Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: njuvJooVi1ETuofx2zd8TitmT/me56uSzK47gm7jymk=
Subject key identifier: D4:53:81:08:BC:02:40:FB:54:25:9C:4D:F5:B0:89:7D:B5:68:01:2B
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 01987D52CB0D787BCC1AB963D251DB90157A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0A30
Signing time: Wed 06 Aug 2025 03:00:34 +0000
Manifest this update: Wed 06 Aug 2025 03:00:34 +0000
Manifest next update: Thu 07 Aug 2025 03:00:34 +0000
Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: DYqexbf5Myvku21bssllWfl4MUki+Xx1jB5JTuJAvjU=)
3: XNJw0i5YROHsLdGqQV-sQNcutQk.roa (hash: jP7HL40L4UifhwI3DQuFuVlNNqWLOXwjBtyAaPoZl9M=)
4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:52:cb:0d:78:7b:cc:1a:b9:63:d2:51:db:90:15:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Aug 6 03:00:34 2025 GMT
Not After : Aug 7 03:00:34 2025 GMT
Subject: CN=d4538108bc0240fb54259c4df5b0897db568012b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:a7:c4:df:10:61:9d:b6:9c:f9:e3:8f:58:
1b:a8:a3:c9:23:f9:42:63:f8:4e:f1:62:3f:c3:74:
65:f1:68:6a:65:4d:6b:1d:d5:5e:e8:68:5c:fa:d9:
15:c4:1e:e4:5b:7e:a9:c7:8e:08:23:c3:96:3a:73:
37:12:74:54:e1:da:34:e6:65:49:d2:54:43:66:d2:
04:9f:5b:6d:e0:d4:36:8e:e5:88:ff:30:13:7b:04:
14:94:a7:58:43:66:b4:34:e8:3c:7e:52:a5:41:f9:
df:36:f2:62:1a:e4:e3:39:c4:67:52:f1:56:86:16:
c1:30:11:94:04:0e:71:d3:86:68:6e:d0:56:66:22:
63:a4:e5:5e:8e:68:58:35:82:fc:74:f5:a1:22:07:
d1:09:ab:6e:e5:27:6e:5d:f8:32:40:0e:e6:c0:b9:
01:33:64:8a:e6:03:6d:6e:de:13:c5:d1:2a:6e:a0:
aa:14:f9:1d:96:b7:cb:ae:23:2d:a8:9a:12:62:56:
e5:1b:71:9f:8f:5d:1e:92:be:db:99:52:08:cc:16:
5a:ab:f8:28:54:17:dc:c4:84:fc:09:5f:ce:a4:b7:
11:f6:8d:ab:41:46:bf:87:a9:51:f0:b7:7b:4d:0c:
ed:64:32:8b:26:0e:b5:95:d5:2e:f5:ef:e2:30:98:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:81:08:BC:02:40:FB:54:25:9C:4D:F5:B0:89:7D:B5:68:01:2B
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ad:39:5c:e9:b9:33:d0:d6:8a:fd:87:be:af:a5:36:ee:0c:
bc:b4:98:14:e2:43:bb:d0:61:65:1b:fa:2a:bb:3f:5c:69:4a:
9f:53:e8:fe:9f:8d:b8:89:48:a4:f5:fa:79:1f:8d:ca:4d:0a:
cc:2c:44:83:6a:75:b3:51:de:87:09:99:d8:c0:03:f1:84:f8:
4f:21:cb:9c:e1:e4:cd:d0:c8:ca:a4:d6:ac:db:3a:71:b9:73:
33:94:ae:12:db:0e:49:cd:62:00:81:06:08:c1:0d:31:db:a6:
c7:a0:e9:ff:12:e1:f0:3b:ca:8a:9b:d4:c6:38:ed:e9:29:ca:
03:e9:e6:6f:c1:e5:b4:96:a7:17:23:dc:44:a8:b3:81:8c:4c:
4f:a8:fc:e0:da:b9:8a:9c:77:3b:54:5e:70:da:d1:14:10:7a:
92:33:12:7e:6d:da:97:27:d4:bc:9f:a3:c8:cb:52:0b:71:04:
2c:04:5b:79:12:1a:73:67:1d:36:d2:3d:55:e9:6c:a2:04:dd:
04:63:1c:eb:4d:bf:cf:12:7b:38:ab:9d:b6:3a:a8:0e:d8:43:
aa:9b:a6:35:c6:dd:c9:0c:8f:33:4f:5c:7d:8e:ef:1d:6c:77:
75:72:fc:88:fb:e6:10:15:7f:13:aa:9b:d2:fa:9a:79:47:81:
9f:12:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:34 2025 by rpki-client