
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier: 0CTkwXxYMbx+s6vQdgD8M1HlXzj7tYiLj6bh8zCy050=
Subject key identifier: 5B:9F:D3:6C:10:ED:E4:78:83:21:87:DE:E9:C6:77:92:21:2F:29:73
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 0198D4734C642CFE9FBD93816ADD9DA3D86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number: 0135
Signing time: Sat 23 Aug 2025 01:03:02 +0000
Manifest this update: Sat 23 Aug 2025 01:03:02 +0000
Manifest next update: Sun 24 Aug 2025 01:03:02 +0000
Files and hashes: 1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=)
2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=)
3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: 9HjWmqGjLmrX1NwlMLXeuXW7FA/of66QeJSxWYL1KJM=)
4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4c:64:2c:fe:9f:bd:93:81:6a:dd:9d:a3:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Aug 23 01:03:02 2025 GMT
Not After : Aug 24 01:03:02 2025 GMT
Subject: CN=5b9fd36c10ede478832187dee9c67792212f2973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:55:3e:89:bd:69:fd:da:cd:d2:b4:b4:cc:
80:52:c8:00:f0:1b:a5:ef:20:1b:01:4b:5a:54:39:
a2:ea:b0:08:8e:b5:a2:0f:76:12:db:47:29:3d:39:
73:e5:c8:92:c2:4b:12:db:0d:55:0f:7a:f7:07:0f:
dd:10:2c:36:02:d1:34:c3:8a:29:88:f8:c6:24:1a:
8b:14:3e:d4:23:f5:26:e9:b7:cb:8a:c6:4f:ad:16:
88:b4:02:78:e2:e3:ea:92:09:be:82:b9:88:a0:94:
39:5f:bd:1e:16:4a:b2:70:af:64:53:ec:a3:5a:b3:
6f:be:16:48:2e:d6:ac:74:83:f3:c2:85:47:d5:4c:
3f:09:99:0b:06:01:38:ff:6c:49:40:a5:ba:f0:66:
18:05:bd:95:8d:81:f7:47:29:81:e7:4f:ad:a1:c1:
e3:e8:8c:cf:6b:79:9a:96:bc:28:4d:de:19:19:27:
9a:83:0e:9b:f7:c2:6a:53:fe:99:a4:f9:52:25:12:
7b:3c:44:62:40:a5:fb:4a:db:d5:82:b3:51:c2:fe:
38:8f:34:03:b1:67:e6:b5:55:a5:52:af:de:5b:67:
19:6e:95:45:0b:47:ab:86:0c:9b:45:24:52:95:36:
a9:56:32:64:6a:36:c5:95:0d:6a:72:4e:7c:39:97:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9F:D3:6C:10:ED:E4:78:83:21:87:DE:E9:C6:77:92:21:2F:29:73
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1b:2d:05:b7:6b:80:bb:23:82:0c:5b:bd:3c:12:cd:e8:09:
a9:63:3e:d9:57:bd:1e:24:4b:47:fc:bf:1c:fc:f6:c7:ed:91:
92:cf:2b:a6:a9:01:81:20:20:71:b6:5d:35:bf:5e:3b:a4:69:
78:d2:63:76:c2:aa:cf:e6:ed:e2:61:44:f4:49:d9:3f:b2:4b:
73:10:c3:2c:9e:44:1d:cb:bb:31:c6:a8:77:29:ac:50:3e:43:
de:b4:3e:79:39:5e:05:a2:cd:40:8d:db:a0:ac:b2:f8:79:47:
b4:83:6d:81:5e:fb:e6:d4:6f:b1:06:41:bd:56:7c:87:d3:0c:
69:12:fd:49:8b:a3:d1:c8:0d:3a:62:e2:3d:75:7f:45:bf:39:
c3:67:74:c7:02:29:37:fe:74:71:70:02:3e:64:92:fc:68:ec:
c5:21:c4:0b:1b:bf:07:19:41:d6:1f:69:cc:df:48:24:53:ab:
9f:9b:b6:26:6c:97:92:12:da:62:05:24:8f:63:0f:ed:dc:10:
8b:07:0a:ee:11:39:0b:ca:51:ea:cf:e7:b6:fb:1c:22:3a:73:
10:ca:ea:02:6d:2b:0a:21:6a:ac:1b:02:4c:3f:18:d9:20:8b:
99:a5:ef:7d:cb:ff:27:94:d2:c0:d5:10:4d:bc:55:f3:f1:91:
93:76:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:10 2025 by rpki-client