd:a6:08:f0:5b:3c:99:ad:ff:42:
84:8b:40:f2:da:1e:73:00:8d:60:08:b1:9c:fa:9d:2b:b0:b5:
bb:8d:f3:d4:ad:ef:5f:50:f4:46:6e:04:0a:a3:e0:01:b8:4d:
d0:14:00:c4:ee:53:bb:5e:aa:b7:2c:50:9e:6a:44:b8:84:80:
13:46:6f:7a:13:9e:87:72:28:c1:aa:70:2c:1f:f6:2b:f6:47:
2b:8b:bc:18:36:c7:82:68:f8:e0:f9:69:8f:29:3b:37:c3:8e:
76:ea:1e:02:2d:78:21:f7:40:a7:14:bb:d4:29:09:fc:a4:ec:
ef:c4:19:b4:16:7f:4d:30:63:6c:e1:20:9b:10:46:34:91:5c:
c9:84:ee:22:9e:a8:e9:bd:5c:fb:9e:58:52:13:ba:6b:14:8c:
95:02:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:55:49 2025 by rpki-client