Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: rGU5aCIbCx8mUUx8CNZ0lBJit+ccINdLfMhAKDH2QUc=
Subject key identifier: 77:9F:E4:2F:C3:45:E9:08:11:F4:19:F5:6E:BF:F2:5B:65:C3:1B:32
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 0197B77C42924D3C8CFA1AF8C4B0CCEA98E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 1D
Signing time: Sat 28 Jun 2025 17:01:03 +0000
Manifest this update: Sat 28 Jun 2025 17:01:03 +0000
Manifest next update: Sun 29 Jun 2025 17:01:03 +0000
Files and hashes: 1: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: kDVomn2DFNjyU1wPnt+tJHglX/p6BIOpYoXO7d+6hsw=)
2: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:42:92:4d:3c:8c:fa:1a:f8:c4:b0:cc:ea:98:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Jun 28 17:01:03 2025 GMT
Not After : Jun 29 17:01:03 2025 GMT
Subject: CN=779fe42fc345e90811f419f56ebff25b65c31b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:7e:1f:86:05:17:30:85:3a:1e:84:92:48:
2d:74:d8:40:1e:9c:6a:f1:ea:41:97:86:51:36:6a:
c1:38:90:d7:f9:7e:2c:0e:a9:3d:06:93:ac:1f:9c:
f3:23:21:e1:e3:fb:a8:3a:cb:e1:15:cd:dd:02:f9:
b5:53:58:d6:8d:eb:e4:04:cd:17:f3:3c:60:35:13:
ac:ff:98:46:dc:4a:43:fb:24:0b:cc:ef:ab:ee:4f:
44:2b:ad:4c:1d:e4:a8:a1:17:f5:46:4e:43:f9:a7:
25:c1:e7:c9:a3:9d:72:ba:97:cd:95:3b:15:bb:ba:
52:ea:64:bc:ed:90:cc:f0:29:1e:07:14:fa:4f:12:
28:e3:5a:91:85:2e:02:b3:0d:97:bb:67:91:82:da:
3c:6f:1a:14:7e:ee:1b:28:59:b5:f6:d7:d3:94:05:
03:18:b0:da:0f:ae:bb:cb:c5:86:9b:9a:63:33:f8:
5d:44:21:be:5c:e0:ae:f8:ab:bd:c7:78:95:d6:ee:
b1:78:1e:41:c0:f2:d8:fa:ed:88:96:fa:47:bd:5a:
96:ba:e4:5e:fc:fc:d1:01:a3:16:fd:65:6b:f6:6a:
ba:ab:41:1c:9f:2c:5e:7c:33:15:6b:88:dd:27:c3:
f9:b7:1f:3e:f2:58:e9:38:f6:3a:10:bc:ce:05:ce:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9F:E4:2F:C3:45:E9:08:11:F4:19:F5:6E:BF:F2:5B:65:C3:1B:32
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7a:0c:74:45:7c:0b:9a:a1:55:c2:bb:8a:be:63:66:b4:b1:
7b:1f:3f:0b:38:3d:b7:ae:3b:31:80:47:ea:3f:5e:a0:4b:50:
c3:b8:01:35:2e:12:7f:ba:db:da:33:cd:c8:11:e2:c6:68:bb:
42:1c:b2:3a:e6:18:21:75:c5:13:75:51:d0:5d:8e:05:14:2d:
a2:5c:72:c2:bb:f7:8e:e7:37:93:43:8f:b1:db:94:66:d4:c1:
88:60:7e:79:ca:62:bb:dc:bf:a0:1f:1f:1b:fc:96:91:86:b4:
a4:22:80:7e:ce:db:50:da:fd:fb:2c:a1:2a:95:6f:cf:10:cd:
62:38:eb:4a:fc:97:c1:3a:b9:8b:04:80:b6:6a:3e:4f:bf:ff:
f8:d6:20:a6:c6:51:fd:38:c4:86:3e:4e:b8:8d:51:eb:12:c9:
11:48:42:80:6d:76:36:5c:05:06:81:28:ee:58:f7:c2:77:de:
28:28:f5:42:a7:06:82:10:17:2f:8b:ae:98:f2:50:97:66:ed:
e3:02:ad:20:27:c9:5a:47:b7:47:94:ad:42:83:49:77:aa:39:
b8:87:14:72:cb:75:65:46:88:09:fc:bb:0d:e2:e6:ac:be:16:
9c:a2:41:2b:f5:28:a0:c5:7d:e9:b5:56:fc:29:96:1f:5b:86:
2d:a7:42:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:44 2025 by rpki-client