Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: i1PcdotYLrjm75Uzlz+7v0MPWoFfuwUhuZ0v5nRMGlA=
Subject key identifier: C9:E4:48:35:80:98:E0:0F:3B:B8:41:86:03:28:CD:08:CF:03:E7:29
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019896DBF0303D97DF27E8110925CF763498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 02:00:52 +0000
Manifest this update: Mon 11 Aug 2025 02:00:52 +0000
Manifest next update: Tue 12 Aug 2025 02:00:52 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: 58xmOjNLFH6kcr+GmAHQva9V3KTircHziYw2LBwvSVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:f0:30:3d:97:df:27:e8:11:09:25:cf:76:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Aug 11 02:00:52 2025 GMT
Not After : Aug 12 02:00:52 2025 GMT
Subject: CN=c9e448358098e00f3bb841860328cd08cf03e729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:8e:db:e5:9f:fd:49:f8:bd:3d:14:c3:4a:
3c:c9:20:f5:0a:83:15:84:be:1e:8d:7a:c6:3c:53:
ba:e9:c2:ab:26:16:f8:1d:8a:fc:13:a4:bc:cf:2f:
7c:ee:36:94:7a:48:ff:9e:fc:6e:92:78:b4:bf:15:
bd:a6:90:34:88:9d:85:57:5d:07:fc:43:b5:48:d7:
0c:1d:5e:bf:76:a2:51:14:f5:93:0d:2e:8a:b9:d8:
29:bf:dc:0f:8a:ce:08:00:74:a2:2d:56:69:4a:fb:
a9:39:1e:ed:8a:65:9f:86:31:38:a3:89:33:97:ff:
f2:79:cb:78:25:1a:f1:f5:08:af:2b:f1:ae:57:04:
86:0e:44:9e:61:05:1e:49:58:7a:3a:0b:2b:59:a5:
8f:cb:d7:b4:58:ca:11:02:b0:f3:c5:40:c9:5e:28:
86:ae:ce:6e:ac:40:ed:18:fd:e2:ca:03:09:cd:79:
78:6b:b3:03:05:30:e9:2f:b2:a3:a6:20:d5:f0:56:
a1:9e:61:e8:95:42:eb:82:bd:b4:e8:dd:99:a8:1f:
fe:90:b5:b4:eb:a4:67:82:c8:44:92:31:ec:6e:74:
da:31:3e:f1:22:ac:c7:24:9b:27:55:04:f4:06:49:
8a:9c:21:d4:ce:d9:4e:5a:be:e5:21:2f:a3:30:fe:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E4:48:35:80:98:E0:0F:3B:B8:41:86:03:28:CD:08:CF:03:E7:29
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:85:d2:12:36:af:8c:44:1e:3f:0a:9a:f5:f8:dd:16:8d:86:
52:10:9f:68:32:69:a9:9c:34:b0:85:ba:2c:cf:b3:bc:36:46:
88:48:c6:e3:38:f3:f8:a3:1b:3b:8b:83:1f:b1:b7:fb:c4:19:
9f:58:23:a7:41:9c:c8:cf:3f:4d:14:72:15:c5:37:2f:c0:70:
76:bb:33:bb:3d:cf:96:5b:86:f0:d2:17:51:bf:cc:8f:64:49:
4d:97:cb:aa:e7:a7:9f:0c:65:23:5d:a9:51:03:bb:ed:64:80:
6d:59:17:e5:52:86:de:31:a5:e9:64:dd:8f:84:7e:7f:aa:3e:
61:94:a4:d8:36:70:42:12:81:3c:c4:15:66:9a:c2:18:25:91:
59:18:c9:70:ac:ab:9d:24:57:ea:d1:0a:aa:47:ef:39:b9:14:
0f:a7:02:3a:12:9c:9a:cb:77:f6:fb:c3:36:0c:46:9c:6a:77:
9f:82:60:69:6b:ed:51:a7:82:90:b3:8f:f0:0d:0c:50:21:9b:
29:21:90:15:d4:8d:d9:1f:ad:b7:d9:66:cc:b2:87:c4:49:d6:
67:6a:61:a4:e2:a6:2a:ac:13:e0:ae:86:72:40:35:58:04:5b:
57:80:34:f1:9e:54:7a:22:6b:ef:32:24:de:9a:57:45:c1:24:
5f:94:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:43 2025 by rpki-client