Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: 9yvG+O035PNUz9D9Pz5/z75iY+HUygzQnAjDLPz0ONM=
Subject key identifier: 17:E6:05:6C:5C:68:E9:5D:E3:DB:F1:42:08:A0:51:51:FE:96:43:BD
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 01989749D57F8F828613002A08533A2048F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 122E
Signing time: Mon 11 Aug 2025 04:00:54 +0000
Manifest this update: Mon 11 Aug 2025 04:00:54 +0000
Manifest next update: Tue 12 Aug 2025 04:00:54 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: 27jzkY/Uxadxrx5lni0QSfPlBy8zu2TOFeWGQvq8sDo=)
2: nMVNf2lQw6OBO1n2yk42KKveQrw.roa (hash: wyqNzIcUGswTCmLW0W5XZCdk6EXaGRyb1txoc0qPRcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:d5:7f:8f:82:86:13:00:2a:08:53:3a:20:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Aug 11 04:00:54 2025 GMT
Not After : Aug 12 04:00:54 2025 GMT
Subject: CN=17e6056c5c68e95de3dbf14208a05151fe9643bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:2e:cb:df:17:c2:4a:24:cd:a6:bd:c7:d5:
8c:2e:d2:4a:9f:45:d6:d0:2c:42:8f:db:e3:d8:2d:
eb:09:3d:00:1c:d9:3c:46:60:fe:d0:d9:35:7f:52:
5d:73:12:ad:86:26:14:3d:38:cc:0b:04:4c:9e:58:
98:9d:89:8c:2b:aa:6f:95:3a:6f:55:f6:ea:ca:92:
fe:1e:e7:04:ed:e3:19:bb:b7:5d:d0:d0:11:ce:55:
5f:c3:c4:60:10:2f:4b:05:c8:35:dc:44:37:e5:d4:
1f:0b:d4:9b:41:62:aa:9e:b3:09:6a:a3:1a:97:28:
a4:11:43:6c:b9:4f:da:8d:12:b5:4a:33:66:45:c1:
4f:b4:d7:9d:4d:10:18:5f:07:44:e0:6a:6b:64:b8:
26:21:f6:43:a7:88:31:b3:8b:0b:93:28:e6:e3:8b:
1f:65:f1:8a:28:48:8c:49:c2:53:9a:b0:93:4b:53:
d9:d4:02:d8:2c:a9:ce:b8:78:4e:59:8e:7f:a5:95:
39:40:33:02:5a:1a:8c:3b:12:8b:4e:7d:9d:36:6f:
f9:4e:f6:63:e6:41:17:a2:3d:a7:79:57:0e:2f:28:
51:4c:1b:f9:ba:5d:99:d0:24:21:45:17:79:94:ed:
a8:15:8d:e8:91:8d:64:c4:f5:10:b7:a4:81:21:c1:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:05:6C:5C:68:E9:5D:E3:DB:F1:42:08:A0:51:51:FE:96:43:BD
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:74:33:3e:e4:36:68:7c:78:0d:f2:bc:76:b2:e5:3b:92:a1:
5f:ab:31:bd:28:ba:cd:26:f4:21:fd:8f:20:1d:12:7c:31:b8:
e5:c1:cf:d1:0a:82:f6:11:b2:48:a8:b4:1a:7c:7a:b3:4f:f1:
b3:d3:11:ba:78:b2:6b:e3:ab:8f:16:8e:a6:67:73:2f:af:0f:
75:fb:88:33:ba:83:95:76:a2:36:1a:f1:b4:74:df:a0:dc:e1:
b1:cb:33:b0:a1:78:fa:e0:f9:42:46:3d:5c:2e:86:60:ef:e5:
f8:a0:c2:d4:f4:7b:fd:ee:c3:3f:cb:85:e1:f6:31:70:e3:df:
e1:fe:82:ae:f9:5a:82:09:3e:0d:a9:4a:b3:98:c8:e3:fb:1c:
f4:47:45:7e:58:aa:72:a4:74:d8:73:8a:a4:b2:91:c5:8b:a5:
46:c3:6e:bc:f0:42:2b:60:85:af:4a:ee:7e:0e:63:32:dd:ec:
e2:e7:ed:b4:79:d4:6f:38:b8:ad:b4:d5:22:51:6d:2a:d5:42:
71:fd:62:32:93:d0:cd:da:7f:b9:b0:4b:4b:31:ca:bd:4b:5a:
10:36:78:30:ad:3b:f0:0f:fb:2a:ad:f8:eb:34:c3:fd:4c:9d:
ea:d4:a4:ce:2a:e3:5f:51:10:e9:66:6b:58:ea:11:ae:53:ec:
d0:d3:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:38 2025 by rpki-client