
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: 5QCsFB7n6MBc3TLTEp6Zg/ckQz30WjAEqir8cFCep1w=
Subject key identifier: B3:88:F3:82:73:1C:80:6F:5B:A5:DC:BA:35:81:CE:79:3C:C2:98:40
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 0198733CF8CE9ED3FE7186528C8B20777E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 04:00:32 +0000
Manifest this update: Mon 04 Aug 2025 04:00:32 +0000
Manifest next update: Tue 05 Aug 2025 04:00:32 +0000
Files and hashes: 1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: eMHn/1LGmt1XbFbq7aRjWkSDRgu7WRWkdnSDLgltgi8=)
2: LXtV1SOyemLIBBZI_VMF85otBtE.roa (hash: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:f8:ce:9e:d3:fe:71:86:52:8c:8b:20:77:7e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Aug 4 04:00:32 2025 GMT
Not After : Aug 5 04:00:32 2025 GMT
Subject: CN=b388f382731c806f5ba5dcba3581ce793cc29840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:06:e9:9d:4d:81:82:a6:3c:38:3f:26:64:
4d:d1:ef:f0:80:c3:20:bc:8f:96:eb:d2:53:d1:92:
e5:59:58:d9:46:cb:3a:4f:6c:0d:fc:cc:65:98:6e:
9a:44:e6:be:48:dc:a2:b0:23:74:06:4f:b3:a3:46:
4a:c8:1b:2e:f8:0f:e6:fe:63:8f:88:63:31:cb:95:
7c:8c:45:9d:8a:5d:89:f7:42:1e:3c:f6:6f:47:3b:
4b:7b:f4:91:50:58:9a:e1:4f:7d:ae:6a:88:53:56:
1e:cb:45:3c:00:66:8e:c7:7e:3e:5f:f4:c0:54:5b:
e4:aa:2b:b4:61:8b:e7:f3:3d:46:2b:07:32:7c:19:
15:fe:72:e8:4d:1e:08:8c:ea:5e:fb:6d:97:46:17:
2b:2f:01:b8:a9:a9:fe:42:fd:e5:0e:d6:9c:cc:52:
34:7d:56:79:b5:3b:6d:7b:79:cf:e4:36:c0:56:ee:
f0:ef:1b:ed:78:3f:92:9c:cf:58:ea:3a:f7:8c:3d:
d5:27:29:10:c0:81:10:c0:c9:e9:7c:50:a7:c2:a5:
f5:ed:1f:cd:d9:72:6e:58:f8:58:25:1a:f8:4d:5c:
52:31:dc:ef:e2:8d:7e:94:62:6d:62:cb:48:88:1d:
ca:40:49:24:da:7f:28:78:d9:49:58:0e:5c:ae:1e:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:F3:82:73:1C:80:6F:5B:A5:DC:BA:35:81:CE:79:3C:C2:98:40
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c7:55:c3:b2:a4:1f:07:a4:60:73:87:96:cc:69:a8:e7:6c:
bf:8b:57:40:77:27:3a:a0:28:d1:aa:4f:53:49:2d:6f:80:41:
f1:a9:4a:7a:e2:98:3e:f2:4b:69:ea:4b:d4:f2:e1:24:2f:c0:
c0:4a:24:25:fd:97:38:5d:7e:e0:fc:7d:a6:f5:30:82:15:04:
84:49:65:c0:ad:7f:ff:57:cf:c6:46:13:f9:b4:3a:02:91:c9:
0c:be:f6:a1:5d:68:38:09:78:f9:56:9c:9a:48:c2:aa:07:c0:
5b:14:53:42:e3:f2:b5:e7:4e:60:90:f1:d3:d9:c1:06:4f:81:
eb:fe:1d:98:02:d6:2e:32:03:ed:8c:e5:af:ee:2b:f8:63:e2:
18:76:f3:30:34:83:fb:63:dd:d2:78:35:6b:c9:36:39:4b:8f:
b9:37:6d:ce:87:45:50:6e:1d:55:48:ca:83:c0:9e:ae:d7:44:
22:d3:77:67:ce:7b:f9:d7:03:10:e6:f3:c4:ca:ba:ad:28:a3:
e1:d7:77:b1:e1:7d:96:fd:6e:54:52:90:28:42:0e:9d:6f:31:
3b:1d:b4:aa:46:62:86:ee:7c:de:47:91:03:46:a0:fe:07:41:
3d:f0:00:74:02:e0:44:01:5a:c4:9c:f1:94:07:4d:38:e3:76:
4a:ea:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:23 2025 by rpki-client