Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier: squO6FbOvzYrcmtm09DB/crxhZ61bzU308jYMdNN+/g=
Subject key identifier: 02:CF:50:64:0D:F1:B9:74:0D:AC:3B:22:A1:F7:28:17:1F:68:32:0C
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 0198745073F2EBC10D7FFDFF303CBDE20E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number: 1224
Signing time: Mon 04 Aug 2025 09:01:26 +0000
Manifest this update: Mon 04 Aug 2025 09:01:26 +0000
Manifest next update: Tue 05 Aug 2025 09:01:26 +0000
Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: CdrY9TwINcQrMcVFkB+4q+fjQA0OnaElN7tk4OHIuHY=)
2: woal0JSD05J3-HE_srcu4HZklsQ.roa (hash: K5meebvZSg84nTxN3gUNn0hvuS4tbvBQ0f3EUj0mZV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:73:f2:eb:c1:0d:7f:fd:ff:30:3c:bd:e2:0e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Aug 4 09:01:26 2025 GMT
Not After : Aug 5 09:01:26 2025 GMT
Subject: CN=02cf50640df1b9740dac3b22a1f728171f68320c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:64:9c:4d:e1:2e:36:75:c4:d8:a6:85:37:
3b:0c:c7:42:7b:61:e9:e1:e7:ef:e7:fa:04:7e:e1:
e7:c6:62:8a:e4:c3:df:9b:5b:85:ea:7d:41:cb:3c:
2e:79:a7:ef:69:d0:e8:b0:0a:68:e2:b2:83:b4:0d:
c7:65:7c:47:32:27:73:59:f4:0e:64:e7:e9:51:cd:
44:4f:4e:4f:e7:3b:c2:d8:40:d7:98:9c:5e:c3:1b:
2a:eb:88:df:6f:12:79:d6:8c:c9:e0:2a:7c:26:09:
6f:57:ff:b5:75:39:0b:d5:99:c4:27:52:c2:56:ff:
c7:4d:3e:cb:4d:e7:a9:b3:e1:0b:54:68:cd:2b:70:
af:13:7e:34:ff:50:59:b8:11:bc:2f:d2:64:56:41:
75:e9:1e:60:79:5a:0d:cb:c5:81:38:0c:83:23:fc:
d4:e9:bd:26:14:58:5a:42:5f:c9:9f:79:a1:48:2f:
76:a0:77:50:e7:7a:e1:cc:5c:ab:59:c6:50:57:45:
f0:ad:ac:da:44:35:fc:b2:1c:16:09:aa:eb:5d:74:
1f:fe:02:e5:d1:14:c1:ae:8d:65:fd:2e:11:fb:cf:
ee:c3:9d:13:29:d9:a2:7c:88:49:5f:65:76:f4:2a:
06:3e:66:6c:22:4d:5d:ac:57:91:6e:c3:1e:53:19:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:50:64:0D:F1:B9:74:0D:AC:3B:22:A1:F7:28:17:1F:68:32:0C
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2f:82:59:bf:2a:2e:94:8e:03:52:d8:1d:52:67:66:fc:48:
cb:ee:14:d7:7a:f2:19:7e:e4:a0:f9:b8:3a:ad:8e:61:98:36:
e4:ab:8a:f8:eb:03:59:79:84:6a:e9:bd:09:8b:dc:1e:e6:71:
9f:1c:9a:23:7f:b8:46:e5:fe:83:65:e0:3a:40:b4:77:a1:f1:
6b:17:74:bc:07:d1:7d:be:63:84:75:cc:64:9a:55:a9:8a:a4:
eb:07:0a:49:61:61:d4:70:2d:fa:d4:93:fe:a8:07:cf:85:55:
a9:1a:0f:b4:70:59:99:f0:b2:8f:48:51:94:d6:98:7f:9e:21:
38:e6:fd:c9:7a:a2:33:51:63:39:29:23:2f:33:c8:a1:0d:51:
1e:95:04:cf:62:e9:eb:5b:41:2d:82:f9:cd:10:34:c2:68:cc:
45:d9:27:3c:ec:a4:09:35:ff:91:7a:0d:c5:26:11:8e:8f:6e:
55:cb:5e:a3:0c:64:dc:4f:a6:f7:76:e1:d0:11:99:23:3f:20:
60:f2:9b:57:4f:02:5b:49:ae:8e:41:c2:b3:69:9d:be:d3:49:
2e:5c:e7:f7:d3:b7:83:db:f6:c9:f3:47:83:cc:22:86:87:c7:
ae:86:c5:90:b5:20:4f:8b:65:dc:b8:8e:e2:85:64:08:20:c5:
99:38:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:37 2025 by rpki-client