Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: tObQgPxLkUVrMxoFiVghB118fyYL/gqKB5UvdjRC2j4=
Subject key identifier: C4:4C:7E:1B:8A:96:09:4E:ED:2C:E4:0E:E1:0A:7E:7F:E2:B7:15:58
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 019896A660348E29B044AE8EE2D85A6C0E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0707
Signing time: Mon 11 Aug 2025 01:02:22 +0000
Manifest this update: Mon 11 Aug 2025 01:02:22 +0000
Manifest next update: Tue 12 Aug 2025 01:02:22 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: Td3zYuRGr3sRBfVui083E0KVCPROqLsED+zNGgzHijQ=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:60:34:8e:29:b0:44:ae:8e:e2:d8:5a:6c:0e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Aug 11 01:02:22 2025 GMT
Not After : Aug 12 01:02:22 2025 GMT
Subject: CN=c44c7e1b8a96094eed2ce40ee10a7e7fe2b71558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:e1:30:65:f9:4d:61:3d:bc:8c:4a:48:28:
63:64:dd:8e:aa:6f:da:2b:a4:82:a3:0a:78:c4:ed:
5d:a0:ab:c3:6c:ec:c2:eb:8d:c2:f6:95:37:a3:02:
75:43:00:bc:3a:98:ee:04:9f:a4:4d:6b:af:a6:e3:
d1:5d:52:b1:8c:72:b3:31:e1:a4:99:11:32:d8:ca:
51:24:84:fa:e3:b9:ce:61:a5:75:40:d1:23:23:33:
51:d5:7b:91:f2:56:c0:7e:9a:ca:40:7c:55:a5:f7:
06:bd:e7:f0:be:15:8b:c4:84:cb:35:4e:f0:7a:30:
a3:84:23:fc:f6:0a:2b:7c:8a:31:c0:cc:ce:e8:f2:
3c:15:bd:80:c4:d4:b5:67:ef:a9:3c:a6:34:7c:a8:
22:7b:38:46:69:26:62:16:9f:51:a0:6f:59:1b:8a:
3c:12:7f:51:81:ae:27:d0:32:ab:49:20:16:6a:e6:
bd:d1:57:cb:67:ac:1d:3c:a8:f9:6b:1b:25:af:44:
9b:0a:b4:b1:2c:61:76:a0:ec:e5:dc:35:43:00:30:
44:d2:85:2e:56:1e:d2:08:a0:b9:a3:38:4a:1b:c6:
a6:43:8c:8d:f9:f9:a2:d4:e7:75:42:71:5a:a1:9f:
d4:56:03:7b:24:b3:cd:12:44:6b:89:45:69:69:24:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:7E:1B:8A:96:09:4E:ED:2C:E4:0E:E1:0A:7E:7F:E2:B7:15:58
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e0:96:17:4c:42:64:75:ad:c3:cd:be:a4:3a:c6:cb:a1:79:
c0:95:a8:7c:2d:7f:b8:c9:20:15:41:6b:a2:5e:ff:16:1c:ca:
9d:a1:fa:56:6f:73:ab:36:36:48:0a:29:21:3d:76:b6:a8:47:
3b:d0:d6:55:69:ae:b7:4d:51:88:ab:75:24:9a:f5:a8:1f:1f:
05:d5:10:9b:fe:16:2e:6e:64:c7:f0:9e:96:88:ee:4c:59:d8:
dc:d1:9b:2a:1a:99:38:a2:66:e9:1e:48:a9:44:3d:ab:e9:f3:
aa:45:b5:5b:db:cd:ef:76:37:8d:c9:93:a7:0c:4d:33:88:a8:
cc:d3:9c:84:a5:bd:f6:3b:f2:f6:8f:39:4f:90:ad:ec:71:d9:
dd:69:0d:44:f6:0d:76:06:85:44:ac:c7:d7:40:0d:97:56:6c:
b6:63:27:f5:ff:f9:1b:b7:05:96:61:4f:7e:e6:c3:5e:41:a5:
80:4f:d3:cd:98:5f:c5:4c:97:c1:44:cc:58:11:5a:1e:15:db:
52:b9:e9:94:75:bf:7b:b7:aa:d9:6f:69:19:6c:26:bb:f9:cf:
6b:41:5d:c5:98:35:65:75:9e:ad:bc:50:a5:c4:ec:c0:2f:b6:
a7:a3:0a:ba:b4:0f:17:6b:3f:e2:8c:e0:83:81:8f:c1:7b:bb:
ce:74:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:41 2025 by rpki-client