Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: ERtKmrBWC8p1FTEzB235pWH6waH/HNQmxuvknyHUr88=
Subject key identifier: 93:91:27:1B:F3:B8:54:05:85:E2:93:F0:65:77:67:C1:6A:34:74:1A
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 01989336064CFFBE2512B6AD427A497D871F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0A6A
Signing time: Sun 10 Aug 2025 09:00:47 +0000
Manifest this update: Sun 10 Aug 2025 09:00:47 +0000
Manifest next update: Mon 11 Aug 2025 09:00:47 +0000
Files and hashes: 1: 2K0uKSMybLcdA8jtmNxG5Ki84QY.roa (hash: 5mE2Q4t19bkfyumGCGmg6dxDWvIkT1fJkVfrU9nbK78=)
2: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (hash: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: 64neivHMEONyds2UFqss97nYTmYwpJAWHBvLduXQ9ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:06:4c:ff:be:25:12:b6:ad:42:7a:49:7d:87:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Aug 10 09:00:47 2025 GMT
Not After : Aug 11 09:00:47 2025 GMT
Subject: CN=9391271bf3b8540585e293f0657767c16a34741a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:2b:16:b3:c1:a6:89:52:41:67:4b:e4:80:
45:6b:48:df:a7:e8:76:34:02:d1:c0:2a:4a:00:30:
1a:55:03:a4:49:44:3a:dd:de:a4:06:81:ce:e4:8d:
86:d3:99:9d:57:9f:30:1e:28:98:b7:6f:86:38:d9:
90:5a:29:4b:dc:52:ed:01:7f:fa:a8:95:77:56:37:
0c:d7:bb:0c:69:42:c3:55:6d:a4:dd:4f:5a:6b:0c:
80:f5:9f:8f:c6:48:bd:80:4f:87:f7:8a:87:2e:7e:
a5:72:14:4a:1e:69:66:06:ed:0f:26:c0:39:33:5f:
c6:cf:5f:37:79:14:9f:5c:4a:de:cc:e2:79:8b:0f:
49:c9:a0:52:90:ec:36:a0:00:63:ff:4f:81:74:fb:
df:3f:8c:a6:79:15:cc:9a:00:e6:63:72:78:76:cb:
03:5e:06:39:53:9b:36:d1:a2:5d:95:c4:93:a0:e5:
7c:70:7c:42:78:9f:50:e6:4b:02:74:4c:7f:8a:d6:
c9:07:fe:2c:34:17:a6:85:fe:d5:9a:5d:96:8b:d3:
dc:18:87:b3:1e:87:bd:96:75:12:58:26:82:cc:d9:
0d:d1:09:e9:fc:f1:08:c6:52:86:cb:19:bb:73:58:
1f:f4:f1:b4:3f:12:23:12:a3:06:46:b4:c5:1a:60:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:27:1B:F3:B8:54:05:85:E2:93:F0:65:77:67:C1:6A:34:74:1A
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0b:fc:e5:3c:77:8b:4f:7c:39:31:66:2d:dc:3c:d4:f2:e7:
fc:ac:4f:b5:f7:97:85:6b:dd:c3:6a:a9:b9:7b:1b:01:25:d9:
e1:fe:d7:1a:4e:b7:45:b9:e0:1e:80:6a:73:81:5e:8b:8b:c5:
61:50:20:5b:5d:8d:f1:e7:0e:cc:99:66:71:c7:1a:d3:d4:e2:
e7:2a:4b:04:7d:8c:d7:81:c9:ce:e0:16:a0:71:85:9e:ba:25:
09:ce:5f:84:ea:a3:35:2e:b6:6a:10:d1:27:e8:84:bd:87:25:
a6:d5:0e:6b:57:0d:c0:7e:53:60:ed:4d:99:aa:99:19:83:64:
1f:87:20:9d:15:0e:ba:fb:57:f2:d0:ee:53:b0:e4:99:45:db:
09:25:c7:04:bd:57:da:27:ca:14:60:ee:88:f3:04:82:d2:1b:
11:ea:9e:8a:22:2c:a8:9f:d3:89:9f:11:00:a1:ef:41:51:24:
cd:bc:f8:8d:ef:94:a9:73:c3:d1:ff:35:87:0e:78:7c:27:39:
6a:72:9a:68:95:b8:7b:0c:62:a3:3c:57:06:d7:2d:92:cd:bb:
d4:61:25:23:e2:d6:9b:b8:91:ff:5f:03:a9:4c:90:16:5e:58:
65:12:58:6e:4b:4d:72:e4:f1:24:18:d7:f1:89:dc:9a:d8:d0:
dd:f5:30:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:34 2025 by rpki-client