Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: GbT9+W2THvp4H5v/WOCfu47Up/2oHGysxXqy2omeo2w=
Subject key identifier: 1C:B8:B4:F5:90:1C:82:C1:16:6A:61:6D:A3:61:85:43:CE:C2:2C:AA
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 0198D6CDE82339472B293D6E4A2092129C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 128F
Signing time: Sat 23 Aug 2025 12:01:15 +0000
Manifest this update: Sat 23 Aug 2025 12:01:15 +0000
Manifest next update: Sun 24 Aug 2025 12:01:15 +0000
Files and hashes: 1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: AmmIYBLJZ5Cz+XL3oPhWfdf6HZl5CmTS4lMZeblWeYM=)
3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:e8:23:39:47:2b:29:3d:6e:4a:20:92:12:9c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Aug 23 12:01:15 2025 GMT
Not After : Aug 24 12:01:15 2025 GMT
Subject: CN=1cb8b4f5901c82c1166a616da3618543cec22caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:aa:36:0f:bd:31:fb:26:76:a8:eb:ce:63:
0c:ce:66:c5:93:4a:73:4e:52:cf:56:59:a3:8c:17:
92:3c:91:a8:bb:f2:1e:42:8c:ac:55:f2:89:32:42:
76:5a:81:0e:34:31:78:de:39:68:17:16:7b:86:b9:
7c:2e:02:5b:1b:2f:df:10:88:59:c8:1c:3c:68:2c:
bd:ad:c3:5d:72:a6:ba:fa:07:8a:7e:6f:3f:17:35:
c2:63:86:89:70:6e:2d:00:e4:33:4f:9c:ba:42:dc:
c1:ec:01:0b:2c:93:f4:bd:1c:5a:fa:e2:69:62:25:
1a:af:25:87:20:c0:7c:0f:0b:36:2f:40:26:eb:ea:
3e:81:c2:24:4f:77:50:07:e7:d7:93:05:89:04:e5:
c2:b8:f7:c7:7a:04:7d:25:a2:55:08:77:aa:65:8a:
d9:d5:c8:83:bc:52:72:34:91:8c:e8:86:ef:15:b4:
7d:5a:ef:48:3e:1f:f7:8d:61:e4:6d:a7:51:28:d4:
ac:2d:10:e4:5b:c8:c7:fb:77:07:fc:e8:4f:fb:34:
3f:98:54:6a:9c:d0:4a:ea:27:81:dc:14:13:6b:fd:
e4:12:cb:ef:c6:c1:04:73:4a:ce:87:29:91:6c:48:
f8:d6:66:00:0b:4c:22:55:6c:aa:91:49:4f:d2:8e:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B8:B4:F5:90:1C:82:C1:16:6A:61:6D:A3:61:85:43:CE:C2:2C:AA
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:13:8c:83:cb:14:88:7e:ed:43:5f:1e:92:58:c1:82:72:1a:
5b:a8:13:cc:f3:71:54:af:4c:87:fe:f7:05:9f:1a:ad:53:a2:
ce:ef:6f:98:24:67:5a:46:c3:9a:0c:c0:d5:fb:53:6c:0e:f2:
37:cd:4e:c5:ec:9a:49:c6:52:3e:1a:6d:78:5b:da:53:85:20:
03:52:25:34:58:6f:09:00:24:b6:0a:58:6d:23:4e:4a:01:b1:
0f:c5:d9:8e:b3:1f:fc:c7:c4:6d:98:fa:8a:e8:d4:59:81:96:
fe:89:d5:e2:6d:61:e6:4c:4c:3c:60:72:c8:c7:78:dd:03:b0:
c6:af:b7:5a:07:23:71:a0:2c:71:a1:97:5c:c5:04:45:69:8c:
57:e8:e4:0a:97:54:55:e5:66:09:8f:f4:d4:5e:a4:6c:23:79:
e8:e1:ed:bd:9f:27:83:f7:d8:50:4c:83:10:c6:97:0e:4b:05:
df:ad:2d:21:5a:e7:fa:ca:2e:e6:ac:ee:3b:3d:ed:10:4d:07:
33:25:89:63:6d:53:a5:85:b9:dd:0b:ef:e1:60:7f:2e:fc:3a:
b7:3a:b8:e2:40:dc:8e:a7:43:20:83:de:b7:b9:93:5e:24:aa:
b1:be:3e:28:14:00:ac:a8:80:43:a1:70:1d:f8:56:08:f7:f5:
f9:b3:66:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:24 2025 by rpki-client