Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
File: A-VjR3yiveae95Q5kflTMwV7PjY.mft (raw, json)
Hash identifier: CciAgOxw6lITVAKLP3XpG/6c1XzyEi8zrxGo1ix0vfw=
Subject key identifier: 0A:94:42:BE:08:83:3D:31:D3:9B:18:C9:FC:98:F2:92:6A:FC:7E:AF
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Certificate issuer: /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial: 01984776D89449ACB720C09EA7833307F02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
Manifest number: 0434
Signing time: Sat 26 Jul 2025 16:00:27 +0000
Manifest this update: Sat 26 Jul 2025 16:00:27 +0000
Manifest next update: Sun 27 Jul 2025 16:00:27 +0000
Files and hashes: 1: A-VjR3yiveae95Q5kflTMwV7PjY.crl (hash: /cd7GoCntzD/kROWRyjgomm0ut8PpeA0a8LysE20D28=)
2: YPMFe5Bu5pnUfONKrKR7BiqfdCg.roa (hash: zPktxLB6En3ydjnKgIDNJDbBFlDMgM3cJospsMff0n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:d8:94:49:ac:b7:20:c0:9e:a7:83:33:07:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
Validity
Not Before: Jul 26 16:00:27 2025 GMT
Not After : Jul 27 16:00:27 2025 GMT
Subject: CN=0a9442be08833d31d39b18c9fc98f2926afc7eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:e0:44:98:b6:b2:1a:5f:20:14:17:ba:c0:
cd:3c:53:84:92:a1:e3:5a:aa:53:26:d7:63:a6:00:
6a:ea:e1:51:a7:b2:5a:cc:61:e7:9a:55:c2:47:e7:
6e:1d:1b:5d:b5:20:2a:1a:d7:ac:ad:6c:75:2a:9c:
88:83:32:17:b2:d4:38:c1:45:ad:3b:7e:dd:8c:39:
1a:44:63:90:30:3e:12:77:f4:56:b0:e2:c7:91:bf:
1c:52:41:3f:b5:92:c9:80:4b:9c:75:4d:32:61:41:
8b:04:3f:4e:fd:0c:a6:c7:af:04:8d:8b:41:51:5b:
04:dc:81:9f:85:ec:e2:1e:34:69:d3:e1:75:29:b1:
85:49:8b:c1:19:7c:aa:d8:68:af:45:a3:8a:ee:61:
61:dd:dc:a4:1a:f3:01:db:86:c2:50:be:28:2c:3f:
2b:eb:58:86:f3:97:9b:19:5e:f2:62:14:92:96:f8:
bd:09:11:bf:a1:9a:c3:a0:1f:2a:a1:3a:88:7c:d3:
5b:19:02:50:b7:0f:32:a7:f4:2d:c4:c4:02:32:7c:
5d:b2:c2:27:f0:ea:f3:6e:f1:28:63:e6:f0:99:ef:
3d:9a:3c:fb:40:18:97:67:0b:2e:85:f4:dc:7a:8a:
88:0f:73:88:60:02:74:6f:71:ea:39:9e:05:7c:fd:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:42:BE:08:83:3D:31:D3:9B:18:C9:FC:98:F2:92:6A:FC:7E:AF
X509v3 Authority Key Identifier:
keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3c:3a:f0:94:5a:20:3a:f0:d6:2d:59:4a:08:8e:60:06:e1:
df:39:ba:2f:8d:96:e5:3c:22:0c:70:a9:f3:24:d1:ab:61:ac:
9d:71:b8:a6:d4:c4:ae:c0:d0:f3:96:ab:66:df:9f:1e:9c:dc:
1a:6b:b7:47:52:b9:ca:6e:6c:13:63:64:3f:8e:13:ef:e7:4e:
be:bf:33:fe:ca:1e:20:d3:35:a8:c5:60:4a:94:bf:b6:ce:76:
45:f5:52:5f:83:61:ab:ea:0b:f1:8e:d3:06:c3:1a:7c:cb:16:
18:92:0e:85:a9:02:d6:42:be:e0:cc:32:19:c1:53:e2:16:29:
d5:52:8c:45:a4:57:a7:67:a0:bb:ac:2c:05:ab:ce:c6:9f:8f:
01:3a:47:a0:2c:c9:be:76:6c:67:e0:6c:65:f5:e0:fb:11:ac:
76:2b:08:ea:ba:01:b1:55:df:5b:99:a3:18:f6:5b:eb:2e:50:
0a:f2:12:99:4a:59:d3:bd:ea:51:6a:94:81:48:ca:35:9a:2c:
73:95:80:a9:b8:97:b3:29:66:b0:4b:5f:fc:65:17:6c:b6:d7:
2e:c9:68:d2:55:ce:44:70:33:fe:7c:88:10:ee:3e:a1:d4:db:
da:f3:37:42:1d:a0:be:40:ab:69:58:66:0f:ee:a8:17:be:cd:
c4:91:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:03:07 2025 by rpki-client