Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: 22woU9nXv+FLVL405Z3af1Ty/WNZMaSsf2QRsm46gtI=
Subject key identifier: 09:70:2B:2F:1A:83:9D:A0:2C:78:99:52:0A:41:A3:97:96:D0:ED:4D
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 01988DD95E57FF80E36C87F9A6F2050CCD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 1044
Signing time: Sat 09 Aug 2025 08:01:29 +0000
Manifest this update: Sat 09 Aug 2025 08:01:29 +0000
Manifest next update: Sun 10 Aug 2025 08:01:29 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: wMTqt09W3ZLQlByA1diD0rag51wOPFUgVGNavFEgZ9Y=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:5e:57:ff:80:e3:6c:87:f9:a6:f2:05:0c:cd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Aug 9 08:01:29 2025 GMT
Not After : Aug 10 08:01:29 2025 GMT
Subject: CN=09702b2f1a839da02c7899520a41a39796d0ed4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:da:6f:74:76:fa:c9:a9:b6:4d:0d:f5:ce:
39:74:6c:41:dd:a3:42:7f:29:ed:ac:50:06:b9:7a:
83:17:37:b2:f7:07:e0:91:2d:56:0f:0d:71:b9:cf:
5f:c2:15:69:0a:00:9b:f0:77:9d:19:36:03:39:bd:
7d:39:13:74:4c:31:bf:24:3f:2d:19:2e:b7:ec:51:
61:14:1b:53:66:79:67:33:0c:15:73:a0:a0:db:ce:
bc:36:97:eb:71:9c:96:27:96:f2:61:dc:b9:ca:c4:
05:dd:a0:e9:e4:10:07:77:3f:b3:bf:07:ec:5a:77:
ad:ad:6a:0f:d9:95:92:89:4c:e9:8b:6e:d5:99:6f:
ba:b1:6e:d4:b7:4c:8d:12:66:74:46:19:65:9a:87:
83:55:04:fa:0a:47:e4:7d:a2:cc:49:04:2c:7b:7a:
0a:27:7b:8a:3d:f3:1a:3e:74:14:54:f5:bc:87:ab:
96:c1:71:d1:02:31:79:73:93:1e:97:d0:38:d1:cb:
4a:32:52:4b:91:72:8d:ae:a6:b6:b1:54:59:18:81:
e3:9d:2c:0e:df:8b:55:5c:cc:6c:14:ed:26:ca:47:
35:3b:33:a5:33:d1:80:8b:ae:1f:61:3e:2c:ed:ba:
23:bc:d0:8a:d5:1e:ec:c1:1d:9a:f9:ee:f2:87:41:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:2B:2F:1A:83:9D:A0:2C:78:99:52:0A:41:A3:97:96:D0:ED:4D
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e1:68:48:74:b8:5a:40:52:94:ac:a1:31:d5:ed:35:b0:17:
a2:18:bc:3d:d1:2c:38:07:5f:20:43:b7:6c:90:ed:c1:c9:fd:
93:6f:ce:19:0d:ca:2f:65:c4:ca:97:f4:2c:a2:65:26:6f:d9:
d3:ef:f9:57:6b:f5:0f:84:61:3a:97:25:7d:c5:ea:15:21:4e:
71:8d:f5:06:22:95:82:1b:90:37:0d:98:47:cb:0a:49:61:73:
c4:29:a9:33:d8:a8:b2:77:0f:d4:74:ff:ec:5f:82:a8:1d:c0:
d9:f7:b5:e2:a9:2c:32:4f:44:33:cb:83:47:c1:45:14:53:eb:
6c:da:70:51:d2:5b:b0:55:5f:2f:d8:6a:a2:b3:23:11:d8:2b:
c2:0a:4a:b5:5e:ed:bb:a4:0f:50:c0:cc:ff:8c:64:b3:a5:44:
1b:f0:90:38:c1:f8:55:f0:93:10:3b:9a:69:4a:57:17:7b:7d:
2b:60:c0:c8:0c:c5:01:f9:75:e7:bd:91:7b:73:c9:ba:a9:74:
de:56:5e:44:c2:68:00:53:3e:93:e6:98:94:db:30:b3:bf:ed:
5d:40:5b:d0:97:eb:ff:77:9c:5b:97:bf:00:62:9e:4f:2a:30:
73:23:dc:c3:8b:25:12:5e:03:57:90:d3:54:4f:41:f2:f8:56:
17:76:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:42 2025 by rpki-client