Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: 5nhCIafFH4nGp+ShtpQPRPEOtZRUDXmIGVnCZsjKGig=
Subject key identifier: AB:56:F0:CA:0F:01:5F:D4:04:BF:86:04:79:BD:75:B7:F0:AC:33:7B
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 01983615AB1C41C58896887E47A95318C9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 15FB
Signing time: Wed 23 Jul 2025 07:00:46 +0000
Manifest this update: Wed 23 Jul 2025 07:00:46 +0000
Manifest next update: Thu 24 Jul 2025 07:00:46 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: zahMsuGlXz2DZMXdYeMOFWNPZSTcY9anaR3ba0Rv04o=)
2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=)
3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:15:ab:1c:41:c5:88:96:88:7e:47:a9:53:18:c9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Jul 23 07:00:46 2025 GMT
Not After : Jul 24 07:00:46 2025 GMT
Subject: CN=ab56f0ca0f015fd404bf860479bd75b7f0ac337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:70:47:77:15:e0:9e:18:73:11:7e:9e:ec:
a9:31:e8:bb:1b:c9:d4:72:ba:15:f5:f6:e0:8d:30:
d1:d8:35:9d:09:36:2e:20:4c:ef:f6:0c:48:21:12:
9a:c8:4b:40:95:49:50:4c:7f:eb:12:87:8a:25:05:
80:52:8d:c0:d5:ad:38:db:9d:5f:0a:ff:d6:90:f1:
ca:c6:67:77:51:30:3c:bb:de:01:5d:6e:2d:f0:5f:
e6:5e:a1:03:d2:9f:e0:e9:89:c3:79:a9:47:2f:78:
67:35:ad:9c:62:51:ee:12:51:db:7d:94:9b:f0:71:
53:48:a8:50:59:31:22:2d:b5:2f:0a:09:b0:b4:e2:
52:3f:2a:4a:a9:72:37:d9:c1:e6:0b:70:d1:55:a6:
33:05:87:0f:6b:ec:75:19:ba:54:ee:88:8f:de:84:
03:82:68:eb:3c:2d:25:75:9e:30:94:62:e8:48:50:
88:25:57:54:e4:d3:b4:83:42:8f:f1:89:3e:32:51:
79:e7:81:ae:33:8d:7c:31:80:6d:bd:61:4e:df:7d:
ba:6a:fc:b7:ea:01:93:9f:e7:62:f0:22:19:5c:d0:
b2:54:94:3e:69:86:e9:08:59:92:cb:58:0a:99:c0:
9b:70:c0:0a:56:60:b3:3a:b8:51:c0:1e:34:4a:f6:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:F0:CA:0F:01:5F:D4:04:BF:86:04:79:BD:75:B7:F0:AC:33:7B
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:31:54:46:e3:4e:9f:fe:fe:87:6b:5f:5e:7c:0d:d9:96:
d9:65:0d:b5:40:04:fd:ff:2c:06:3a:e9:0a:17:7a:d6:7d:8c:
9f:91:b6:46:a5:00:34:c2:91:78:f0:99:e1:d4:a5:b0:f4:df:
d0:8c:1c:81:3a:a8:72:55:fb:06:a1:c0:b2:66:05:e4:fc:3e:
8d:3f:9f:9f:54:2a:da:2f:cc:5b:a7:f3:82:f5:d2:6a:7a:88:
89:12:15:2c:f1:ab:52:4a:e5:45:97:10:67:34:00:76:94:fc:
46:b8:ba:75:9c:8b:4e:9b:b5:f0:47:0a:81:a7:69:51:9b:d2:
85:10:62:3a:2e:3d:a5:05:99:87:9e:78:25:d4:ce:e9:cd:ec:
32:e7:32:64:eb:c4:37:b5:0a:51:8e:00:52:e9:3e:64:11:63:
dc:f4:e1:4b:33:97:8e:db:94:30:85:c8:c1:b9:85:a1:d3:bb:
07:cb:b7:ed:ae:de:d4:d7:e7:38:e5:72:12:b9:76:22:7d:60:
59:36:e7:f6:25:b4:ac:11:b8:a2:be:0f:d8:33:6e:b1:09:ae:
47:7a:10:ad:25:bd:4d:df:aa:24:0f:b2:f1:62:c1:4c:49:94:
d3:05:53:92:a6:4e:58:17:09:4e:60:39:ee:1b:57:d0:75:b5:
e1:7c:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:10:35 2025 by rpki-client