Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: 6HSfzoTe3qAa5ujg26gxMOkfjDUEgxIJwjnevFL2USA=
Subject key identifier: 38:AB:69:D4:C9:FF:80:77:44:E8:4B:B4:42:D6:88:26:FD:21:FF:08
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 0198D4A78E065F981EB3A34F42F903ECB546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 1547
Signing time: Sat 23 Aug 2025 02:00:07 +0000
Manifest this update: Sat 23 Aug 2025 02:00:07 +0000
Manifest next update: Sun 24 Aug 2025 02:00:07 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: RFBq/8mkI/24MsKyP/hcFJcZNUQ0OoFQs+CV6SharEI=)
2: cMnqdtCxCnyUSWOfUxTVBWPspak.roa (hash: OOJ4v4cc4LujDvo5fdL7b0ZauPjg9CekPa/sj+wo+LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:8e:06:5f:98:1e:b3:a3:4f:42:f9:03:ec:b5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Aug 23 02:00:07 2025 GMT
Not After : Aug 24 02:00:07 2025 GMT
Subject: CN=38ab69d4c9ff807744e84bb442d68826fd21ff08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:36:03:47:4f:34:e3:21:51:62:68:22:c4:
a7:5a:9b:2f:d8:a1:3e:ee:62:53:ef:c9:b5:3e:df:
52:b3:8e:b2:01:98:b9:b1:5a:6e:9d:15:6f:15:35:
f2:a7:15:1b:16:db:be:ca:be:9e:d6:bf:5a:23:b1:
30:ed:cd:60:41:1a:3e:f7:11:c1:b1:60:29:0f:8d:
ad:04:34:50:33:f7:43:b6:01:2b:31:f9:18:8b:65:
8f:b1:57:37:2a:79:07:91:22:68:ab:47:27:95:2f:
e2:a7:ad:c2:7a:10:fb:2a:d9:95:1c:ce:a6:d0:9f:
04:c7:e8:e9:2a:ee:ed:dd:e3:0a:69:fb:9f:f1:95:
b6:b7:da:dd:d9:26:69:e6:a7:66:6f:ff:16:87:67:
8f:f6:25:a5:11:50:45:1c:6a:17:06:7f:9b:59:00:
75:f1:d5:11:fd:80:70:51:38:2b:ff:9c:b9:60:96:
98:38:56:0c:12:2a:3c:b3:81:49:1b:b5:f6:82:bc:
77:4d:58:80:ad:80:d3:c0:1d:28:f3:2d:9a:08:b6:
7b:78:92:c9:7b:e6:f4:05:b6:f7:36:a0:1f:fc:12:
4a:c3:7f:0a:ab:4a:ee:b9:44:20:d5:5c:16:33:d7:
6f:93:25:0b:1d:7d:d4:62:c3:15:f1:72:53:2a:4c:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:69:D4:C9:FF:80:77:44:E8:4B:B4:42:D6:88:26:FD:21:FF:08
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:07:9a:ad:2a:42:e6:b2:eb:42:bc:67:85:67:49:fb:6c:37:
26:00:53:68:46:35:38:99:ff:bc:e1:fb:d2:a7:ab:92:f0:56:
54:bf:5a:26:87:25:f5:65:93:32:1b:22:90:f2:de:ae:4d:03:
26:b2:3a:5b:f8:ca:30:7b:0e:19:89:30:23:d3:bf:82:30:8b:
8c:2d:54:ed:a9:c1:91:59:f9:d0:fa:2d:5f:c1:55:29:27:54:
8b:c1:25:8b:f7:c3:75:2f:55:60:9a:68:e7:64:34:89:b3:26:
86:c0:da:27:20:c4:6b:b5:26:de:d5:56:38:04:f0:d2:92:58:
a4:53:45:f4:37:77:0d:b3:62:2b:9b:16:95:f7:46:0b:e1:4e:
b6:36:ee:8e:35:39:98:ec:7a:8c:fe:24:8b:58:c9:bf:bc:54:
e7:eb:71:9b:36:e1:bb:dd:8b:a5:31:85:00:ac:71:c4:76:36:
89:3c:63:50:93:d9:fc:a3:fe:4d:62:a0:3f:94:7b:d5:16:63:
ec:eb:95:be:90:9f:e2:8a:2f:ba:ec:31:a8:5d:0a:e3:f4:ae:
78:17:19:a9:31:55:93:a6:67:dd:df:92:22:54:2e:07:58:5d:
1f:fc:ef:c5:91:60:12:dc:89:32:78:ba:a5:21:b3:52:d3:e1:
d5:64:4b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:34 2025 by rpki-client