Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: LbpDubeR1/jQb2E4/W2HchB1hVivM1GOw0BzBPDCht8=
Subject key identifier: 14:39:80:12:AB:E7:D1:0D:CD:78:32:A5:79:6B:79:BC:32:66:99:A1
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 01984A77F489E5470B89109EE8226BEC909D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 014F
Signing time: Sun 27 Jul 2025 06:00:32 +0000
Manifest this update: Sun 27 Jul 2025 06:00:32 +0000
Manifest next update: Mon 28 Jul 2025 06:00:32 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: YymLCM8pwAcwVkuMdIeagednwMwYSCZ9m2a1jOeFoAo=)
2: z96_ZJgr9Ouwu3H857DM3qPVUxI.roa (hash: XUjlH+TkzMgkjT2OPVskc/V8eVbqCCBWMoR0ix6MWrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f4:89:e5:47:0b:89:10:9e:e8:22:6b:ec:90:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Jul 27 06:00:32 2025 GMT
Not After : Jul 28 06:00:32 2025 GMT
Subject: CN=14398012abe7d10dcd7832a5796b79bc326699a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:0a:4d:86:b7:f1:2f:bc:5e:8b:e1:54:a5:
a8:42:28:ee:bd:aa:59:bc:e2:43:11:72:0f:ef:97:
e4:ad:5a:68:94:d6:e1:fa:90:65:d4:09:8d:d9:fd:
d7:42:01:af:f5:a1:75:cf:e8:39:40:7c:67:62:4a:
fa:99:0b:e9:b4:b6:9f:0e:33:32:d8:d0:1b:fa:b5:
1c:e0:5c:d9:98:38:13:48:f2:a4:c0:d0:95:e7:a1:
11:9d:06:0d:13:8f:52:f2:c8:13:c0:eb:74:f9:49:
da:d3:69:27:d4:c7:a1:24:8f:56:e7:4f:aa:31:30:
d6:80:68:64:47:81:77:0d:a5:fa:41:69:7e:21:46:
ba:2b:c0:64:42:91:51:71:35:79:ba:0c:3f:e1:fd:
ef:9a:85:e0:07:24:a1:52:28:2f:88:27:d6:81:2e:
7c:5c:6d:c6:cd:b2:b5:90:b8:29:02:51:98:02:c5:
15:a0:66:b3:a7:cd:95:e0:98:ed:25:5e:67:05:a3:
4a:11:ba:ba:e3:ef:e1:2e:79:3a:81:18:96:f3:7c:
3c:71:28:64:1b:eb:06:a8:06:67:08:c9:21:04:ba:
fb:01:60:3a:d1:9b:11:d9:ed:3d:85:e1:b3:67:ad:
92:b2:75:d9:25:1e:b4:af:7d:19:cc:8a:82:51:c9:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:39:80:12:AB:E7:D1:0D:CD:78:32:A5:79:6B:79:BC:32:66:99:A1
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:d4:39:88:e4:51:1d:c1:af:be:17:1c:a3:ad:48:49:6f:
df:d7:17:57:6c:7a:b7:af:a6:b4:90:dd:89:ea:5c:07:0b:42:
b5:07:74:de:55:af:82:24:cc:b6:df:29:48:8a:12:23:3f:45:
70:31:6a:80:7a:77:98:c5:5e:c3:9c:0a:92:7a:2c:11:7d:24:
3b:64:a0:5c:7f:2e:4f:9c:4f:aa:05:27:5c:91:8e:c6:4b:07:
05:49:e5:2f:ab:f5:6b:27:64:cf:46:ac:15:f8:b7:5b:f8:88:
bb:49:b6:e8:1d:e4:3a:7f:e6:63:ce:b9:91:fa:8d:42:c5:72:
44:9d:4c:b0:13:3c:29:23:3c:31:5b:6b:f6:68:5f:13:19:74:
6b:d6:a4:c4:c3:5b:ed:2d:3d:cc:d8:c8:e1:df:0b:a4:dd:46:
f5:6b:d4:b5:29:db:60:2e:62:b0:b3:22:c3:74:dd:fb:fa:e4:
d7:fb:15:90:7e:fa:8f:f4:7c:aa:cf:b4:71:c4:7f:02:6f:29:
69:ef:2a:01:40:44:55:e8:0f:65:59:5c:75:ae:9c:0c:82:42:
b8:eb:b5:95:bd:86:d5:51:f8:40:04:21:10:5f:2a:dd:cf:d3:
5d:0b:0c:e0:38:e8:ae:ff:e7:36:6e:b4:26:32:a2:f7:23:3b:
0e:57:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:22:30 2025 by rpki-client