Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: LufWRWlo5jaTpvh5iE2Ntb/p06hpI5UmQyQDAHDO06c=
Subject key identifier: 7E:8C:37:A9:52:6D:47:4B:8E:6C:26:20:CA:EF:FB:E8:83:DE:4F:61
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 01988AA0965E5BD15892C68B6A6980B19C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 17:00:36 +0000
Manifest this update: Fri 08 Aug 2025 17:00:36 +0000
Manifest next update: Sat 09 Aug 2025 17:00:36 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: iVqE12Eli0OPK8dr6c/mW11QDvZirHSh9qCUbY7uzrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:96:5e:5b:d1:58:92:c6:8b:6a:69:80:b1:9c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Aug 8 17:00:36 2025 GMT
Not After : Aug 9 17:00:36 2025 GMT
Subject: CN=7e8c37a9526d474b8e6c2620caeffbe883de4f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:2e:52:ef:39:cf:83:9d:f4:b3:1a:42:8e:
31:15:aa:f9:eb:b7:4c:f8:78:ac:cf:ca:cf:53:30:
18:cc:ed:28:e1:43:31:f7:39:3f:b7:01:94:76:5d:
b5:ae:11:d0:ac:aa:5c:19:79:77:90:92:e3:1d:94:
48:d3:fd:02:18:e8:ad:eb:b4:bc:41:c4:e4:71:cb:
75:8f:d4:ef:01:a7:59:45:8a:d2:d8:61:60:5a:e1:
22:30:da:78:c0:a0:28:2f:01:ff:fc:e4:92:28:b9:
f5:71:b1:ef:2b:3d:7f:a8:3c:da:2b:fe:5b:d4:98:
08:c5:ca:84:b7:b7:a8:ec:37:fe:ec:b0:54:50:12:
3b:5c:b4:97:e7:0a:2a:81:90:d0:3c:5f:2c:94:87:
63:d3:cc:2f:12:da:ae:8f:2b:2b:e1:0b:1b:c4:5f:
bd:a3:30:2c:dd:87:78:7d:55:ca:d8:88:78:31:d1:
1f:1d:c9:13:a2:79:a7:3e:5e:a4:cc:06:70:07:06:
94:ab:07:98:39:77:00:b2:eb:4d:1c:aa:e7:14:2c:
a2:1c:2e:7e:90:37:64:9f:6b:3e:d9:a1:dd:92:65:
3a:68:6e:8a:97:46:68:63:8f:e1:f3:cf:41:01:54:
b4:00:77:6a:b1:63:be:1e:da:1d:85:e0:cb:ca:e9:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:37:A9:52:6D:47:4B:8E:6C:26:20:CA:EF:FB:E8:83:DE:4F:61
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:65:3c:92:8c:28:ce:d6:ef:5f:18:1b:1b:0b:c3:16:db:30:
99:86:7c:4b:63:94:a7:2a:e9:67:2c:03:55:15:08:a9:ec:aa:
9c:6a:a6:a2:7a:60:76:79:72:da:de:e8:aa:8a:0e:d5:13:59:
6f:9e:b7:ad:3f:46:8f:37:53:f1:15:4e:ba:8d:60:fa:34:81:
0d:b7:14:4f:a1:31:7d:81:10:d3:51:04:d0:07:c6:01:81:2b:
4e:44:c1:60:90:4e:6c:c3:fa:ee:3f:c7:81:2a:2e:a4:16:96:
ae:60:26:01:0c:7d:17:82:cb:9e:46:0b:59:a0:26:55:77:91:
2e:7b:19:33:ea:48:b2:b6:92:2c:20:f4:79:69:96:51:c7:2c:
b9:b8:d6:bf:43:f8:b7:57:69:24:2f:be:70:df:0b:a1:07:b6:
84:cb:da:7f:4b:fa:fd:5e:0b:50:8b:0b:e5:9a:33:f8:8a:49:
44:be:63:ca:25:26:51:40:79:e5:ff:77:0f:74:df:47:6a:d3:
a4:96:84:f4:9f:c2:e3:9a:3c:64:98:be:16:bb:c5:05:f5:a7:
4e:a6:18:3f:75:33:e4:e5:de:74:ca:db:45:9e:07:d9:8d:0e:
47:8d:9e:ba:e1:2a:67:af:ed:51:10:f2:de:bb:90:96:0f:ec:
ad:f8:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:05 2025 by rpki-client