Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: XkCGKCN4J+rtNgjqaTACswjZ/mqlT1x4z+cAgNiYOf8=
Subject key identifier: 42:BF:E1:AF:FC:D8:04:70:A2:AE:90:11:E2:7E:7D:81:B4:4A:3C:44
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019882B0C198DB5FF31A51192F47A6E4F38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 04:01:18 +0000
Manifest this update: Thu 07 Aug 2025 04:01:18 +0000
Manifest next update: Fri 08 Aug 2025 04:01:18 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: qtmiKe4hmaUG8KZ0Wfm5LY7mFu3CoEJ2+y+GCUdVIyY=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:c1:98:db:5f:f3:1a:51:19:2f:47:a6:e4:f3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Aug 7 04:01:18 2025 GMT
Not After : Aug 8 04:01:18 2025 GMT
Subject: CN=42bfe1affcd80470a2ae9011e27e7d81b44a3c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:97:a4:ce:c2:91:87:e1:e4:a9:c9:a8:cc:
60:0b:33:7b:be:ce:39:fd:6a:71:cc:0a:df:f1:4f:
45:b9:54:c0:24:28:5b:b7:27:c9:71:bb:26:52:5b:
c3:c7:4c:e3:e3:71:93:88:4b:cc:68:b7:79:8a:d5:
9b:1d:2b:ae:fe:c3:90:54:1e:fa:05:83:c5:c2:cf:
6c:08:57:cd:ac:d2:3f:34:0f:d0:95:33:35:53:dd:
a5:4b:27:b9:5a:c7:f7:ba:8d:08:1d:a1:5f:78:68:
a3:81:e5:90:4a:21:7e:9b:03:2a:b5:98:dc:4e:fb:
3d:78:17:f0:65:63:f5:7b:ea:e2:a3:48:26:1c:bb:
3c:7d:83:f2:64:bc:c7:c3:11:42:9c:4b:81:72:d5:
df:a1:1b:31:b8:e8:50:ef:71:8d:99:d8:eb:ed:1a:
9f:0e:e1:89:4a:b7:f1:43:a2:ba:26:10:32:bd:39:
3d:bd:5b:9a:ff:82:60:2f:8a:1d:e5:13:f0:1e:16:
6f:f1:14:c4:cb:b3:27:9f:5c:a1:02:4f:5c:4b:2d:
ca:b1:16:28:62:3e:b1:d2:d5:30:b9:e6:9b:e9:83:
16:b8:c9:91:57:62:35:cf:94:f3:a3:9a:98:32:72:
15:f5:1b:d0:29:a1:ce:b3:0e:3f:8f:43:ab:cf:16:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BF:E1:AF:FC:D8:04:70:A2:AE:90:11:E2:7E:7D:81:B4:4A:3C:44
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:66:ea:be:cd:a0:fd:51:9f:24:6f:5e:d1:cc:52:57:12:37:
27:a2:1d:37:ac:2b:aa:fe:12:67:a8:9c:84:d7:4c:31:b4:55:
92:17:1e:99:b6:38:92:50:ee:d7:56:c2:49:f8:5b:0c:6e:19:
bd:81:46:9b:84:0b:53:5c:56:5c:30:e6:2c:7d:87:f0:12:73:
9a:7b:41:f5:02:08:9d:fd:24:60:6c:5c:f9:01:4e:34:55:00:
74:ed:5e:21:0e:bb:8e:c3:bb:fc:d3:f6:f8:84:25:dc:8a:a2:
1a:6c:d6:9f:6d:a8:ce:80:47:59:04:f6:66:e8:3b:76:90:43:
f4:af:c4:11:a3:35:2b:0c:1f:5c:6f:0d:d3:ca:8e:c4:d1:93:
45:a7:b2:50:7c:59:cf:73:23:61:40:ef:e0:bf:cd:63:9c:da:
b7:a5:a1:55:b6:11:5a:cb:b8:14:8a:05:69:b0:e1:a0:0a:af:
00:77:95:3e:4b:fd:2e:86:63:6c:8b:d1:3f:d2:a2:67:6e:88:
90:d2:ce:f7:54:a8:35:e1:e5:c3:4b:7b:29:d3:18:15:d3:db:
66:56:9a:37:6e:95:5c:06:ac:da:95:a8:d2:bd:ad:83:21:00:
37:d1:97:92:e8:a0:c1:cb:8d:93:2f:ed:73:de:bc:0f:f4:47:
38:49:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:01:19 2025 by rpki-client