Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier: e8fC5smShCFEpg8gtwl9iaDPzhn5B/j0pVehmpel1qs=
Subject key identifier: 96:B3:3A:72:BE:1A:92:BD:93:0F:E7:A1:5F:33:DC:05:E4:65:C0:7D
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 0198D697F53146F4ADC4EB54955A5627B275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number: 152C
Signing time: Sat 23 Aug 2025 11:02:19 +0000
Manifest this update: Sat 23 Aug 2025 11:02:19 +0000
Manifest next update: Sun 24 Aug 2025 11:02:19 +0000
Files and hashes: 1: VuecASVmjUcKvyphdlmWhBLtzCY.roa (hash: 9pywbAdYpVLPp0+Qv028vFSYWXiOfuf7WbI6OQxi+GI=)
2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: gZlM5ezgf88NNgLuOM6A8fcMdlYJ7a6ynTIgFHuc1oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f5:31:46:f4:ad:c4:eb:54:95:5a:56:27:b2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Aug 23 11:02:19 2025 GMT
Not After : Aug 24 11:02:19 2025 GMT
Subject: CN=96b33a72be1a92bd930fe7a15f33dc05e465c07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:ba:29:73:e1:f8:ed:db:61:08:83:9d:61:
5d:7e:4e:50:68:bd:e3:f7:6b:77:1d:d1:8e:d7:20:
14:7f:7f:5c:c1:ea:a8:e3:6c:7a:4a:80:14:07:5e:
c0:ea:eb:9a:c2:24:b1:5e:84:68:22:c5:28:81:dc:
33:6a:c8:3e:bd:f1:55:3b:fe:04:e9:e7:8c:a7:55:
d2:dd:b9:20:64:d1:2d:51:26:76:5c:d7:98:0d:0b:
7e:e0:8c:62:cf:97:e0:6a:4d:b7:28:db:ae:31:38:
89:0a:1c:8b:3e:be:5f:d2:6e:12:4b:b7:0a:4c:f2:
2c:66:07:3c:a8:be:72:f5:6a:40:30:eb:50:64:2c:
53:81:23:2d:7d:cd:15:d3:e8:1e:37:f9:d9:d6:92:
4a:b6:a4:ea:e2:5c:53:bf:c3:aa:fd:70:6a:e5:9b:
d9:a0:63:a2:96:50:4e:53:07:ac:91:45:40:75:c7:
e7:2c:d0:c3:4f:cf:22:5b:07:7b:ea:c7:8b:fc:fe:
ad:33:03:8f:61:72:73:2f:5e:57:ab:de:80:9d:93:
dc:62:41:ce:8c:b8:1a:ee:39:c6:83:44:45:d0:43:
55:ef:80:34:c6:a6:d3:71:27:cd:d8:32:1f:b2:99:
6a:ae:b5:f9:78:99:e2:1d:d9:03:a1:26:98:25:d3:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B3:3A:72:BE:1A:92:BD:93:0F:E7:A1:5F:33:DC:05:E4:65:C0:7D
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:53:50:1c:4e:37:2a:2e:31:75:5f:71:ad:94:14:f5:fd:
d0:b3:5c:16:d2:41:57:b7:6b:ba:6c:d9:bb:94:ad:0f:c5:87:
0f:a6:c0:f1:c4:81:8f:33:9d:e2:68:67:32:6a:d2:52:4d:31:
8c:a9:d7:91:56:79:50:37:30:df:10:8f:f4:0f:a0:5a:26:ba:
1e:da:79:92:23:ef:2d:ba:d6:7e:b4:db:26:9f:86:0a:ac:7c:
d8:a3:6b:cf:50:7c:3e:98:94:90:4b:7f:3e:3b:6f:8d:c0:20:
87:42:db:70:71:3a:40:88:c8:4f:fc:7b:f4:fc:5c:36:db:05:
62:a6:66:95:b9:4f:07:1b:da:be:89:99:92:cb:67:42:f6:0e:
93:91:b2:a6:39:ae:36:67:57:86:f5:a4:18:46:01:7b:08:64:
3d:f9:67:03:62:61:a0:78:17:ce:a0:41:48:9b:18:a9:af:9b:
07:11:be:15:58:94:1f:18:3d:30:fa:61:2d:16:23:b4:fa:c0:
b3:fd:eb:42:5b:82:48:16:c6:52:93:14:3b:b2:08:bf:fd:94:
f9:d1:cf:56:bd:9a:a5:23:da:8a:35:6b:74:39:2e:81:5c:01:
ad:99:8e:ca:74:43:21:12:f8:fc:26:17:3a:3c:95:67:71:ca:
f7:9c:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:01 2025 by rpki-client