Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: vjcPiv+WVA2MarhWJjf7zkpQDgEZAHyHx1/E+2t/dgI=
Subject key identifier: F1:25:3D:DD:DC:6C:77:D6:AA:46:3C:72:5A:D1:B8:32:EA:72:B2:56
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 0198D515808957A6DDD421B79BCDB26A4A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1362
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: /LT5eN0dyC79GP5mn6Pt+Ybsh0y6nUadgwWEl5s0XMk=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:80:89:57:a6:dd:d4:21:b7:9b:cd:b2:6a:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=f1253ddddc6c77d6aa463c725ad1b832ea72b256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:87:fc:dc:da:12:ca:66:db:9d:9c:f7:3b:
56:aa:a8:0e:1e:54:70:be:67:06:8c:75:9d:69:f0:
8e:21:da:65:46:1e:0b:b1:f2:7a:6e:ce:5f:32:37:
4c:1f:55:03:35:4f:15:fa:13:28:7b:b6:61:09:e3:
66:16:37:b3:40:66:75:57:47:02:c9:76:a5:d0:cc:
81:b8:c7:0a:59:bb:92:9c:0a:92:24:33:ea:42:27:
0d:51:55:f1:24:72:01:c8:03:06:9c:61:cd:b8:4c:
53:df:cb:b1:2d:53:84:62:2d:fc:06:1d:9a:2c:69:
81:0e:97:fc:1e:22:dd:a4:4f:e6:5f:c5:7e:f0:b5:
20:b4:ad:59:62:19:6b:82:d4:09:7c:54:20:a6:ba:
83:d8:bd:69:4e:5b:0f:e3:16:38:7d:e5:ed:a9:f2:
d2:4c:f5:e0:b7:ca:fc:55:1b:b6:18:eb:18:09:fe:
1b:85:49:1b:62:f3:2f:e6:85:b2:c9:98:f2:d6:cf:
8d:b9:fe:64:35:54:b6:4f:3d:88:eb:91:db:8d:c9:
cc:06:8c:40:2b:bb:cf:b1:6b:39:fc:14:3d:32:1a:
42:82:95:53:b4:8d:eb:66:21:6a:1c:b7:11:66:2e:
d3:80:dc:d5:32:2f:b2:52:c5:93:1c:41:94:e9:4f:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:3D:DD:DC:6C:77:D6:AA:46:3C:72:5A:D1:B8:32:EA:72:B2:56
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e8:e8:44:4e:f5:c1:6d:5a:34:5b:25:93:2d:b2:75:0e:be:
a0:f0:19:8e:0e:bd:e5:87:4e:88:a0:32:fa:8e:50:a1:9f:b8:
33:4d:9d:dd:b9:f7:c8:c0:d8:f8:e7:39:3e:f2:0b:ff:71:0b:
e1:53:d8:c0:93:52:de:68:84:00:8e:b7:37:8f:1a:8a:da:cd:
78:7a:01:a8:3a:af:80:1f:d7:90:29:7c:e6:6b:1f:65:eb:a9:
07:43:17:5e:c3:d6:d8:f6:54:f6:76:c2:f0:ec:ad:8a:d2:6e:
7e:21:5c:27:79:c6:53:e6:83:ea:88:d8:b7:ba:c2:0b:a4:4b:
af:5d:1f:70:06:55:5d:17:33:42:69:2f:bf:36:3f:45:80:be:
03:9d:56:a2:84:81:db:b4:1e:5a:60:10:0f:72:bd:6b:69:81:
09:6f:03:8d:7c:16:57:bc:f6:bf:a1:60:e1:ce:ba:04:75:fb:
22:96:eb:14:47:3c:23:be:d0:2a:52:6a:78:f5:61:bb:7f:a1:
bd:11:7a:ed:2d:da:ea:cd:d3:32:0f:9a:94:0f:5b:63:bb:d2:
6c:84:c1:98:1c:59:59:f2:64:03:50:24:76:a2:c2:d8:f8:1a:
5d:6b:1a:74:a9:35:3c:62:77:33:45:20:28:e0:dd:57:1b:15:
98:b8:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:13 2025 by rpki-client