Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: DaAGJOcBHhUAuyy+Mq3sD/Kt0u8qckyi4HM/a/cQbag=
Subject key identifier: 3C:3F:4F:3C:90:A2:68:62:A0:08:42:5C:37:4C:67:AE:82:A8:E8:E6
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 01985AC83F888DAF844AD61458C586C33CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1257
Signing time: Wed 30 Jul 2025 10:02:09 +0000
Manifest this update: Wed 30 Jul 2025 10:02:09 +0000
Manifest next update: Thu 31 Jul 2025 10:02:09 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: QXM/R3ePnzCDWq9motfAs3dAgRpvjbCS0EUz0bRtuE0=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c8:3f:88:8d:af:84:4a:d6:14:58:c5:86:c3:3c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Jul 30 10:02:09 2025 GMT
Not After : Jul 31 10:02:09 2025 GMT
Subject: CN=3c3f4f3c90a26862a008425c374c67ae82a8e8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:e2:84:b7:70:3f:37:2d:71:c9:7a:d8:cb:
89:79:11:f1:f9:49:b5:e1:41:8b:a7:11:81:e0:60:
48:c1:f4:38:58:76:e7:b7:70:28:9d:d2:68:4f:f9:
a0:1d:76:84:30:50:19:62:fa:27:25:ae:81:3b:42:
49:8a:17:e8:53:8d:a2:3a:b3:2d:97:d4:ed:4f:7e:
7a:44:15:14:d6:46:21:d7:c0:35:62:2e:98:05:14:
a2:f3:a0:64:d5:4e:e1:c7:4e:7d:db:25:ae:12:b9:
b1:84:87:46:e9:a7:a0:8d:3d:ac:08:28:e3:b9:ad:
1f:6d:c5:21:99:a7:94:af:c1:5f:33:10:37:1b:c3:
f2:09:2f:dc:7b:ce:1c:0d:e5:e0:0b:aa:05:c5:d6:
18:7d:b4:09:0b:c5:36:6d:64:8d:ec:02:9b:c8:73:
62:fb:5f:1c:78:81:c6:58:84:0e:68:61:84:ed:6c:
4f:ae:fc:68:71:3c:84:c8:3f:74:ea:0c:24:0c:68:
b5:e8:03:2b:f8:7a:af:0a:bb:98:aa:f7:18:54:9f:
4c:29:40:49:f7:9d:33:c4:77:6e:77:49:5f:e4:5e:
f9:44:ea:36:48:96:2c:0d:9a:eb:3d:69:e1:4b:bd:
43:83:09:36:0d:21:06:d3:7d:25:76:dd:61:65:80:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:4F:3C:90:A2:68:62:A0:08:42:5C:37:4C:67:AE:82:A8:E8:E6
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:18:a6:3b:22:69:dd:f5:6c:cd:96:62:ea:ee:98:83:a8:
1c:39:7a:e3:17:3e:83:ac:8e:ae:b2:cc:a1:cf:85:f1:7a:5b:
90:9d:3a:b7:16:ee:d9:29:87:fd:eb:05:f5:ef:62:8b:f1:31:
87:25:0a:36:77:01:5f:69:cf:d5:1b:21:67:c1:97:08:2d:04:
1c:2b:18:ed:18:bb:d6:94:5d:42:be:66:3c:1c:69:c9:21:f6:
93:6f:32:53:60:a9:5f:a9:99:43:77:cb:7a:5a:df:1b:75:71:
bc:c0:0e:de:1e:5e:de:a9:af:4b:78:da:bb:30:c0:04:42:ee:
47:4f:70:50:9a:4c:7f:fc:98:f3:99:26:5d:ca:d6:bb:b9:d9:
fa:08:1e:75:d4:2c:a3:0f:27:a6:1f:3d:d9:35:41:49:2c:38:
8b:5d:08:84:5a:91:75:9a:11:63:b4:96:5e:e7:6a:17:5f:7c:
0e:51:d8:3f:53:11:78:ec:c2:79:47:54:38:f7:de:52:62:b5:
81:5e:b2:fc:62:a4:30:83:60:96:3f:ed:f0:fa:42:a8:4a:eb:
29:5a:ac:dc:36:c4:b7:8b:ee:eb:1d:92:03:b3:23:5e:ec:58:
93:07:fc:25:5f:af:5c:ae:1c:10:df:8b:eb:05:00:61:0f:01:
9f:8b:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 16:50:07 2025 by rpki-client