Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File: AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier: b/HnDQsY+TM6l6JW6RPW4xfw20oR7QAHXTcxfio6LgI=
Subject key identifier: 1D:DB:09:FB:25:E0:61:22:59:94:55:3F:CB:E4:87:46:92:C9:4A:CB
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 0198D54EB21D85550A30B392FE93250A4A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number: 10C4
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: 6zOYtzjXBD-DYg3_-ZbwFYlxy-U.roa (hash: bndS1Tzx6VzHh/lOs3pK1BLzPGIXQ0EzQwN4Ak3MXSs=)
2: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: UP+XjA7sGxJFCkSOnSMqGdPjEAERuLlVhYviQBhDB2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b2:1d:85:55:0a:30:b3:92:fe:93:25:0a:4a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=1ddb09fb25e061225994553fcbe4874692c94acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:d7:50:ee:ef:64:93:48:04:6e:1e:f0:4f:
ac:4c:34:bb:ff:13:e3:08:00:bf:9b:ff:8a:59:86:
1c:8f:11:ec:a9:cc:ed:3e:e9:8e:54:af:5a:c4:db:
82:76:0e:2b:e3:24:67:1d:a1:1c:88:0d:a2:2e:e6:
8b:7b:63:27:99:cc:a5:a1:84:ed:fd:96:f8:26:b1:
d2:e1:b8:30:b2:75:75:5d:24:c4:f4:ae:20:6b:38:
5f:bc:21:d3:12:5b:b6:f2:3e:47:7e:5f:d2:55:c3:
4a:31:ae:10:ae:27:8d:c6:de:17:f4:5a:de:5e:2f:
60:92:f6:23:63:36:54:36:16:5d:c1:50:8e:16:50:
3f:a6:fa:4e:37:0b:8e:cf:d8:a4:54:f9:8f:f1:d7:
56:01:a2:b8:e6:41:80:ce:a2:44:31:5e:11:97:6a:
73:b1:6e:c1:34:7f:75:50:50:33:c7:cd:30:25:47:
76:70:e7:4a:15:1d:0c:f4:36:ad:2d:3a:d9:e6:ec:
27:48:f1:87:0c:71:06:6a:a7:20:8b:d4:ff:18:72:
c9:34:32:ab:cf:1c:86:fd:4e:15:7b:d8:f7:9b:e0:
95:37:0d:c1:f9:2e:66:77:58:38:c5:3a:9b:7d:24:
e3:0b:09:5d:55:b0:af:d3:58:71:a0:28:d9:94:40:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:09:FB:25:E0:61:22:59:94:55:3F:CB:E4:87:46:92:C9:4A:CB
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:81:d5:dd:39:74:e2:5a:c7:39:d8:73:f3:d9:cb:7c:9c:9d:
3f:d0:ac:0f:09:cb:b7:1b:fc:d8:3e:1c:60:34:95:59:da:a1:
db:31:50:69:07:d7:6f:71:e7:68:05:14:45:39:52:89:5c:fe:
85:2f:be:47:92:7d:81:f3:b5:33:a9:75:a5:c8:55:65:09:e9:
2b:c7:4a:dd:90:a8:72:4a:4a:43:95:6a:67:f5:2b:cd:f6:6c:
6b:4b:62:c9:70:c9:a0:9f:5f:bc:3a:a4:f2:04:b6:61:74:99:
9f:df:ef:9b:5d:89:9c:b1:7f:fd:ca:85:9a:ef:2e:17:8d:d1:
66:ea:6f:10:36:64:17:54:5a:e9:44:5e:eb:ad:cc:31:8f:9c:
c9:65:95:5b:f5:8b:3c:dc:17:b4:eb:04:02:b0:ac:0b:03:1b:
35:1a:af:d5:d4:08:26:06:d3:e2:ad:e8:1c:2c:94:47:ce:22:
94:7d:24:89:e9:65:29:88:b4:4d:22:14:ba:01:7a:ea:78:85:
22:6f:57:5c:cd:27:a3:eb:ac:a1:55:ff:8d:c0:fc:dd:ba:6e:
3f:e7:e1:09:ac:4b:11:7c:55:90:cc:6a:73:84:8e:83:25:cf:
d6:3d:5b:34:63:0b:04:16:53:3a:ec:ef:2a:ee:32:25:9f:2d:
2a:60:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:21:10 2025 by rpki-client