Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: v/jXLJTsVJrdUKHXl99Nz0fpWQuhESAlRVsaGXWHyxM=
Subject key identifier: DA:55:E3:9A:B5:F6:3F:0F:39:61:2B:3A:90:34:DE:A3:22:C6:98:08
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 0198477751A0E9D8572FD118E1A9DBD90D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 02E3
Signing time: Sat 26 Jul 2025 16:00:58 +0000
Manifest this update: Sat 26 Jul 2025 16:00:58 +0000
Manifest next update: Sun 27 Jul 2025 16:00:58 +0000
Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: CFSiosVxqcABArNhPDj6pNTE1Jzf0jd7ifcSOXAyso0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:51:a0:e9:d8:57:2f:d1:18:e1:a9:db:d9:0d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Jul 26 16:00:58 2025 GMT
Not After : Jul 27 16:00:58 2025 GMT
Subject: CN=da55e39ab5f63f0f39612b3a9034dea322c69808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:21:c8:60:1d:2b:a2:3f:f9:d1:25:6b:4d:
15:cc:e9:9f:2e:46:fa:78:09:8f:5b:ee:7a:de:04:
df:47:37:9f:fd:8e:0d:d0:b6:84:4d:55:c1:42:2f:
51:0d:56:f1:5a:62:93:8d:f4:f2:0a:1a:e3:39:aa:
7d:7d:75:83:1b:48:c9:4f:e8:e6:8c:38:37:18:af:
e8:eb:8c:01:cd:d5:32:5a:53:85:6e:ce:34:79:79:
2c:58:f1:ba:56:48:c2:27:f9:d3:32:66:58:af:8d:
50:43:d5:ac:89:b1:57:0e:ca:ea:cd:89:25:4b:e9:
19:dd:65:e1:00:be:5a:77:61:83:26:76:69:de:6c:
50:9d:e6:dc:c1:bb:b1:c3:1e:37:8b:99:83:6e:cf:
b0:89:9a:af:ac:58:de:55:1a:8f:19:de:9f:34:c0:
19:58:99:85:6c:b0:a0:f0:96:b0:e8:9b:88:87:fe:
ad:5c:2c:d9:8f:6d:95:fb:61:f3:22:b7:47:d7:96:
76:7f:c7:93:33:9a:46:b8:1f:18:6f:fd:95:52:7d:
93:85:a0:6f:48:a2:20:22:2a:b3:f6:40:9b:52:a6:
bd:7b:ab:39:b9:1f:62:6d:1d:f6:e8:4c:e0:18:7b:
65:7c:56:75:a6:14:ae:f8:44:97:4c:c1:4e:9b:64:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:E3:9A:B5:F6:3F:0F:39:61:2B:3A:90:34:DE:A3:22:C6:98:08
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:00:dd:0a:18:99:09:81:05:e3:2d:24:1b:81:24:86:c8:9b:
b3:36:4d:9d:0c:27:2c:d1:0e:52:d9:f1:90:03:4b:0b:0a:b8:
ef:4b:18:f9:69:06:25:43:da:83:57:cc:5a:74:d7:c7:9b:34:
a8:d2:f8:02:e1:b5:a8:55:14:58:4c:d0:71:76:05:de:35:0b:
30:45:da:2c:12:85:32:0a:77:e9:54:c4:77:8c:97:aa:79:fb:
bd:8c:c5:23:03:92:12:cd:07:71:ae:c8:f3:f4:84:e6:74:4e:
1d:97:34:2d:c1:66:f4:a2:dc:b1:69:94:dd:46:9e:d3:de:a3:
67:ae:e0:89:28:a0:d9:04:a3:5e:32:61:e5:07:28:ab:3a:05:
fc:68:5a:b4:fc:e8:e2:82:8e:5f:9f:0d:24:1d:2f:78:84:da:
48:ac:31:49:37:1b:c9:eb:4d:40:12:5d:ae:fb:39:18:49:75:
9f:5c:d7:06:85:b4:6d:94:20:6b:66:09:83:5b:9a:81:32:e6:
6c:f0:13:dc:14:44:af:96:0c:50:04:0d:46:1d:6c:77:8c:b6:
36:33:2c:04:2a:c9:28:dc:31:7b:17:2a:e2:26:30:ea:cc:3b:
fb:86:3e:9b:b7:e6:74:3b:20:4c:d1:d4:37:48:bf:00:68:dc:
20:c5:c4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:39:38 2025 by rpki-client