Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: 5dqCGo/V0HanUVLx3wHUpjJu+RD4AGfz1yaBcFpD7kQ=
Subject key identifier: C1:CF:E6:F7:B4:9D:0E:11:C3:77:CB:10:5B:71:D6:37:07:60:EF:C8
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 0198D472BD210C80AB1ED04FF3E5D2973C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 0F12
Signing time: Sat 23 Aug 2025 01:02:26 +0000
Manifest this update: Sat 23 Aug 2025 01:02:26 +0000
Manifest next update: Sun 24 Aug 2025 01:02:26 +0000
Files and hashes: 1: 7M-OD2BZKTGFt1pigwcJKxVnusA.roa (hash: 75qUp+vt+nvqE7SylHu29lyZut/MWc3ge7gcStv53+s=)
2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: PFhXL4fUY5fLImQJk+Mq1pag/9Qhk37pG82ZwD1DOQc=)
3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bd:21:0c:80:ab:1e:d0:4f:f3:e5:d2:97:3c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Aug 23 01:02:26 2025 GMT
Not After : Aug 24 01:02:26 2025 GMT
Subject: CN=c1cfe6f7b49d0e11c377cb105b71d6370760efc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:14:f9:b0:a7:4e:db:fe:9e:bb:3d:71:d5:
50:df:4c:64:9e:a1:0c:8f:31:8f:73:c4:86:0a:52:
58:6a:28:d2:3f:16:9d:2b:6b:2a:85:3e:59:f8:ed:
87:7f:45:02:34:19:90:58:54:b9:92:dc:47:68:dc:
10:15:28:99:5a:54:9f:7c:0b:1b:38:19:2d:36:16:
c3:49:98:8d:8a:6a:7b:58:35:e9:fa:b6:78:25:03:
4d:70:9b:f2:3b:3f:97:20:fe:bc:2a:a9:c7:8a:a3:
2f:01:fd:78:d0:8e:95:d7:a0:67:6c:57:46:dc:0b:
09:2a:66:ca:f3:5e:e9:e8:a8:87:57:50:89:35:0f:
df:6c:c4:8f:8c:31:2f:7a:56:82:eb:f6:ae:88:d4:
42:77:92:ff:18:f9:5a:49:48:be:bd:3b:99:1d:35:
90:9a:5e:0f:8c:3f:12:d0:7e:c4:2e:16:f0:99:92:
e3:e3:38:5d:63:d0:01:9e:66:b5:2a:15:ed:26:b3:
3f:53:80:3f:2f:a5:20:8c:96:22:bc:0b:ac:d0:41:
f6:d8:42:e2:9f:f1:bf:f7:f6:69:d9:1d:35:49:ce:
13:1a:5d:38:fb:dd:75:9a:53:09:0b:82:a2:b7:45:
d4:bd:b7:0d:2e:b5:55:d8:e0:0e:39:86:82:82:c7:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:E6:F7:B4:9D:0E:11:C3:77:CB:10:5B:71:D6:37:07:60:EF:C8
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7e:7c:ac:6f:bd:a3:cf:f6:0b:02:d3:dd:5f:ca:7d:3b:a3:
de:9c:fe:bb:52:22:c5:47:41:dc:75:3b:0b:cd:43:3c:77:60:
e8:73:0f:72:26:f5:b2:2b:25:0a:03:b2:18:c1:71:ce:d6:10:
48:1a:25:fe:3e:68:14:84:73:d4:ba:13:97:4c:79:28:c8:46:
71:07:bd:76:31:e0:02:f8:16:eb:42:c6:80:ca:c6:66:2f:85:
da:a9:35:65:a1:8e:b3:ff:96:44:39:3c:2b:f8:6a:fa:64:aa:
90:27:ec:b3:4a:75:aa:b5:dc:13:45:04:b4:2c:c7:26:b0:ac:
b4:d3:8e:c5:a4:24:42:75:ac:2b:c1:35:9e:28:0e:d1:4e:19:
eb:83:ff:d7:45:b8:48:e3:05:32:56:40:a2:d0:0d:b5:4f:94:
8d:fe:ff:6c:8c:85:06:54:4b:a4:a6:ed:b3:7f:69:b5:a9:2e:
b8:57:50:f9:2c:64:d6:19:be:a4:38:47:60:6e:3e:09:4a:d8:
53:3a:1d:f6:45:f8:72:39:b2:26:00:df:9d:c7:5d:85:b2:8d:
e7:6e:f0:33:95:0d:10:34:03:b2:58:55:ff:bb:5a:bb:e1:fb:
73:dc:c1:c1:9d:55:07:ce:9c:88:0d:c0:5f:98:f7:a9:43:98:
88:b8:1a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:26 2025 by rpki-client