Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: 2ZGOYOg1OWnFelaf9Q3TjJgL1f/QepOnGv+NpTn9apY=
Subject key identifier: 56:F4:9D:74:55:08:A6:FA:9A:20:72:C0:D5:8E:72:E7:AF:71:EF:DF
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 01984A77F39136A19949C88F138747B7B3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 0592
Signing time: Sun 27 Jul 2025 06:00:31 +0000
Manifest this update: Sun 27 Jul 2025 06:00:31 +0000
Manifest next update: Mon 28 Jul 2025 06:00:31 +0000
Files and hashes: 1: 1ofY17NAwbyhAHFj_yBzaevRgc4.roa (hash: FPWNmGXZmy3JcSLxjIHQ6BJRP2baM9xmkXSCswGMYik=)
2: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: jePj+LYuMO0K/7Pb8fwYmo9750HjOBUHu4mGkF+/cbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f3:91:36:a1:99:49:c8:8f:13:87:47:b7:b3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Jul 27 06:00:31 2025 GMT
Not After : Jul 28 06:00:31 2025 GMT
Subject: CN=56f49d745508a6fa9a2072c0d58e72e7af71efdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:55:1c:81:6c:21:b1:59:e9:ce:a9:34:0a:
ac:bf:a1:34:72:1b:86:2e:6a:97:a5:d2:9f:4f:0b:
a5:1c:0e:f6:6d:ca:1e:d0:80:bd:ff:9b:ca:6d:a3:
45:cd:b2:63:5d:e3:f2:35:05:2c:1b:ff:1e:f4:c2:
e8:0e:58:45:06:6e:86:d3:9f:0b:43:ac:79:8f:0a:
ef:63:08:df:80:8c:b7:42:7d:6e:fc:fe:a9:4b:a4:
74:36:9a:f6:3b:c4:05:48:47:01:bc:88:9a:c1:14:
8a:6a:d9:db:93:2f:3b:0d:f8:1a:42:fa:61:18:64:
93:7a:ec:73:dd:c5:b8:e1:2a:c2:9d:bc:49:db:51:
d7:d3:34:81:6c:3a:22:cb:80:9c:f4:a9:1a:e5:6e:
9d:d4:07:5d:dd:ca:6e:b2:24:48:94:f4:14:b8:be:
ca:98:80:ca:af:71:56:59:37:ef:c4:f9:49:ad:4b:
d5:8c:41:7f:cc:13:da:2c:5b:a0:e2:54:44:af:5a:
16:3e:05:54:74:ae:5b:f4:38:06:78:ef:9d:61:90:
35:93:83:40:7a:7c:5f:56:d3:1e:01:7d:75:31:df:
6c:06:32:e2:8a:0b:4b:f3:77:89:25:c3:f7:48:a6:
49:8a:bc:b0:a2:e9:c8:11:3e:a1:7a:96:97:b2:02:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:9D:74:55:08:A6:FA:9A:20:72:C0:D5:8E:72:E7:AF:71:EF:DF
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:00:33:25:ba:4d:4e:ab:ae:b3:e3:a2:5f:ec:a3:7e:0e:01:
3c:bb:5c:ae:45:8d:62:f6:28:26:db:31:b8:40:21:3f:9f:91:
16:63:ef:b8:e4:25:dd:9e:68:eb:56:cb:2d:00:54:b7:3d:15:
dc:47:8f:e5:37:9f:3c:79:0a:17:b5:39:f1:d4:e9:2b:4d:51:
b2:cd:7b:4c:72:93:14:35:50:fc:f4:4d:75:ca:4a:08:f7:bc:
15:29:e9:cd:b5:fc:61:ce:b0:ef:79:b7:41:01:61:b1:93:19:
e9:c2:57:de:7c:1e:17:de:b1:11:81:88:cc:72:96:42:4c:f2:
2f:9b:95:78:6e:8c:52:4b:57:89:c5:a6:5d:89:0a:08:2c:80:
bb:61:46:77:db:34:ac:29:51:d4:4f:67:56:dc:0d:a8:b8:78:
dc:c3:54:60:4b:ce:b0:3e:73:1c:68:5c:95:e8:63:54:1a:e6:
3e:e4:3d:1e:33:92:4c:df:96:77:40:89:b7:fd:24:27:94:1a:
af:80:88:88:e5:a2:9c:8c:94:5e:1c:04:d3:e9:89:f1:84:ea:
8a:e2:2a:f7:dd:d8:dd:36:ea:f5:0d:c9:64:a0:87:74:57:91:
ba:aa:2b:73:ad:f3:bb:a6:8e:57:8b:e8:4e:8c:df:88:cd:32:
8f:17:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:25:05 2025 by rpki-client