Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: B9uhC4LqawYHCP77yEDsGDERSsW1mIM0SEEFZUFhLyg=
Subject key identifier: 7C:DC:AD:D5:DD:EE:85:3B:8B:E5:68:86:C2:67:A0:68:E5:C3:87:BF
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 01988CFE604995A8582E0A2EEF71CDD410E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1271
Signing time: Sat 09 Aug 2025 04:02:17 +0000
Manifest this update: Sat 09 Aug 2025 04:02:17 +0000
Manifest next update: Sun 10 Aug 2025 04:02:17 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: a1CPc764+X+nD6FgOxPy4ZjRmfJoj+o5c0C8cx3dUhU=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:60:49:95:a8:58:2e:0a:2e:ef:71:cd:d4:10:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Aug 9 04:02:17 2025 GMT
Not After : Aug 10 04:02:17 2025 GMT
Subject: CN=7cdcadd5ddee853b8be56886c267a068e5c387bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:59:19:e9:7d:a8:4c:75:ce:bb:6b:f7:26:a4:
9f:4b:b1:8f:4f:f5:a8:ee:71:d2:34:b7:ac:f4:30:
ba:ef:66:15:be:99:e8:d1:e7:6f:40:c1:23:9b:92:
f9:de:0e:8d:0c:96:c5:5b:a1:6f:81:5d:08:0f:48:
e7:d9:ae:b0:3f:14:91:3a:78:c4:f0:b4:3c:2f:ce:
88:c8:3d:62:bb:a7:57:17:ad:f1:fb:19:00:47:1e:
7a:a1:ea:81:33:49:19:5e:1c:1c:b2:eb:74:95:63:
ef:41:55:dc:dd:cd:07:61:94:c2:41:f4:a0:e4:14:
1e:6b:5f:14:9a:4d:15:9c:da:ab:cf:31:75:af:f5:
bf:17:ed:39:4f:f5:68:36:0c:ef:47:f1:e4:9e:53:
e2:2b:78:0d:49:ec:30:61:da:b3:d2:6b:a6:3a:0a:
29:34:73:ea:11:9e:1f:53:20:24:1b:62:58:ee:94:
9c:10:91:d4:44:16:cb:56:85:24:1e:fe:64:58:17:
30:c7:e9:3e:3b:f1:ea:40:0b:d9:7e:e8:a8:7e:be:
df:84:8e:32:43:7f:1c:c3:da:8e:9e:54:91:19:f6:
0b:56:67:b8:b9:ee:5d:05:59:1c:d3:0e:c4:9d:33:
a8:0c:24:83:fb:4a:1b:d5:5f:21:1d:c2:fa:f3:91:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:AD:D5:DD:EE:85:3B:8B:E5:68:86:C2:67:A0:68:E5:C3:87:BF
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:92:51:01:e2:13:38:0c:1e:7f:0c:9d:61:a4:e8:a8:34:60:
31:8c:ea:b1:50:d3:cc:45:c2:91:35:23:bb:b7:b9:ee:38:48:
c7:b8:e8:7e:8b:d5:fe:b4:06:a4:b2:67:6f:05:4a:50:45:2a:
8f:00:da:2c:f3:8e:2c:55:c5:de:87:33:64:5f:da:bb:d8:77:
66:02:09:fb:3b:48:d0:0e:d3:ec:0e:55:a3:c7:7d:43:7f:a9:
43:19:f5:e6:d0:79:44:b8:91:65:20:7f:e1:70:7b:52:17:ad:
1d:4c:4b:04:dc:46:b5:a4:25:ff:b4:a4:16:4e:95:84:75:c7:
69:c3:7d:14:d9:67:00:05:1d:ad:bf:fc:39:1a:f5:ac:18:d7:
e2:78:b1:d9:b1:a9:c7:3d:5f:68:cc:c3:37:c4:d0:91:7b:25:
28:59:b7:14:30:94:8d:fc:6f:b3:cb:4e:00:43:a5:93:ec:c0:
99:da:aa:b8:39:03:a2:74:ac:8e:ee:52:a2:90:22:ef:6f:d2:
56:21:5d:06:8c:45:eb:9c:18:8a:99:e9:80:18:21:c7:f3:f8:
a1:93:ce:11:9b:0d:0d:c5:b6:b9:88:c7:7f:4f:4e:2e:81:d5:
c4:d5:3f:52:dd:dd:81:1b:33:36:24:35:dd:3f:59:62:08:c8:
2a:0d:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:05 2025 by rpki-client