Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: FZ/rOeBxplddeiVAw6wErdc6MRwVqB98CvZpILH76G0=
Subject key identifier: 4F:0F:D0:37:E8:3A:06:82:45:66:85:7A:84:F3:B2:1C:13:27:0A:4B
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0198D4E0BAAC793534844BEE96B708AA4255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 1340
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: fsbXYR4OpiaN4lNdBpa0Vo0NzPmZf+VexqxqiaCnl4M=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ba:ac:79:35:34:84:4b:ee:96:b7:08:aa:42:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=4f0fd037e83a06824566857a84f3b21c13270a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:d2:77:bd:6b:d3:a6:6e:db:10:3a:57:08:
a7:5e:14:ab:8d:69:c4:57:d7:b4:d0:d9:e1:6a:2b:
37:92:29:af:ed:8d:fa:6c:b2:71:07:35:88:94:61:
c1:b2:a2:4d:89:43:56:b8:8a:c9:9a:92:f7:c6:f2:
da:c7:01:f0:37:67:eb:07:32:e8:78:20:7d:bc:36:
21:c1:ce:a9:4c:44:db:9c:d8:f4:e5:28:d3:03:a9:
22:f3:94:9b:b2:cd:1d:70:2b:ae:24:99:5b:71:59:
b2:5d:1d:b0:a7:6d:4f:9b:44:95:84:64:fd:2d:b1:
7d:72:18:cc:83:03:1a:13:2b:fe:47:3a:d8:08:06:
fa:d8:5c:af:0a:f5:74:43:1c:a2:4f:39:b5:4a:84:
52:57:b3:13:ec:52:c3:cd:8c:88:1f:49:1f:07:92:
b0:65:dc:a0:5f:57:66:67:79:49:0e:35:8b:02:ca:
da:39:cd:10:7c:36:cf:40:b6:8b:9d:7b:b0:7a:29:
d8:97:17:ec:ea:02:e3:4a:3d:1a:9b:e1:1a:5a:03:
2c:86:9f:cc:98:aa:ee:10:7e:63:ac:3b:25:43:e8:
52:df:86:e8:e6:60:f6:63:75:9a:6b:54:e3:9b:92:
01:84:8c:d5:f0:e8:87:a7:0b:32:c5:c9:e2:71:ae:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0F:D0:37:E8:3A:06:82:45:66:85:7A:84:F3:B2:1C:13:27:0A:4B
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:85:9f:0e:1a:ca:c7:51:db:37:22:8f:59:7d:cf:72:76:f3:
bb:5f:bc:17:a0:7a:39:0e:47:e8:0c:65:1c:d5:1f:65:bf:99:
c1:f9:f0:32:78:b8:a3:48:cb:3b:2b:99:35:ed:c5:20:63:c3:
46:9d:3c:f7:ec:ef:b5:4e:1b:e0:9b:59:56:58:c6:50:91:61:
e2:05:24:6b:d8:be:cf:16:d1:b1:72:da:ce:da:95:d7:50:f4:
cc:64:8a:f3:98:43:72:2a:0d:bc:5b:cf:1f:54:59:99:fa:53:
8d:b8:07:e7:ea:b9:65:28:85:d5:df:e8:bf:5b:f3:b3:2e:1a:
a4:df:86:e9:6e:6e:66:9f:32:dc:ae:76:32:9d:77:37:8e:fc:
e7:22:be:d2:a9:23:7b:e7:73:19:ac:bd:05:b3:58:ee:33:a1:
6a:7c:24:4f:bf:f4:39:6b:cf:1e:dc:e2:0d:83:ab:cb:e7:70:
f4:83:54:fa:07:19:e8:ba:02:14:98:95:f3:dc:64:aa:b5:d7:
e6:b9:42:b0:34:5d:42:b5:59:75:3b:9c:d4:dc:f1:d0:9f:b4:
47:d1:4e:48:1d:70:a5:88:e4:55:11:43:7d:f6:b6:b8:bc:97:
15:76:1a:e2:69:76:db:74:dc:9d:89:fa:34:36:6a:5a:f7:92:
29:2c:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:55 2025 by rpki-client