Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: gZFkgyjvDhaI9x6cclJHbxvY/ngcu/ghX1rB6AxAFF0=
Subject key identifier: 45:4B:91:6D:4C:F1:42:A9:9F:57:39:93:E3:7E:65:D2:B8:26:DA:75
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 01987C77ED697397BF65C530E9D4B28CD498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 1620
Signing time: Tue 05 Aug 2025 23:01:30 +0000
Manifest this update: Tue 05 Aug 2025 23:01:30 +0000
Manifest next update: Wed 06 Aug 2025 23:01:30 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: xuYUL7jBNjgHZUYFvH5rtQn/sLuAgjdrg/65vVeeXww=)
2: NbSHLJ18LUFyB0iCR0rBch7bc-U.roa (hash: m4WtwA746c9+1dEjftL5KY1wr7YjjqzoZ0GnddIoHLc=)
3: OblX778QtOOevvVmLppB6okYChg.roa (hash: RcRv1xji1xsemWDqjTtvWFuENOLwcxiNbuhjUnUsVAs=)
4: nrPgzgHDDtDxynx0QD9e2VIxNS4.roa (hash: zbB58fN/lRPGxPAWWtZWRRqfZ8FZqb3qnG/xrDyogwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:ed:69:73:97:bf:65:c5:30:e9:d4:b2:8c:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Aug 5 23:01:30 2025 GMT
Not After : Aug 6 23:01:30 2025 GMT
Subject: CN=454b916d4cf142a99f573993e37e65d2b826da75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:0f:6b:18:4d:2c:a2:8c:e4:33:87:21:bc:
85:98:b6:ca:62:a9:67:64:80:7a:b6:f5:ed:bf:7b:
e1:21:b6:56:95:c5:7b:fa:8e:89:d7:da:48:35:61:
49:fa:9a:61:3b:b4:d4:b4:98:e1:8c:19:ac:0d:25:
1a:c0:6c:91:f1:e8:2e:34:b4:16:32:26:0d:96:89:
c2:0f:08:ec:76:47:d2:d9:29:5e:fa:4d:ee:62:0e:
e4:be:02:e7:36:f4:c8:d2:ac:32:aa:fc:0a:ca:8a:
22:ae:95:a1:73:89:c5:d8:69:bd:88:06:57:f1:31:
20:d8:f3:08:69:5b:ac:aa:61:d9:4b:15:90:17:d1:
29:e3:c5:10:2b:a1:1f:1b:e2:a6:d2:e0:11:ed:85:
14:66:d2:5c:c9:1f:fa:2b:a8:4d:b0:12:40:c1:32:
09:65:52:27:d9:e0:68:7f:82:85:15:13:a0:18:81:
53:74:8b:89:34:3a:80:2d:1d:d3:9c:e7:67:25:01:
b5:89:39:b0:09:b2:49:e3:7a:6f:b1:0a:93:54:cf:
89:92:c1:2e:41:63:29:f1:6e:45:31:ad:62:c3:fa:
23:8b:93:9c:ff:a8:63:9d:ca:bb:48:3f:47:97:e0:
6d:6a:73:b1:bd:c3:a0:80:43:ec:ba:d0:44:b6:37:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:91:6D:4C:F1:42:A9:9F:57:39:93:E3:7E:65:D2:B8:26:DA:75
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:63:f2:52:23:71:a4:22:be:2f:02:b4:bc:2a:98:de:b8:ae:
b8:8c:f7:80:a2:3c:7f:fd:a1:b2:77:01:11:40:22:22:4f:0e:
c9:84:a2:95:b9:f0:81:9b:4a:81:36:ba:82:9d:4c:29:19:64:
78:6a:5d:c8:e5:68:6a:2d:be:23:bb:cf:8e:bc:1c:19:1b:10:
ec:cc:47:03:28:6c:5e:6b:c5:d4:c1:28:02:c4:80:af:1f:6b:
c2:4b:5f:e8:7e:4e:a8:07:fb:1f:de:21:a0:9b:3a:68:6d:ba:
0b:ac:b2:61:a1:56:ce:8b:b4:89:2d:83:8f:4d:3c:7e:e1:34:
b5:35:ca:41:df:95:a5:61:ea:b9:bd:4f:19:a8:ab:03:f8:5e:
39:26:42:9b:1b:7d:31:42:c7:b2:d8:80:6b:a0:a4:be:f6:70:
0b:cf:46:12:67:1a:b1:8e:ad:a0:40:18:9c:be:51:e9:45:1a:
d8:c8:e8:f1:8a:a1:bb:a0:65:9b:fd:f7:70:ed:a5:c7:4a:6c:
51:28:8e:ea:f0:c3:f1:e7:9e:c8:59:e0:ff:79:40:e8:b1:b6:
a4:41:4b:e7:63:03:bc:16:cf:72:4e:ba:86:e4:7f:03:b8:6a:
bb:8b:50:32:a4:8e:3e:3e:73:58:a5:51:bb:d2:02:6e:dd:c6:
fc:a7:be:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:42 2025 by rpki-client