
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: +fPjWJAczZPtuVAeqtWSdQ2y8sWqjs9FHI7RaKNOzmI=
Subject key identifier: 84:8C:AE:87:FD:6A:23:A9:89:7E:2A:9D:C3:DA:5D:F0:A2:43:9B:22
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 0198D884CA5527A7E182CABC30B8C6060734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 20:00:37 +0000
Manifest this update: Sat 23 Aug 2025 20:00:37 +0000
Manifest next update: Sun 24 Aug 2025 20:00:37 +0000
Files and hashes: 1: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: a6f7CzVQau1ZHADqpkxng9KHzn9C1WJCL7UOpE0+J58=)
2: dUqyD5dBwTvJ_qoTBxGI93eGedY.roa (hash: u/v6Ya7ReNYFR+FOK7OzZoy9GOIB91+hBxT7UAGsW1U=)
3: xf5euvYwoNkCugSTZpIpZIs6gdQ.roa (hash: TROZHBrJUwOEntOqJDRdHWhVUC4xDktW9XYJSjQLr0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:ca:55:27:a7:e1:82:ca:bc:30:b8:c6:06:07:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Aug 23 20:00:37 2025 GMT
Not After : Aug 24 20:00:37 2025 GMT
Subject: CN=848cae87fd6a23a9897e2a9dc3da5df0a2439b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:f9:1b:73:e3:22:45:a0:5d:b4:ac:37:63:
6c:5a:3f:a0:e1:2f:b9:72:cd:09:37:0b:f8:67:34:
2a:e2:5b:69:1c:43:2d:fe:e1:f1:80:b7:70:01:83:
4c:54:2c:1d:d2:e8:b8:83:51:e3:8b:5f:fc:33:e8:
c8:60:8b:74:d9:42:7c:47:62:a3:90:7b:d7:4b:ca:
74:10:c8:a8:2e:36:27:df:6c:39:b2:b2:1d:84:d1:
2c:5b:4a:50:bb:55:cf:f3:3f:bb:21:f4:94:e3:80:
6e:c8:91:e2:20:3e:df:fc:46:d6:90:09:fc:ac:a9:
32:c1:99:2b:3d:00:3a:5f:e8:8c:9f:f3:ce:98:5e:
36:aa:9c:cd:a6:5e:f4:94:24:37:c9:60:d8:d1:a4:
fe:06:f4:c2:5d:2c:68:83:57:3e:8b:ea:dc:63:0c:
a5:c5:eb:9e:1f:00:03:70:29:bb:a0:7d:08:2b:08:
10:92:cb:82:84:07:d3:4f:ae:46:dc:e4:fa:4f:05:
ac:10:32:fd:6a:fc:f9:9f:40:6a:b6:1e:c0:76:cf:
4a:2f:3a:fc:e5:e0:13:45:eb:76:1e:65:58:76:19:
69:a2:1d:73:a0:d3:0a:10:47:6f:71:a4:c2:4c:c3:
3f:fc:6b:41:56:d4:e9:81:93:59:21:06:fd:4b:32:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:AE:87:FD:6A:23:A9:89:7E:2A:9D:C3:DA:5D:F0:A2:43:9B:22
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b5:e4:24:e9:c8:f7:9a:03:15:ab:9a:89:8f:10:79:a6:be:
0a:00:a6:4f:76:9c:6c:48:fb:6c:89:1c:bd:f4:a7:58:fc:f2:
fd:7a:15:e6:ea:5a:11:d3:e8:50:6a:fb:41:55:75:cd:b5:4e:
8a:e7:1c:53:c1:f5:67:50:29:3f:23:15:69:68:3e:f7:e9:10:
7e:f4:a5:90:6a:98:90:91:36:d3:0a:79:ea:04:68:18:5d:98:
64:a9:af:4f:89:11:26:21:59:ff:f1:59:b1:31:03:bf:c4:15:
72:a4:fc:fb:14:8d:6d:48:cf:d5:bd:2c:28:ed:7f:53:06:f0:
38:de:9f:75:5b:30:50:68:5b:42:31:db:d3:9e:1f:f4:d1:bc:
82:1b:b3:6d:65:2d:3f:34:ae:1e:34:25:90:a3:f1:3a:31:9f:
d7:1f:f3:a2:e3:e3:84:36:42:a0:0e:85:c0:3b:1e:e2:96:bb:
cb:11:ec:d1:06:a7:a8:1f:13:1b:b2:46:18:2a:33:60:6c:29:
49:3b:6f:2c:a7:e3:33:8c:fe:df:ea:e0:d6:85:99:2e:e9:28:
70:be:2e:b0:e7:4c:67:67:c1:8f:87:8d:7e:61:71:6f:a4:8b:
42:c9:6d:ac:20:97:fd:98:95:35:30:4c:e7:38:7a:44:37:31:
75:42:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:11 2025 by rpki-client