Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
File: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json)
Hash identifier: RnAthrkkMHi/Npu7CSnIZCIm8sW1IGLJ5GlMA6SvKbs=
Subject key identifier: A6:90:B4:51:9E:BE:18:B2:45:66:C1:53:BE:1E:F5:C9:9D:48:E2:0B
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial: 01987AF7290E0B78D26773A363F5171036A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 16:01:14 +0000
Manifest this update: Tue 05 Aug 2025 16:01:14 +0000
Manifest next update: Wed 06 Aug 2025 16:01:14 +0000
Files and hashes: 1: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: zmcjF1DGfr/VvFGEAxgth1dzcVPeX876kpKbWvNIAoQ=)
2: aFAF2a0pf2_iQW_Ah5PtSVGIIsU.roa (hash: CRoJAvxL/AEhIjj3BGa3AOSm/IAStthRp+t6FhfWlZc=)
3: g0yUXdYSuBEU7wpjF_M-dIueuPE.roa (hash: PIV5IbeiUmm5gi+hdOXD1voi9O/jmaGDnpkEJZ2+Rwg=)
4: kLgY3X5leR0VtUr8VPTZGFKR1kc.roa (hash: LBSLrR+c9iEdXN69yxUzikKKOnVtulDFWy14eJ7VP9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:29:0e:0b:78:d2:67:73:a3:63:f5:17:10:36:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
Validity
Not Before: Aug 5 16:01:14 2025 GMT
Not After : Aug 6 16:01:14 2025 GMT
Subject: CN=a690b4519ebe18b24566c153be1ef5c99d48e20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:6d:66:0e:f8:0c:83:1d:a9:cd:91:60:3c:
f7:74:25:b1:6f:50:79:76:1a:c4:32:cf:e5:e9:9e:
c8:ec:07:0f:bc:bc:09:f4:cb:bf:64:3f:3a:48:65:
b6:94:f5:63:de:a6:8f:6a:4f:0d:f7:a4:b1:ec:17:
e0:1e:d5:7f:be:28:cb:4e:1e:52:b4:63:a3:28:55:
d1:e6:c7:a8:4e:7a:31:ab:30:cb:21:c2:dc:0d:81:
39:1c:dc:fa:28:b9:fe:52:79:2b:74:4a:94:9c:51:
0f:65:26:8b:5b:5d:48:3c:cc:0d:c5:a8:7b:8a:1d:
8f:17:a0:ce:a6:e2:40:86:d6:46:94:47:f5:c7:70:
c7:20:f7:7c:0b:4a:e5:8f:81:dd:86:8f:78:71:27:
43:e2:d1:b2:20:a6:8d:98:0a:38:4d:a9:a0:29:3b:
83:db:61:40:b3:32:45:6d:52:fc:dd:00:36:51:19:
26:e0:88:51:2a:4d:40:06:9b:bb:b9:85:4f:16:13:
5a:55:95:f6:a5:2f:9a:18:b1:43:97:85:e1:bf:6f:
b4:30:ff:c8:0a:97:43:61:aa:0c:8f:71:e2:c3:33:
f9:0c:69:42:08:7e:5e:b6:25:e1:b7:33:90:60:64:
d2:c5:7a:36:32:1e:4d:27:09:69:7a:c7:43:80:b8:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:B4:51:9E:BE:18:B2:45:66:C1:53:BE:1E:F5:C9:9D:48:E2:0B
X509v3 Authority Key Identifier:
keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7f:95:27:b8:6c:b0:67:af:c4:b2:79:ae:e8:0d:d3:6c:47:
e6:5a:f3:19:76:a3:4e:89:58:53:fb:a9:88:ef:dc:e3:70:0f:
26:dd:21:3c:bb:27:e2:d1:39:8b:69:6b:07:3f:a2:02:79:8e:
c0:10:26:b7:56:b3:e2:fe:c7:04:d1:1a:01:25:81:00:66:8a:
a8:fb:69:ff:9f:2a:6d:77:ae:1c:96:11:b7:30:e6:f5:02:07:
07:de:d9:32:e8:8e:1f:cb:c7:98:88:7a:7b:df:67:6e:f0:06:
e7:bc:05:3f:fa:f3:99:aa:db:47:fa:6a:d5:25:a0:4b:c8:de:
1a:4c:c0:b6:b8:18:00:3b:8e:0a:85:aa:67:f3:eb:b7:3e:41:
ab:7d:0a:41:5e:6c:64:87:9a:25:0f:ec:22:2a:4c:05:66:30:
7c:04:3c:a4:7b:bb:62:56:f5:d0:70:e7:16:2f:e6:3a:98:11:
1a:5e:19:5a:89:fd:c8:2c:57:fa:ed:f3:94:72:7d:db:44:10:
ac:8b:a6:ad:7c:17:75:69:83:9b:ca:5a:e9:95:21:01:1d:a2:
12:26:9b:45:9c:08:07:8e:70:5f:3b:b4:e3:cb:d2:d5:bf:e9:
61:38:ff:d8:3f:93:40:a0:ae:22:81:e7:68:0d:17:b1:96:da:
54:e6:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:52 2025 by rpki-client