Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: rJM/99q2KKO3fquJk6YhHPKl6BASnYhj7bkTsinkE4s=
Subject key identifier: 9D:34:F8:7C:4B:05:1C:7C:CE:D2:E6:4A:DF:5E:A8:60:4E:80:E6:07
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 0198730652B065107A0579CEC5992F5E5B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 1547
Signing time: Mon 04 Aug 2025 03:00:50 +0000
Manifest this update: Mon 04 Aug 2025 03:00:50 +0000
Manifest next update: Tue 05 Aug 2025 03:00:50 +0000
Files and hashes: 1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: cN9IL+AXVDH1CTXLyoVvXLtr21heVUgdO+RvRN3dWLQ=)
4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:52:b0:65:10:7a:05:79:ce:c5:99:2f:5e:5b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Aug 4 03:00:50 2025 GMT
Not After : Aug 5 03:00:50 2025 GMT
Subject: CN=9d34f87c4b051c7cced2e64adf5ea8604e80e607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:d9:b7:3e:8a:d6:3b:57:54:0b:01:9b:21:
da:0c:ee:3c:ac:c4:db:3b:9f:5e:4a:03:35:db:2b:
9b:77:c0:19:db:9e:75:aa:23:be:57:32:cd:14:81:
b4:53:08:9c:53:84:a8:cc:2a:00:4a:9b:a9:87:8f:
12:fa:3c:4a:87:65:5e:6c:e7:62:a6:bb:79:e2:fc:
27:44:e1:5e:21:d0:99:04:37:43:d3:68:ca:48:3e:
84:40:fc:c5:ed:73:84:ec:41:d1:f9:bd:17:48:54:
91:3f:10:af:ef:a0:26:63:84:81:22:3a:17:ca:61:
ab:b2:e8:d0:04:23:d2:40:52:7a:a3:3c:c1:c4:12:
9b:4c:bd:e8:cc:56:fc:b8:a7:4d:20:d0:27:c2:21:
99:d8:77:d4:a3:ef:87:7a:4a:f8:8d:be:7a:8e:26:
45:d6:da:77:41:48:5c:9e:d3:78:ad:8a:67:06:1d:
a4:2a:51:cf:5a:cb:62:7a:9a:4b:bb:d5:62:4e:45:
2a:76:44:74:b5:c0:0a:16:83:33:aa:0d:09:2b:80:
5f:b0:33:1b:d1:70:cf:d5:bc:4e:65:07:37:63:e8:
67:5b:b2:6a:c6:5f:6c:61:8f:bd:1d:b4:85:fa:7e:
d4:4d:bf:b5:e0:ae:eb:15:a3:76:5c:86:56:16:a2:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:34:F8:7C:4B:05:1C:7C:CE:D2:E6:4A:DF:5E:A8:60:4E:80:E6:07
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:72:70:91:5f:4a:08:62:54:b8:18:96:61:1e:b7:8f:65:
2c:43:44:92:77:bf:a1:ea:c0:ed:02:41:c3:55:d3:21:67:1f:
6b:20:dc:49:5d:3e:cd:44:ef:1a:01:de:8d:9f:85:db:c8:31:
51:e5:8d:e9:9e:ee:8e:df:d3:74:22:75:46:b6:c6:e9:a0:6f:
6c:d3:2d:b5:39:d0:fe:4f:67:11:d0:e5:a8:40:19:6f:7b:81:
b9:a5:8b:89:2d:98:0c:7a:42:80:28:f0:33:19:31:39:6f:05:
f3:86:a2:42:74:05:d1:bc:8b:e2:06:a5:3a:4b:e3:d9:f6:88:
c6:55:e1:f0:a5:33:84:e0:84:a2:81:f3:2a:1b:14:0f:58:c8:
99:3c:fa:80:c2:ad:99:e0:fc:4c:d1:6e:40:3b:7a:3b:56:2b:
af:89:8d:29:c9:c9:27:9c:ee:c3:72:3a:21:b1:8a:42:a9:c6:
1e:a7:a0:36:71:f8:77:8d:84:1d:02:ee:ce:89:65:9b:e2:99:
ce:d9:9d:67:6f:34:7b:24:10:3a:5a:1c:84:f2:23:7f:10:58:
0b:d9:1e:05:61:ca:7e:b8:d9:f9:04:81:22:06:e6:29:09:fa:
08:97:01:91:28:c9:2d:f1:0a:a5:df:1e:da:15:a3:91:66:a8:
c0:e5:a6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:49 2025 by rpki-client