Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: 41kTclL01FfHYW7ZpXSapmbwvZveHT8THN9MbgRrL0Y=
Subject key identifier: 84:05:6C:CA:09:C9:FF:D5:2F:A1:F7:5B:1D:5F:D7:8F:02:1A:79:B2
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 0198D660325504FEAD5D61838646DD0A7F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: SHsQX9tn9sjpvWjxYgryWEXIzH8uCY2yssGSvNZj7UQ=)
2: koGXGlmTeestynS-D79F1iRgKe8.roa (hash: t/wGg6Ba4t68swMex8wPDhVXcBtDTQUAFrp4xf0H+oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:32:55:04:fe:ad:5d:61:83:86:46:dd:0a:7f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=84056cca09c9ffd52fa1f75b1d5fd78f021a79b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:05:9d:f1:a6:0e:47:c0:c9:3a:69:8f:8b:
99:07:b3:cc:1a:11:c2:24:63:50:bb:b0:59:ae:4c:
cb:96:2d:b0:ca:49:62:b4:d8:18:2a:37:c7:2c:8e:
ca:9c:4c:0e:30:a9:e2:d0:1c:cb:dc:5b:86:5e:10:
d7:5b:7e:08:83:c3:6a:40:ca:f6:61:dc:b1:f4:06:
2f:78:ad:99:8a:d4:c7:58:8f:d9:e2:15:8f:58:34:
49:b1:8e:54:32:a9:d2:d6:09:14:1e:26:3c:19:4e:
1f:59:be:c5:69:51:7f:d9:1e:4d:af:96:af:65:ad:
3e:d7:4b:d3:bc:41:a6:db:d9:10:13:fb:48:4a:88:
18:2a:98:e4:ba:e5:be:a9:c3:4e:ba:5b:dd:52:29:
e8:2e:a8:19:8f:0a:93:07:67:20:7c:0a:14:d6:f0:
12:8f:c6:71:8b:bf:f5:4e:c9:f2:09:66:81:d6:4d:
bd:d4:90:10:63:b1:a2:71:2d:50:49:d2:d4:5b:2d:
fc:3f:0f:5c:84:d0:6b:10:30:c7:ff:fe:8a:96:11:
0f:0f:b2:e3:66:c0:19:69:65:71:ae:c2:9b:09:74:
51:84:89:9f:e9:dd:c2:21:70:6a:d5:df:34:09:5a:
db:5c:3f:39:5e:d4:3b:de:fc:0f:b2:7b:f5:f5:d7:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:05:6C:CA:09:C9:FF:D5:2F:A1:F7:5B:1D:5F:D7:8F:02:1A:79:B2
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e2:6d:fe:6d:3e:19:74:8d:0d:21:8d:47:69:51:f0:d5:19:
91:e9:66:2e:8b:91:e7:50:a0:3a:81:a4:cf:07:77:4e:53:bc:
df:1c:88:e5:5b:2c:49:d2:c5:11:12:b5:43:77:42:dc:33:b7:
43:e3:30:81:e1:bb:ee:79:f4:60:88:12:5e:29:f2:b0:dc:fe:
d6:2a:24:1a:14:bc:d6:ca:c3:95:7e:bf:dd:d6:bc:c0:ab:0b:
02:62:3b:4c:ed:fe:c1:d4:20:e3:40:c7:3f:2a:1c:93:41:68:
f1:3d:81:27:20:5a:16:48:d5:28:48:ae:74:f2:53:cf:f8:1b:
ed:3f:e9:19:84:e7:91:cd:4a:30:f5:ed:fd:7a:bb:8f:80:5b:
17:a0:a7:6c:5f:8d:e2:16:07:4f:13:8c:18:f8:be:d5:92:4e:
5a:3f:72:7e:76:91:30:61:a3:3c:1a:67:7c:07:87:ce:2f:32:
a4:a5:27:fd:e6:e6:19:81:c1:42:44:d0:81:4c:a2:db:9b:9d:
eb:26:1e:59:0a:8e:51:98:57:28:e0:28:c2:2b:d2:a1:e8:91:
14:91:b9:50:f3:c8:d0:6c:5b:8d:13:be:67:02:10:95:7b:22:
66:bf:b6:2c:ee:41:44:4c:7f:8f:51:7f:63:dd:af:fd:e4:b8:
fc:cb:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:34 2025 by rpki-client