Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: 2i0YZxdIIOADHw7D5NTzVhJwdcS1OsrTIRCP2HXSNMY=
Subject key identifier: DB:99:CD:4C:5C:EB:E3:79:A4:B0:5B:30:40:20:10:38:16:F8:32:17
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 01984A77C5E59E9421B7A32FBDDEF821C58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 1167
Signing time: Sun 27 Jul 2025 06:00:20 +0000
Manifest this update: Sun 27 Jul 2025 06:00:20 +0000
Manifest next update: Mon 28 Jul 2025 06:00:20 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: MR7Ui7qCqXlZu3pWi7jPTZrH4VzmVWIgQagYJdZc+Us=)
2: e11Y1BzeTv89ORv01AAdP5K30II.roa (hash: N7EMAlCoADAa7ySQW7940rPsHLZnRpbv9iF4uLAj9Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c5:e5:9e:94:21:b7:a3:2f:bd:de:f8:21:c5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Jul 27 06:00:20 2025 GMT
Not After : Jul 28 06:00:20 2025 GMT
Subject: CN=db99cd4c5cebe379a4b05b304020103816f83217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:d5:b3:77:bd:38:15:cb:f4:47:c3:59:3f:
ca:d0:e3:89:ae:a4:83:b3:76:53:3b:a5:90:9d:71:
b7:7a:dc:50:ab:9f:78:9a:e0:ef:f1:23:52:9a:e6:
c2:14:80:79:a4:34:8c:32:c0:ff:94:d1:2a:92:fd:
29:fd:e7:c6:1f:85:58:ee:fd:57:a1:dd:68:7e:6d:
b9:fe:b7:7e:51:bc:56:a3:00:e3:d5:14:68:66:5d:
27:48:9c:15:a7:e6:73:dc:1c:05:f1:2c:b9:df:fa:
82:83:bb:da:20:0c:38:8b:f0:15:ed:75:cb:40:db:
80:d5:32:7f:0d:86:7f:2f:43:f6:c2:ed:07:39:2e:
3d:0d:9c:4e:bb:ce:df:4b:52:29:b3:35:aa:86:ff:
83:19:8e:74:00:23:13:90:a5:27:70:80:eb:dc:48:
ab:4b:fa:1d:06:6f:7a:5d:b4:75:3b:72:06:a9:25:
64:76:57:16:38:1c:89:75:08:58:eb:3a:5d:75:95:
da:a9:b8:59:9a:75:8e:f6:a1:43:2a:d8:4b:ed:8a:
3a:a7:a2:1f:ed:9d:0a:b6:cb:e3:d2:bf:4c:ff:62:
ae:59:d9:1f:39:6f:8d:3b:65:0a:0e:06:8a:b3:41:
3e:9a:63:ab:73:81:c6:4d:b2:74:67:e5:15:a4:19:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:99:CD:4C:5C:EB:E3:79:A4:B0:5B:30:40:20:10:38:16:F8:32:17
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0b:69:c7:b2:75:24:d3:31:41:b6:19:d1:df:86:8d:ae:d8:
77:b0:97:c9:f5:79:70:50:f7:5d:e8:66:e5:94:57:ae:ca:bf:
11:78:e3:c0:b0:b1:c3:7e:13:9c:61:d4:ff:d5:db:49:1d:8c:
e4:ae:56:31:85:8a:7b:76:74:7b:af:e6:c4:0a:dd:cc:10:0e:
de:16:ac:95:5a:1d:d4:43:ba:b2:49:e9:9e:2b:65:89:77:45:
6c:d7:e4:74:7c:d6:7d:5e:fd:76:14:60:45:17:5c:9f:85:32:
53:65:c2:b4:bc:e0:23:1f:bc:8f:c4:fc:f8:c2:ba:0e:35:44:
3a:22:53:7c:b7:4e:0a:3e:1f:1b:d7:f6:37:7c:d0:1e:c7:4c:
4e:63:0a:5a:58:59:fa:2a:35:c2:c7:ce:a2:12:22:eb:75:24:
24:ce:0e:11:fb:9f:0b:31:6d:7c:bf:97:10:b9:88:3a:dd:1c:
53:8c:56:b7:87:4e:f4:a9:3e:f2:65:f5:cf:6f:b3:36:28:04:
74:0e:ef:d0:47:72:e5:b1:09:ac:a5:bb:31:62:97:be:e2:06:
ea:37:d5:b2:13:2b:de:dd:16:fa:96:37:d9:d3:44:a6:26:0d:
15:fc:38:a2:4f:20:79:9b:5f:7d:d3:b1:ea:22:38:fd:91:69:
45:08:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:42:27 2025 by rpki-client