Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: quJfcjx2wnAPZvESsiPmLunirIGi8Twva4ZkDDKtP+g=
Subject key identifier: 4A:DF:11:85:EE:32:2E:3A:37:50:82:02:2A:4E:05:CC:AE:02:90:0F
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 01984B549EB3085C12108C4DB06D6924861C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0B77
Signing time: Sun 27 Jul 2025 10:01:33 +0000
Manifest this update: Sun 27 Jul 2025 10:01:33 +0000
Manifest next update: Mon 28 Jul 2025 10:01:33 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: Nm5dlL6DoX6ztAZYrOvOZg/iIy98EX0mVG0QblwGIp4=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:9e:b3:08:5c:12:10:8c:4d:b0:6d:69:24:86:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Jul 27 10:01:33 2025 GMT
Not After : Jul 28 10:01:33 2025 GMT
Subject: CN=4adf1185ee322e3a375082022a4e05ccae02900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:a9:9c:07:dc:d2:b8:cf:c0:07:30:4d:48:
12:a1:78:0d:fc:74:73:42:36:44:ce:33:ac:02:24:
e7:20:c8:be:07:55:fb:10:0f:46:6d:a6:41:57:19:
81:e1:47:8d:14:d2:52:b5:2c:49:98:bc:9e:2a:c0:
8f:75:d8:6d:c9:88:03:3b:24:21:3e:2e:cd:f8:f8:
be:e7:b4:e3:7b:c8:6a:02:26:e9:6b:76:22:f7:dd:
6f:d9:97:ce:1f:ec:5a:bb:00:00:d7:ba:b1:2e:cf:
4c:0f:0c:17:01:06:a8:59:71:40:fd:34:92:80:b2:
09:5d:3a:41:9b:b3:ca:77:25:ee:ca:ca:d7:86:9d:
c3:40:89:3e:2b:b7:2e:db:4e:15:71:a8:a6:c9:82:
72:b7:49:0c:f8:cb:42:b3:e4:8c:73:d9:73:6b:33:
43:01:03:68:b5:5e:68:2e:a8:7a:a6:f0:88:d5:72:
40:1f:13:90:98:61:b1:2c:80:44:6f:74:8c:8f:a9:
a7:00:f6:e3:3c:c9:f1:eb:96:22:4e:b3:a4:ad:73:
4f:5f:df:c0:ad:49:bb:74:f7:ad:74:25:a7:be:2e:
2f:d2:fb:75:b5:b6:7d:ac:19:8d:d7:19:92:ac:09:
55:ba:8b:80:91:56:7a:f2:fc:d1:0f:e4:e0:3f:ea:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DF:11:85:EE:32:2E:3A:37:50:82:02:2A:4E:05:CC:AE:02:90:0F
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d6:f2:46:46:e4:f0:94:90:7e:fc:a6:f3:65:49:9b:f5:34:
a0:14:27:30:af:3d:96:85:06:d5:f8:d0:b5:c7:14:ee:8c:47:
f2:a2:67:6b:f4:c9:ae:a8:35:ba:db:18:ce:72:d7:2f:51:c8:
04:ed:62:93:44:63:3c:7c:63:bc:b0:22:d2:23:a2:f0:93:05:
7a:07:5d:47:cd:91:44:18:f8:ea:17:75:60:e7:35:54:77:d9:
4c:ab:96:c1:6b:dc:a5:8b:a4:f8:90:3c:da:81:2d:17:18:47:
c4:ce:34:24:0b:fc:aa:15:d4:cf:8e:fb:14:28:3f:bf:bb:73:
a6:46:2e:cf:67:43:51:47:2c:21:1d:73:4e:98:b6:68:7f:0d:
b5:d9:c2:a4:e9:6b:f1:af:a1:84:7a:b1:c6:6b:8f:d1:01:8c:
f9:09:82:91:7d:f8:8f:e0:a7:2b:48:3c:20:46:66:46:1d:c4:
0a:50:ec:c4:ce:5a:c2:d4:a8:7f:e2:91:07:69:73:bb:44:0b:
26:98:1b:e5:05:bf:e2:e8:32:6f:90:10:22:fd:ee:56:dd:8c:
75:97:1b:46:57:e3:eb:3c:e2:20:e1:f9:e7:0d:ca:d3:22:2d:
89:b0:36:aa:26:ad:62:8c:d7:15:1e:f8:34:20:66:0e:bf:41:
b8:8d:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:21 2025 by rpki-client