Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: D4tHdzv2rfEqd1as/kdPB8OSvB+dYybTL1pkQwNrgI8=
Subject key identifier: 13:1C:B9:E3:20:95:90:A6:AE:FF:45:A2:9C:F9:B9:DE:4C:FA:E0:DD
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 0197684E78D99D539A533A63889B10698550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 019A
Signing time: Fri 13 Jun 2025 08:01:02 +0000
Manifest this update: Fri 13 Jun 2025 08:01:02 +0000
Manifest next update: Sat 14 Jun 2025 08:01:02 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: tqB/rkFtfdRViYQPAvUV+kfQow1vO3IkM8EfmGWa9m0=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:78:d9:9d:53:9a:53:3a:63:88:9b:10:69:85:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Jun 13 08:01:02 2025 GMT
Not After : Jun 14 08:01:02 2025 GMT
Subject: CN=131cb9e3209590a6aeff45a29cf9b9de4cfae0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:6b:c1:72:1a:d5:a8:9e:f1:47:ca:ce:e0:
69:b6:4e:4e:e0:de:21:aa:2d:b9:76:d6:e1:c5:e9:
df:a4:dc:81:04:64:8a:2e:94:7a:81:0c:95:72:7e:
81:88:18:2b:90:17:e5:49:77:36:db:c4:4d:bb:a3:
50:d6:a2:31:22:f7:99:d5:63:a8:8a:93:2d:3b:c4:
54:fe:54:64:7f:51:46:cf:ac:ad:04:f3:4c:7c:13:
73:cd:66:98:35:58:f4:84:ad:b3:89:6c:f1:c0:13:
20:8c:b2:74:52:ec:a2:83:6b:be:38:da:7c:2e:57:
04:1f:5d:62:7a:4d:51:8b:9e:c5:91:63:5a:8e:b3:
29:ea:46:a0:00:2e:80:33:84:0d:46:e4:e6:c3:1d:
2c:68:ab:67:0a:04:a6:01:7b:b9:93:c1:52:d3:25:
98:40:d1:08:ba:a1:40:36:f3:d8:dc:2c:ee:5d:37:
d5:8e:f4:4f:cb:c6:d0:22:74:90:73:b4:df:8f:b4:
ef:7e:ea:35:e3:8e:26:86:a7:c6:95:e3:55:bf:61:
cd:c5:20:37:57:db:86:c3:08:8d:63:b9:99:c9:10:
42:db:9d:f9:08:76:78:1c:d1:60:31:8e:e3:4a:50:
dc:5d:6b:b5:72:ec:4d:1b:04:8a:7b:bf:59:ed:af:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:B9:E3:20:95:90:A6:AE:FF:45:A2:9C:F9:B9:DE:4C:FA:E0:DD
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:07:db:01:ae:20:51:a0:f2:95:e5:49:1d:7e:a2:1e:99:8c:
95:34:8c:9d:9f:e8:86:93:43:f7:84:a9:23:b7:3a:87:05:f4:
73:5f:02:81:42:c6:bb:b7:c4:69:ef:1e:97:dc:7c:b3:39:a2:
61:e1:ee:c1:71:a2:14:52:c3:9a:b4:84:ea:52:32:4e:cb:e2:
4c:27:55:c2:1f:12:df:f2:25:10:4a:22:b9:16:af:ef:e3:1a:
56:b2:1c:74:91:72:4e:85:53:59:e5:d3:7a:28:1f:8a:03:71:
19:ad:61:c6:b4:08:1b:4e:d8:d5:12:ea:65:7e:34:bc:91:00:
de:e4:04:3e:3f:14:a7:ec:77:34:62:35:0c:0c:0b:02:98:b4:
4c:80:22:d2:0a:30:56:e4:22:e9:1e:6f:55:9c:63:dc:19:69:
4a:b4:8a:12:f5:04:94:8b:e1:9f:68:46:dc:90:37:d2:8f:9e:
12:94:4d:9a:a5:05:cc:4b:52:83:70:d8:31:4e:1b:a5:1c:b1:
2a:63:fa:64:9e:35:f8:6e:fd:dd:6b:ce:d6:31:0e:a0:b3:ec:
5c:87:d8:25:06:5f:1b:53:11:87:38:1c:39:74:81:37:09:d4:
d5:32:9b:c2:ab:ab:c1:8b:00:8f:30:e0:1e:1d:a9:df:54:fa:
94:6d:96:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:15 2025 by rpki-client