Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: r3pge19qr3Qwz2TSH9YWkjtKgtI8OqYPf/jFLWZl0Qs=
Subject key identifier: 91:EF:32:79:1D:38:68:63:20:AE:96:20:7F:C8:AF:7C:92:23:56:74
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 019872CF798AAD53B0D392104D87AE8B798B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 0224
Signing time: Mon 04 Aug 2025 02:00:56 +0000
Manifest this update: Mon 04 Aug 2025 02:00:56 +0000
Manifest next update: Tue 05 Aug 2025 02:00:56 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: OY2cwRNDZhHJBPDLX1Ko7gOK7tVPiySpqrmiGj55qxE=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:79:8a:ad:53:b0:d3:92:10:4d:87:ae:8b:79:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Aug 4 02:00:56 2025 GMT
Not After : Aug 5 02:00:56 2025 GMT
Subject: CN=91ef32791d38686320ae96207fc8af7c92235674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:93:07:e3:af:39:37:60:1f:db:c9:70:62:
91:7a:4e:53:f4:20:ba:44:62:9c:ab:1a:d7:70:ef:
ff:15:e4:74:f2:12:e7:44:72:9b:9c:f3:e8:7c:7d:
60:06:81:91:fe:93:3f:00:c7:e2:44:ca:94:86:8c:
72:97:8f:36:42:e9:6a:91:f1:19:f9:d7:c9:a4:b3:
97:cb:de:4e:c3:15:db:67:b2:f7:ce:71:a6:dd:91:
45:ae:6e:93:2a:c7:1f:c1:19:fe:52:04:5a:b0:e9:
16:04:8f:a1:6f:c4:b0:24:4f:a4:5a:7a:84:d4:05:
01:ab:9f:2f:a2:c6:8a:f9:dc:d4:43:82:1e:5c:03:
cd:97:ce:2f:87:1a:b0:63:33:f4:4d:88:0a:0a:be:
f0:7c:2c:bc:66:d7:5c:8d:f2:fc:ac:ca:bd:70:2b:
92:de:36:a7:62:58:30:c0:0c:32:ce:12:d9:8b:3d:
d5:f0:52:3c:e7:bb:69:5a:32:53:7a:6b:23:d9:06:
0a:0f:e4:be:0a:da:82:ce:9d:a3:e9:4f:e1:d8:4a:
1f:4c:a6:ff:6e:77:83:4a:d9:f2:e1:09:a0:9d:dc:
07:3d:aa:79:f7:32:16:d5:99:c4:6c:f8:af:87:fc:
3e:69:99:aa:40:75:96:64:62:73:8f:99:cf:65:8a:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:32:79:1D:38:68:63:20:AE:96:20:7F:C8:AF:7C:92:23:56:74
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:64:0b:7c:12:4f:44:e3:c4:e0:2d:34:9d:18:5e:8a:48:d9:
b6:57:5f:af:95:1e:89:cf:1e:86:52:af:1e:c6:d6:99:39:2f:
06:13:6c:7a:e1:8c:cc:5f:64:af:f7:c1:48:eb:96:2d:36:7e:
b7:af:e3:7d:7d:82:8b:78:8b:d9:b0:c5:b5:35:c1:49:96:90:
b3:9e:b7:97:36:cf:0a:1f:46:00:c7:68:ea:dc:8a:c6:37:90:
f0:f7:70:b8:b7:28:65:b9:db:33:b7:88:07:b9:47:83:14:cf:
72:26:86:4f:82:cd:97:33:49:94:86:7c:42:53:04:e5:eb:84:
d9:0d:57:00:06:d0:4f:64:5b:06:4d:41:56:8a:ca:9f:18:98:
3b:16:0d:47:82:f5:e5:5e:5c:e0:ef:87:5a:89:d5:26:fe:c2:
71:77:e5:f7:a2:ff:2e:50:83:d3:a9:d2:ab:71:72:64:e0:c9:
a3:85:67:97:2c:ec:e1:04:94:d6:49:1d:f6:4a:aa:39:8d:b4:
47:9d:53:2a:7e:d9:34:d3:ce:97:11:8e:31:a5:00:41:88:83:
92:f4:5a:2b:7d:55:28:a6:20:9c:4a:12:d7:25:b4:e3:30:e4:
40:1f:ce:00:c9:7d:9e:d0:d6:54:c8:1d:a3:6b:bd:3e:d7:71:
46:05:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:09 2025 by rpki-client