
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: bQmRqEVojrHAA+lejqzlv2OcF2HjYxyl4yABtIut0AM=
Subject key identifier: 12:A6:25:D8:05:80:C4:28:37:38:31:CA:46:C6:21:42:F9:81:26:25
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 019874BDEC42119F4474E49B6445981F9602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 0D9E
Signing time: Mon 04 Aug 2025 11:01:00 +0000
Manifest this update: Mon 04 Aug 2025 11:01:00 +0000
Manifest next update: Tue 05 Aug 2025 11:01:00 +0000
Files and hashes: 1: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (hash: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=)
2: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: kTV0qm6P69rBn6oIPRh8lP/FSDkiPKyfmekStPNhkqs=)
3: WIaOGWdkdCPNTnZSI-W-XTK4te4.roa (hash: jVJuCp2YFk4DEa8ZbdmENwzLLMmsULw4LDZkckWi3gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:ec:42:11:9f:44:74:e4:9b:64:45:98:1f:96:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Aug 4 11:01:00 2025 GMT
Not After : Aug 5 11:01:00 2025 GMT
Subject: CN=12a625d80580c428373831ca46c62142f9812625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b0:bf:01:27:0d:f1:74:ea:1d:5e:5d:0b:86:
d3:a4:6b:e4:bb:66:69:ac:e8:1d:0c:46:f6:a6:c3:
4d:29:0b:7c:70:ab:48:81:e9:8a:51:a6:a3:eb:b5:
34:44:5a:41:0f:02:6d:eb:71:83:88:6c:a9:50:62:
6d:d4:b0:fa:fb:0e:47:70:82:be:31:b2:60:56:74:
2f:16:2b:99:bc:b6:9b:b1:a6:7f:a7:d2:c0:f7:9f:
89:a3:15:0b:ad:cb:e4:45:f1:02:74:11:08:05:bc:
3c:55:f2:b2:4c:10:ad:6a:5e:5d:fb:8f:76:4e:76:
f2:f7:27:75:87:11:15:04:9a:5b:37:66:7a:44:ed:
fb:32:c6:c0:c3:d3:e1:76:15:23:74:ba:46:e9:3b:
39:92:17:96:42:f7:85:1b:37:21:59:69:ae:a4:44:
3f:38:05:73:27:32:a9:bd:bf:20:57:87:f9:bc:b1:
5d:d7:c5:29:e5:9a:b8:4e:16:bc:37:59:6b:b1:8c:
29:b3:ca:cc:27:e2:50:b1:0e:45:2f:01:f3:3b:19:
74:aa:ba:c6:67:54:6f:82:d7:ed:00:30:86:26:1f:
6e:b1:49:e5:26:9c:b4:d4:3e:24:8d:58:27:25:68:
fb:46:8b:3e:95:60:46:74:1e:e5:9f:dd:20:3e:30:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:25:D8:05:80:C4:28:37:38:31:CA:46:C6:21:42:F9:81:26:25
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:80:de:1b:79:a8:d8:70:86:db:f1:99:c6:ed:50:13:95:61:
41:d5:08:64:4f:87:a7:97:74:fa:67:9a:c2:55:19:48:f6:d3:
48:c5:f1:05:72:b2:9b:2b:09:00:fc:b5:5a:bb:d8:55:50:ee:
47:70:90:55:ca:e7:80:19:27:5a:4d:fc:f8:33:41:30:af:ca:
eb:09:e1:98:d4:0a:69:c7:29:08:e1:22:dc:63:01:4e:6d:0f:
2c:cd:b7:11:08:4a:96:ef:53:f0:37:0f:38:bc:65:06:7d:67:
06:32:8c:11:f3:04:84:30:c2:7f:bc:94:97:80:29:1b:34:18:
ff:65:6e:75:2b:8d:3c:74:77:6c:00:23:18:4f:c8:0b:15:1e:
52:2f:11:6b:76:d0:f4:cb:84:db:34:ff:e6:05:c9:35:e5:57:
af:d4:8e:8e:26:61:6b:f4:b2:3c:e4:bf:2c:6b:4d:71:22:7b:
26:20:19:53:eb:78:8b:e5:30:9f:83:81:92:9e:4b:68:b8:37:
6e:e3:50:2b:79:e7:75:ef:86:29:d7:b5:22:25:af:dc:38:dc:
c9:a7:e9:25:32:42:cb:e2:6f:2d:84:4e:7f:f8:79:3a:39:fc:
6c:0a:0d:59:73:1e:4f:6c:cc:8a:5f:bf:9e:ee:c0:0b:dc:1d:
f1:8e:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:13 2025 by rpki-client