Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: 8TkrWxbIGqSkSEA1XzNPTkrpkFYNiS+QFerTPkDq4Ok=
Subject key identifier: 12:15:2C:6A:0A:53:36:3A:68:B2:AD:37:89:D9:8D:E5:06:A5:73:3A
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019880C29DCAF6042AA30C712CDD680AC13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 19:01:34 +0000
Manifest this update: Wed 06 Aug 2025 19:01:34 +0000
Manifest next update: Thu 07 Aug 2025 19:01:34 +0000
Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: K89/jpXvfjnr8LXD5K/h0AtFbEqXH/c3Jabh4dfqXNo=)
3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:9d:ca:f6:04:2a:a3:0c:71:2c:dd:68:0a:c1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Aug 6 19:01:34 2025 GMT
Not After : Aug 7 19:01:34 2025 GMT
Subject: CN=12152c6a0a53363a68b2ad3789d98de506a5733a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:81:59:e2:ac:fa:c3:ba:af:e4:6a:28:13:
75:08:44:1d:83:df:99:9e:95:67:5f:c0:b3:d1:f5:
08:09:07:22:7b:c4:7b:28:8f:bb:e0:2c:f5:7e:16:
5f:6c:b8:ec:2e:66:56:d9:a1:fd:76:81:1a:d1:ef:
d3:64:9e:17:1b:29:83:01:71:6a:59:ad:31:cc:57:
50:48:a8:2a:b9:0b:4d:50:b8:8c:0b:9c:a8:5a:27:
f8:e6:42:83:fe:61:15:71:ac:d7:dc:ca:3a:a4:c8:
3f:84:cc:7e:ca:99:a6:fc:01:4e:20:6a:59:fd:de:
42:a3:ab:39:e8:3d:dc:3c:b8:f4:ff:14:f3:fe:92:
97:2c:5a:b7:2d:c5:d1:6d:ef:b1:89:d7:15:7f:96:
83:9c:e8:01:da:de:0f:7d:be:5d:77:5e:44:36:c1:
68:e3:d7:d6:9e:82:21:68:4b:58:ad:8e:ec:2e:27:
b1:9f:24:ec:c8:1e:2b:a8:f7:fd:fb:d2:0c:0b:6b:
e5:3e:7c:40:90:c0:0e:6d:6d:61:45:7e:9b:9f:93:
c6:f8:21:60:1d:d1:5d:36:0f:77:94:83:6c:ba:98:
8b:dc:84:0a:79:1e:e9:35:31:c8:3b:30:fe:54:3a:
1f:7c:e8:e8:fc:da:50:5b:70:0d:6a:77:db:75:c1:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:2C:6A:0A:53:36:3A:68:B2:AD:37:89:D9:8D:E5:06:A5:73:3A
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:ee:7f:ce:66:67:2e:38:f3:69:e7:f6:25:c0:10:c8:03:
1f:aa:61:02:27:c9:99:48:f7:61:c6:41:d5:70:19:48:3b:18:
cf:1a:74:80:35:4e:65:1e:f8:9e:9d:b7:a5:f6:c8:19:72:6f:
48:64:a6:44:f0:25:1b:f2:34:c3:f5:63:39:bf:be:4f:34:05:
13:de:62:6f:c1:10:4d:2a:cb:d2:b3:92:e3:b3:bd:7f:15:8d:
7d:77:e0:3f:d1:20:eb:ee:ec:82:c2:d2:be:ea:82:70:9d:d9:
aa:0c:e8:9d:2c:49:00:a7:14:fd:ec:b6:14:b9:97:d6:fe:34:
43:52:5f:6e:14:51:31:fb:c6:6e:45:ac:f0:24:e3:ae:c1:a5:
61:4e:03:b3:b4:b3:c6:42:d0:cf:5c:77:05:80:0b:e7:24:19:
3a:fe:a9:c0:62:4c:e7:3f:c8:c9:52:3c:83:84:b8:1a:0e:4e:
ee:e9:34:14:22:a2:5b:3f:0d:ba:48:7c:cc:d5:f9:24:37:a0:
ce:57:8d:25:87:22:f9:ee:5f:26:fb:ed:eb:1d:f1:ec:4d:40:
dd:3b:6d:18:a0:f0:d3:43:ca:11:98:3a:b5:0a:8f:ac:2a:09:
b8:ae:6a:14:60:4d:bb:8c:50:90:b1:05:dd:a5:2e:b3:4b:31:
f4:b3:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:10 2025 by rpki-client