Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: hOeoCrpRZPeZf4GECMYsN3cqlIHpNc8bc9TpxDFIjpQ=
Subject key identifier: 2F:B8:8F:74:2C:0F:C5:BD:6B:8E:88:1C:B9:D6:05:FB:20:53:FE:BE
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019879AED9E1C75116BFD060D400288AADCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0B8F
Signing time: Tue 05 Aug 2025 10:02:38 +0000
Manifest this update: Tue 05 Aug 2025 10:02:38 +0000
Manifest next update: Wed 06 Aug 2025 10:02:38 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: oQWQl1TgVIfOKO2jH+uB+WSBVwG9mN4vJLAUi8H4evU=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:d9:e1:c7:51:16:bf:d0:60:d4:00:28:8a:ad:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Aug 5 10:02:38 2025 GMT
Not After : Aug 6 10:02:38 2025 GMT
Subject: CN=2fb88f742c0fc5bd6b8e881cb9d605fb2053febe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:39:0b:38:be:40:c7:40:86:83:ab:e2:44:
1e:02:4e:11:bf:27:2f:60:1e:a2:40:67:d1:a9:14:
94:73:6e:2b:e9:94:11:b9:99:88:96:c1:53:96:c0:
0c:28:91:c7:b6:13:49:66:5c:18:eb:f1:43:84:f8:
b7:5c:c9:6e:79:7a:3d:85:b6:03:af:ee:ec:21:1f:
de:c0:4e:64:2b:96:9a:3f:62:70:b8:92:d9:23:7c:
d6:1f:d8:6c:e5:61:f5:4c:e0:48:90:bd:c2:c6:8a:
16:58:a4:38:ce:ad:bc:9c:68:08:10:43:47:cd:58:
b3:81:07:8c:a6:e4:b2:a6:bc:3d:85:3a:2e:08:ea:
a5:22:15:49:3a:d4:87:a6:a3:f2:9d:5f:61:9e:34:
ae:97:45:91:d8:b3:0a:b5:3b:66:aa:9e:47:d0:5c:
73:ce:50:7f:90:64:0c:c9:ca:67:54:e8:09:3c:8d:
48:d3:b4:db:4e:57:98:13:cf:58:3e:57:a6:32:93:
05:ae:c4:30:77:a5:a0:a5:98:24:cf:96:7d:6e:63:
40:38:47:05:07:8e:90:61:a8:61:74:39:7d:bd:ad:
e2:01:29:81:1d:34:6e:03:33:9a:1e:39:7c:7d:65:
cd:68:7f:d8:62:55:38:dd:2c:53:3a:54:3d:d2:ad:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:8F:74:2C:0F:C5:BD:6B:8E:88:1C:B9:D6:05:FB:20:53:FE:BE
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:df:80:4a:46:46:ae:a3:58:72:9e:a4:39:8e:85:19:a5:2f:
a5:66:60:66:a0:69:7f:b2:e9:d9:85:f0:f9:42:88:8a:eb:0b:
82:2e:23:e3:6d:39:63:5e:ac:3d:a2:83:01:0d:c0:45:c4:2e:
80:a3:0d:26:8d:d4:54:2f:a3:3b:07:c1:c2:d1:97:71:4c:dd:
6d:ef:31:ae:b7:7c:7e:e4:49:f1:eb:5d:d1:68:ad:0a:6d:8d:
66:73:60:69:71:02:a0:10:98:96:3f:08:1a:b8:d4:9e:a3:6e:
8f:f1:36:ed:ad:ab:77:6f:fc:8f:5c:2f:03:92:b9:1e:fb:29:
40:7b:dd:e0:c8:51:e1:bf:52:e3:c7:7d:29:41:f1:b6:ca:b5:
18:2b:26:08:85:ad:ff:42:a8:7b:9a:89:c5:ee:c1:44:c8:b2:
8c:30:c6:0b:1b:28:b2:bc:e0:88:7f:b2:38:2d:fb:be:a4:20:
ed:c2:87:ad:7d:db:f6:5e:53:49:bc:55:ed:93:70:fc:e1:19:
a7:78:fd:6e:de:57:dd:c1:10:f9:cf:d2:0c:7c:78:3f:0d:43:
82:93:97:88:00:7e:27:95:e2:bf:75:62:8c:05:4f:5d:cf:05:
96:4c:67:07:f0:3c:05:54:15:c3:55:7f:ca:e7:11:09:14:7d:
93:d2:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:01:44 2025 by rpki-client