Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: RfjpIUZRMRDMxB2UU6xJdcwbE0p8uJXztgXP51dTYug=
Subject key identifier: FC:54:2C:BF:E4:6E:9B:AA:1C:6C:0D:0F:D0:F1:96:3A:42:DC:BA:3E
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 01987D1C91ED1687F860BAB6703863DD3842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0CB9
Signing time: Wed 06 Aug 2025 02:01:20 +0000
Manifest this update: Wed 06 Aug 2025 02:01:20 +0000
Manifest next update: Thu 07 Aug 2025 02:01:20 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: tYDdeUcfEY/QsRonPerovmVGqHA3sLNGd/9PbpCBF8Y=)
2: AThGgouxKv8fc_GjPfk1KTqcYJ8.roa (hash: pBwVTlstihKQTv02WIHNb7H+18sdn98VZXnJD5bJ+rM=)
3: znDGyTFXHxgds03YiKxu855yeHM.roa (hash: PokYry9XBN7Hw+cBZPUeLE2rCoMZAI1GoWKG5QQBoBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:91:ed:16:87:f8:60:ba:b6:70:38:63:dd:38:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Aug 6 02:01:20 2025 GMT
Not After : Aug 7 02:01:20 2025 GMT
Subject: CN=fc542cbfe46e9baa1c6c0d0fd0f1963a42dcba3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:f4:0c:99:26:34:cf:32:5f:04:fb:c4:9d:
95:de:c3:b6:57:43:49:df:fe:72:f1:bd:23:41:89:
1d:b5:93:40:5a:d5:79:cc:61:5e:40:77:1e:c1:82:
d1:77:41:55:45:b1:65:ba:07:d2:43:94:d9:0c:cb:
3d:2e:99:0e:ea:77:c5:56:d3:f0:64:b3:dd:36:43:
dd:fe:9f:36:cb:a9:38:97:25:28:77:7b:0c:80:aa:
9e:29:85:48:8d:71:96:df:8e:d8:90:4b:51:5c:49:
e2:92:10:34:a5:44:6a:68:1d:16:72:0f:14:55:36:
3f:0a:68:26:37:89:81:c6:17:0f:f1:3d:bd:34:3f:
0e:1f:45:7d:08:ee:69:d0:88:2a:77:77:86:97:95:
08:08:14:8b:f8:2e:de:86:a6:a9:37:90:34:da:6c:
1d:c0:a9:94:7d:24:a3:71:5a:14:f2:1e:1b:95:ff:
e9:75:af:92:6d:52:dc:ee:87:21:99:08:86:45:a9:
e3:8f:ec:ba:5f:77:ca:be:33:f3:32:db:28:5e:af:
7b:83:26:e2:b6:29:8b:37:3c:ba:b1:19:8b:52:ac:
29:3b:ed:8d:75:35:8f:c6:d3:af:1e:39:fa:e1:10:
bc:29:dc:15:86:8c:be:d7:0a:b8:5e:5e:01:fd:b3:
f7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:2C:BF:E4:6E:9B:AA:1C:6C:0D:0F:D0:F1:96:3A:42:DC:BA:3E
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1b:18:3b:76:eb:22:ac:a2:c6:c4:e5:00:69:eb:a8:ff:a2:
49:18:7c:88:4d:5a:d9:ad:37:3a:50:c8:d8:46:32:e1:f5:ed:
44:a6:4a:ee:27:aa:ab:0e:a5:e7:9e:3f:30:93:f2:3f:dc:a4:
4c:7e:ed:fa:27:c2:95:18:30:c4:e2:35:b2:e8:1a:84:cb:c8:
b3:19:d6:ee:b5:64:f4:38:df:d2:24:8e:62:0e:b4:ae:21:71:
d6:0c:1a:55:12:ee:c9:c6:e4:be:8a:c6:ed:40:08:50:f0:11:
34:26:37:79:50:12:c2:2b:65:48:c7:b6:2e:64:30:a3:27:2b:
c0:72:64:e7:b6:a8:a5:67:ff:a1:d3:46:58:ea:f3:8b:66:d5:
3e:8a:ea:e2:81:21:ae:b8:68:f6:fe:cf:37:c7:87:a1:18:99:
62:97:29:11:c2:f1:a0:c0:99:05:af:d3:2e:12:83:8a:2c:dd:
11:73:2c:6b:7c:42:18:df:78:64:bd:cb:02:60:fc:87:84:69:
4b:d7:98:64:6b:a3:cc:79:43:41:9b:87:ce:5a:06:6b:79:23:
bb:0a:40:07:9c:19:78:1e:ec:a2:fe:cb:ab:a5:08:85:2f:75:
88:69:d7:7d:5e:fa:dd:cc:82:90:a0:c9:03:cb:76:39:b3:84:
86:00:07:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:13 2025 by rpki-client