Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: dvqWU5EjqLDvI8Un0mZVG9qa5uxcQ4aLR72FQRUSDns=
Subject key identifier: FD:12:E6:67:4A:82:61:70:7C:31:1B:F7:6C:D8:73:98:8D:54:F4:C9
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 0198D473DF7E24680BA3A01388C9A1CBEAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 0CED
Signing time: Sat 23 Aug 2025 01:03:40 +0000
Manifest this update: Sat 23 Aug 2025 01:03:40 +0000
Manifest next update: Sun 24 Aug 2025 01:03:40 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: B9qpLXqEScdzmpeBtIeDi0CTNNuqQJnmPCE9Xuk5Ylc=)
2: qzSVGtS_jWsXuo115ysr12jv81o.roa (hash: 6sU/7Xohp1bS1zbTFVnz4YbGVdQCm8u0BmBoUOstkdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:df:7e:24:68:0b:a3:a0:13:88:c9:a1:cb:ea:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Aug 23 01:03:40 2025 GMT
Not After : Aug 24 01:03:40 2025 GMT
Subject: CN=fd12e6674a8261707c311bf76cd873988d54f4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:cf:86:a5:cb:a9:5e:a7:a6:88:2d:5f:37:
38:9d:51:ef:43:8f:7a:95:81:eb:a5:c1:99:0d:04:
23:73:f3:58:e4:a8:bc:ee:02:5a:1e:4a:56:7f:cc:
b4:9a:4a:26:70:db:fa:c2:03:e9:5f:1f:cb:77:44:
0b:b5:33:ae:8f:07:3e:9f:c2:82:11:9d:36:27:1f:
41:74:e0:f0:8c:5c:b9:72:09:7c:fa:1c:09:6e:07:
a3:31:eb:78:27:1c:35:ee:4f:33:db:5f:fc:3e:e9:
17:0b:d2:64:05:ef:94:2f:96:18:07:48:96:4b:92:
44:67:0b:c7:41:1e:2c:65:4f:f5:b1:52:ac:b7:8d:
4d:18:72:2b:65:21:db:e5:9b:dd:23:fa:b6:f7:d3:
fc:f1:e0:84:2e:9c:1d:35:f7:c8:f6:c0:ec:d2:41:
7f:b4:40:8b:63:47:68:a2:7c:22:bd:e9:b9:69:ad:
d8:48:d7:4b:cb:1d:8c:f3:28:99:cc:21:6d:6a:2e:
65:30:7e:1a:14:9f:c7:1b:18:b5:86:0a:35:f2:c5:
96:20:ff:93:ef:3c:85:36:41:c1:e9:26:51:25:9a:
60:9e:a5:2c:b7:16:65:23:87:59:37:d1:13:ee:f2:
36:ec:ad:43:92:89:71:87:e8:ac:2f:df:72:c9:32:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:E6:67:4A:82:61:70:7C:31:1B:F7:6C:D8:73:98:8D:54:F4:C9
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:39:fd:70:ce:19:b7:cd:5a:fc:f6:37:a7:62:c6:32:c7:0b:
dc:23:ef:63:c9:ce:06:54:02:5f:cd:9a:7b:54:71:f2:c5:eb:
98:b2:fe:46:26:22:de:3c:2a:cf:9a:3c:03:35:eb:dd:1e:7a:
8f:14:09:f3:6f:fe:bc:84:c2:94:65:b7:af:a0:9a:fa:22:98:
f5:5a:61:8a:c4:5b:58:36:e5:2c:eb:92:51:ef:85:42:67:ab:
98:39:06:e9:58:5f:32:9e:2d:98:4a:1d:5c:d1:29:78:2b:84:
44:45:01:29:34:bc:0c:d1:73:ef:f4:4b:46:51:52:41:3a:cc:
f6:81:69:21:1b:9c:72:84:88:74:d4:ce:c8:ad:5a:bf:9a:80:
73:9d:db:fc:2d:b9:78:41:93:d1:32:b4:bb:3f:1f:10:1e:20:
fc:b1:1f:bd:88:f5:b4:a9:7f:3e:39:95:00:1c:89:83:21:67:
12:90:86:e7:6f:45:3e:8d:ce:25:88:59:7e:a5:c1:2a:e0:e7:
43:a0:15:0a:cc:e1:b1:7c:8d:49:44:f2:68:6f:4d:5d:04:87:
bf:6a:8a:fa:54:d0:d9:d2:e9:c9:30:36:cb:46:8f:8c:97:e2:
86:02:07:6a:8a:66:42:62:a2:97:d0:29:fc:3c:1a:81:be:e7:
91:db:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:52 2025 by rpki-client