Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: PbGVrnBmJxbrCxFwJNKIl5M1Ob0aDXPPXbi7ULE1opY=
Subject key identifier: 79:95:50:3A:E9:E1:B9:14:3B:CB:26:22:2E:25:58:16:C8:B2:B2:9A
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 01984965FE807AF40F1F6274CDE608D74CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:17 +0000
Manifest this update: Sun 27 Jul 2025 01:01:17 +0000
Manifest next update: Mon 28 Jul 2025 01:01:17 +0000
Files and hashes: 1: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (hash: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=)
2: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: /BY/aKIBZBt7rPSURlx2QudRJjglooHPNWVUm3Weaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:fe:80:7a:f4:0f:1f:62:74:cd:e6:08:d7:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Jul 27 01:01:17 2025 GMT
Not After : Jul 28 01:01:17 2025 GMT
Subject: CN=7995503ae9e1b9143bcb26222e255816c8b2b29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:6e:2f:e5:6d:db:c9:c6:50:cf:e7:40:1f:
50:7d:02:98:7b:6d:74:b5:29:2a:5e:f5:88:45:19:
f0:04:ad:70:ee:47:52:a5:30:85:22:c7:c6:db:a8:
9f:c5:8b:57:bf:09:f4:e6:99:83:fb:51:32:4d:8e:
83:16:a7:e6:84:85:db:42:e8:12:4b:55:fb:16:f8:
d7:99:82:1c:f6:73:74:d2:0a:f3:34:cf:8a:2a:e3:
1c:1e:28:f1:4a:49:d1:8f:a8:1b:c0:44:61:09:2b:
1f:aa:12:04:d9:b4:66:11:e7:b2:a5:58:23:a1:4c:
a8:b1:1c:4f:07:b8:eb:a0:21:d8:72:dd:b9:15:e7:
dd:b2:03:ed:bc:7f:af:43:40:d7:3b:4b:13:73:c0:
4f:ae:7a:32:b7:4d:37:78:34:fd:02:4d:b0:2d:71:
bf:48:0a:1f:d6:12:ad:ce:cd:36:39:75:79:d1:b7:
fa:7a:ff:c8:0f:6c:cf:ef:63:64:77:5e:bd:22:3f:
f1:d1:46:75:6e:b1:4d:ab:03:55:e6:ac:92:88:b6:
8d:42:bd:1c:d4:ce:ce:fe:78:40:7b:05:a3:c9:ed:
0d:d4:c2:e2:81:40:d1:8d:30:7b:d4:85:81:35:79:
3d:df:ef:60:39:bc:d9:6e:6e:92:07:69:05:8c:a6:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:95:50:3A:E9:E1:B9:14:3B:CB:26:22:2E:25:58:16:C8:B2:B2:9A
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:46:4d:fa:3d:3b:d2:79:e7:2e:3f:0d:c5:f6:0f:27:76:59:
6e:d2:ff:d1:45:86:96:6f:57:6a:c6:3c:79:f1:84:db:7c:51:
d5:c2:de:6e:2d:be:cc:1c:fa:fa:46:09:d4:68:66:d6:ec:43:
c6:78:94:0e:92:d0:c3:5e:bf:08:55:9f:2f:2a:aa:9f:c2:2b:
51:bf:d6:64:8c:96:31:4d:b3:3a:2f:4c:57:a1:cb:96:d5:ee:
4b:47:4a:26:f1:ad:30:3c:f4:4d:e5:39:df:ba:15:c4:62:13:
2e:53:91:1e:2e:db:77:26:f8:09:92:19:11:fb:d9:a2:aa:aa:
6e:1a:5e:b7:38:5b:ee:34:cb:5f:11:cc:3b:f6:ce:62:34:d9:
dd:92:58:e6:31:2e:f3:e5:c3:ce:a7:cd:d4:3e:31:fb:76:38:
cb:b1:aa:b4:06:be:a7:01:4f:cd:bf:0f:71:1f:a2:de:4b:e8:
68:c0:e5:73:90:70:1d:18:6d:55:f3:1e:2b:1f:0d:1f:91:f2:
92:6c:c3:ab:0c:dc:5e:69:0c:3c:9e:0e:1a:65:84:aa:14:cd:
84:8f:46:8f:e1:d6:b9:9d:dc:47:5a:c2:f1:f9:55:3c:70:c5:
b2:b3:43:08:c2:40:86:f8:1d:3c:b2:e0:85:5d:cd:03:75:d6:
a9:b4:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:04:23 2025 by rpki-client