Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: o19pBiXJYfp5pmZzuGjm6FOKB6Lr8aG0uyQzy7NCfJw=
Subject key identifier: FC:46:27:E0:3D:6B:F1:FC:1D:96:00:42:B0:23:78:90:61:71:9F:68
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 0198D4E0EDB1E1A49C31508CBA9FBA82D684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 0219
Signing time: Sat 23 Aug 2025 03:02:47 +0000
Manifest this update: Sat 23 Aug 2025 03:02:47 +0000
Manifest next update: Sun 24 Aug 2025 03:02:47 +0000
Files and hashes: 1: EUMDV_UDCQxt2Q9g7Ql8VQtC-w4.roa (hash: 4NT4MxUUdEci/yqv7me2MCFqkfGu8GvZgQ5eOHEJEB0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: bA+Rkv768826YZDkpmEHPosEU3AyrrPRyTKp3xKEXfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ed:b1:e1:a4:9c:31:50:8c:ba:9f:ba:82:d6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Aug 23 03:02:47 2025 GMT
Not After : Aug 24 03:02:47 2025 GMT
Subject: CN=fc4627e03d6bf1fc1d960042b023789061719f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:4f:5c:8c:60:18:3c:49:00:05:f5:05:d7:
83:a4:ed:82:84:19:07:7e:47:4e:ce:e8:bb:fd:1d:
c3:54:e7:37:9d:4c:0e:7a:9d:69:a4:e6:d5:42:db:
bd:2a:aa:48:47:73:44:62:02:41:fd:c0:61:fe:49:
16:10:54:fc:2e:8d:71:18:df:bf:83:d4:6d:6f:cb:
02:8e:e0:86:5f:c8:c4:d1:83:b6:81:23:79:84:03:
22:a4:aa:7d:54:ed:e1:b4:56:5b:99:fb:84:3d:1d:
21:a4:49:79:9e:92:b2:51:64:e0:76:19:93:ba:41:
3d:e4:73:1d:fe:87:4f:75:9d:ce:97:33:1b:23:b3:
67:0f:cb:f2:b4:11:76:98:47:8e:87:70:09:0a:81:
a8:15:96:da:0a:36:f2:03:da:4b:22:9e:93:95:b7:
b7:3e:8b:90:ac:2d:7f:1a:70:e3:89:b2:79:02:81:
2d:df:f6:26:5e:dd:98:cd:8f:60:89:61:e4:19:6f:
9f:45:ef:70:a2:8d:52:a2:f6:12:ef:b4:d2:2f:e6:
f7:03:c4:19:91:52:90:25:ff:71:aa:b5:79:19:5c:
89:79:57:87:84:bf:6c:bd:4c:eb:53:a7:b2:1a:64:
a7:8a:86:4e:17:b5:a0:81:b3:93:12:ad:64:ed:1f:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:46:27:E0:3D:6B:F1:FC:1D:96:00:42:B0:23:78:90:61:71:9F:68
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:36:09:11:a6:05:e0:bb:37:5d:4f:a8:2e:cb:aa:40:7d:82:
4a:56:8a:22:a1:43:77:33:0f:b4:01:b5:08:9c:1f:5e:37:a5:
0e:ea:48:ee:a5:03:89:60:c8:0c:33:92:43:ec:fe:cf:86:d6:
7e:c2:27:a7:1b:e1:7a:8d:34:f8:5b:ef:e2:6a:a7:61:a5:88:
9f:2b:2f:16:20:a4:5a:53:18:27:21:7f:f6:41:48:a7:92:65:
2e:10:f1:18:d1:9d:d6:a3:37:75:02:a2:52:1d:0f:0c:e8:a7:
e7:02:12:c0:27:cf:c0:8c:ba:e9:23:d2:cf:d4:f3:1c:94:dd:
c8:69:6e:1b:a2:8b:c4:88:0c:5c:20:0b:9f:61:c5:ef:c9:57:
d1:d3:cb:21:cc:74:b5:ba:81:1b:95:38:31:b6:94:dd:98:56:
bd:79:df:dc:6a:87:45:05:df:18:73:15:94:d0:b1:db:8a:b9:
4e:bd:d5:ef:e7:48:08:bb:c7:07:2f:97:54:df:b0:d7:8b:5b:
a6:a5:fd:15:e4:e9:ec:1f:6b:1c:fb:27:29:a3:bc:b7:4a:c8:
74:f1:16:44:db:6f:7e:12:ea:c4:7d:4e:5b:44:3b:d0:fe:00:
d6:c8:80:ac:7e:7f:c4:e2:6a:2d:df:30:4c:85:1e:b5:cf:f3:
b2:1d:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:29 2025 by rpki-client