Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: D/Pme3DlrocdWbICKdTMz/3BRktWwld+uryGQ9HExa8=
Subject key identifier: A0:B1:DF:58:EF:45:5C:2C:2E:73:8D:71:A6:95:F6:3F:9E:E8:DD:BF
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 01984A416D47F20F3739A4D47EC33ACBCB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0D3A
Signing time: Sun 27 Jul 2025 05:00:58 +0000
Manifest this update: Sun 27 Jul 2025 05:00:58 +0000
Manifest next update: Mon 28 Jul 2025 05:00:58 +0000
Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: +WY4+Ado8j+aJXCB6j6JjI389bqvJrTzH0u8tKI/+vk=)
2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:6d:47:f2:0f:37:39:a4:d4:7e:c3:3a:cb:cb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Jul 27 05:00:58 2025 GMT
Not After : Jul 28 05:00:58 2025 GMT
Subject: CN=a0b1df58ef455c2c2e738d71a695f63f9ee8ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:f9:13:60:69:6b:aa:77:85:e1:30:19:f3:
34:9f:67:e3:65:e7:36:d3:c5:f9:63:31:39:b2:e7:
61:c1:af:0e:cb:16:59:4e:13:93:2f:e7:b5:e2:c7:
2e:9a:8e:d5:d8:b3:8a:54:87:be:fe:3d:0c:05:4b:
8b:fe:fe:f2:06:4e:92:48:bf:53:06:8f:dc:1d:4d:
6c:95:17:ec:d0:9c:ae:85:01:82:12:0e:c8:e8:8b:
71:a8:ad:55:f2:35:5d:a2:7a:e1:82:b3:fd:a3:da:
ed:4c:b8:de:76:7f:81:ed:89:f9:81:7c:95:fd:dd:
db:81:20:47:23:72:67:ce:e9:f1:60:27:6b:e4:43:
4c:68:76:01:67:d7:2a:48:a9:74:18:91:f3:62:25:
69:73:f9:56:e5:9c:0a:fc:6b:ed:c9:4a:66:24:e3:
3f:7c:4c:72:78:fa:50:b1:cd:ad:3b:5f:88:a7:ff:
3a:76:c7:8e:76:6b:17:f3:60:e1:3e:0d:dd:69:15:
88:2a:cc:1e:6f:e9:00:2a:b6:cc:f2:d7:2a:56:4e:
aa:4d:df:6e:e5:f4:74:16:5f:21:41:1f:04:5a:37:
92:d3:fd:7f:0b:bd:7f:5a:76:46:0f:10:b3:7b:31:
44:e5:c7:42:e4:14:c4:ac:5b:78:7f:fa:73:4c:62:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:DF:58:EF:45:5C:2C:2E:73:8D:71:A6:95:F6:3F:9E:E8:DD:BF
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:98:91:be:b0:da:f8:0a:2f:bd:e4:82:93:b5:11:65:1f:76:
66:ce:78:3e:55:39:89:6a:5a:3b:83:a1:3e:4f:a3:8c:2b:7d:
d6:28:d1:f3:89:4d:53:f1:9e:45:52:37:a4:d0:60:9f:9b:4e:
57:a0:c7:b4:7d:dc:6e:63:e6:99:92:b8:e2:80:5a:36:08:05:
ff:57:0a:ad:68:e9:d1:62:25:58:d1:43:fc:fe:61:8e:66:c0:
bc:52:bd:07:9b:4e:9d:9a:c2:42:01:30:a5:bf:9e:64:e5:70:
d8:8c:5b:d7:50:79:36:57:59:2e:79:56:46:c1:f5:7a:9a:6a:
3d:43:22:18:42:c2:dc:53:d1:1b:0a:51:4e:7d:d2:c1:34:f2:
82:53:20:f3:d3:6f:0e:55:d9:27:57:ae:0b:ec:15:11:3c:2c:
2b:5c:f5:6b:21:b2:3c:22:70:ff:c1:26:ee:a1:7b:d7:62:36:
bc:6d:7f:8b:d2:6d:dd:f9:27:88:de:90:0a:44:35:74:8c:b9:
f0:79:3b:8d:da:e2:24:d8:91:a7:29:00:33:04:bd:0b:32:1e:
f4:13:ee:30:7e:53:e7:aa:73:fd:3d:e7:eb:f6:9d:61:84:2d:
ba:aa:76:99:6a:c2:25:c1:c5:1e:04:4e:96:51:74:90:bc:6e:
43:6a:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:51 2025 by rpki-client