Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: r4DqZPUxRVtTchubFgDEQwmjeIC+KMhL8wJdaW2cx1A=
Subject key identifier: D5:1A:EB:01:EA:4E:2D:F7:D4:66:0F:EC:31:2F:E7:DD:4E:8F:FA:3A
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 0198D697EFD79ADEB7764CA699CF229CB12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: zWYjH80VK1Wm8On2NOiAuX22VIgvpTWzboxnGYfx/co=)
3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ef:d7:9a:de:b7:76:4c:a6:99:cf:22:9c:b1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=d51aeb01ea4e2df7d4660fec312fe7dd4e8ffa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:0c:dc:a3:c7:67:4b:b8:3c:ee:9d:d7:fc:
49:a0:0e:a8:6c:07:35:f2:ba:ce:3e:86:94:34:ee:
ea:66:53:99:97:ae:9e:b3:44:8d:29:d0:6a:7a:55:
4c:71:b3:0b:27:02:ce:40:6b:bc:50:5d:94:b7:c8:
66:08:f1:d3:4a:98:08:d5:98:dd:dc:2a:99:94:ee:
7f:78:22:59:b8:cf:26:6f:d4:11:03:a9:49:8a:56:
6a:3b:c7:a6:9f:5b:a2:44:16:81:8b:97:cf:d1:9f:
53:47:2c:d5:c1:ca:f9:fa:cd:1c:7e:dd:16:06:82:
cf:80:a4:e4:01:4a:0b:2d:78:5a:5f:06:be:34:18:
f8:d9:22:d7:dd:60:07:3d:99:27:05:01:0e:3e:51:
20:cf:0a:5f:cb:23:fb:80:1f:cc:ed:a8:1c:24:39:
fc:3a:d3:2f:eb:99:de:8b:a7:ef:cb:b0:66:a0:9d:
09:27:52:6c:c0:ef:b2:d6:0f:70:bb:b6:57:3f:04:
96:19:59:2a:73:70:43:c8:87:51:eb:73:77:35:9b:
7e:40:62:c0:db:69:80:b4:81:98:99:2a:00:59:ba:
3e:c8:ff:a3:aa:a9:07:00:af:de:c8:d5:a2:ce:1c:
d2:d3:8c:2c:fb:c4:e4:38:3d:fa:11:9d:70:94:6b:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:EB:01:EA:4E:2D:F7:D4:66:0F:EC:31:2F:E7:DD:4E:8F:FA:3A
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e4:14:49:29:fb:39:60:8a:b9:8e:44:47:e4:92:0a:85:aa:
07:d8:12:52:7d:81:09:56:fa:25:21:68:03:56:98:0a:a3:3c:
36:eb:f2:2f:98:03:37:de:15:dd:84:a7:b2:d5:be:3b:e2:3e:
20:20:4d:dc:7d:87:c5:ff:a7:8c:0b:02:4c:ea:7e:bf:a0:04:
76:da:36:6f:b5:c5:bf:18:7e:8f:3e:57:73:53:7f:12:60:07:
7b:0e:33:a0:d3:15:4f:37:c4:87:32:c5:e5:bc:27:16:17:2c:
62:e0:e3:b9:39:f5:87:52:5c:99:ac:42:fc:06:d7:c9:ca:0c:
ef:c7:b4:ed:bb:9b:5b:c3:e8:48:22:85:14:db:63:7b:92:49:
11:06:ac:5f:5a:07:69:6a:7f:bd:c8:d0:4f:f4:62:7a:c6:39:
a2:0f:c0:a4:f5:c8:3f:c1:19:31:cf:de:a1:4b:ca:40:c2:b6:
a4:6b:bf:3d:9e:9d:df:77:98:1b:80:58:e8:69:9c:d0:d1:c5:
96:6b:36:ae:37:64:c7:5f:c5:45:cf:a6:72:2f:44:91:3e:61:
aa:63:16:84:7f:99:41:af:d9:47:44:66:05:46:27:73:86:64:
3d:15:c3:23:a6:3b:90:ad:44:e1:77:18:71:4f:fb:89:3e:ad:
02:de:4a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:11 2025 by rpki-client