Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: r7FfIHlx1PumU6MDJinlosJX9WBInBUwOfGmvSstUxc=
Subject key identifier: 5E:8D:F8:C9:7B:04:D6:7B:FE:93:93:CD:B2:49:D7:7B:24:FB:1F:37
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 019848C0BD5E220AAA997439584C9592A6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 22:00:47 +0000
Manifest this update: Sat 26 Jul 2025 22:00:47 +0000
Manifest next update: Sun 27 Jul 2025 22:00:47 +0000
Files and hashes: 1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: 5E0lJOSG6eN9Y9grrBcfyhmK7xTKF/OjtyAsyxvstcM=)
2: LXtV1SOyemLIBBZI_VMF85otBtE.roa (hash: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:bd:5e:22:0a:aa:99:74:39:58:4c:95:92:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Jul 26 22:00:47 2025 GMT
Not After : Jul 27 22:00:47 2025 GMT
Subject: CN=5e8df8c97b04d67bfe9393cdb249d77b24fb1f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:1c:ca:32:22:ca:49:f4:53:ac:a1:41:04:
a5:a6:e6:9d:96:f1:f6:1a:29:cc:6d:9d:20:da:5c:
16:74:ac:18:52:5e:ed:b1:eb:22:ba:9f:d8:4d:07:
4f:b2:de:bd:36:cd:75:27:e7:18:30:d5:36:2f:4c:
4b:3b:22:48:b2:a6:1d:e9:a8:06:45:7b:ca:40:b5:
86:ff:95:92:7c:0a:34:8f:11:2b:c2:cc:1a:69:a7:
e6:84:7c:50:a9:98:1e:58:57:4c:c9:8a:b7:d0:ac:
b3:e3:87:27:71:05:8c:b4:90:ad:7d:44:db:f3:9e:
0d:ba:2a:9a:8d:32:02:50:bf:58:c5:bb:27:ec:ed:
4b:28:27:33:e8:1b:eb:c3:fe:1d:ae:68:eb:60:62:
6a:ad:31:13:3a:e6:ba:63:c3:7c:d5:04:17:b9:f9:
1e:37:16:4f:2e:49:ce:a3:f5:61:76:b6:61:a9:25:
43:d3:82:77:d0:7d:f2:59:a9:ea:8e:88:de:70:ea:
3d:21:49:da:2f:d8:90:13:93:c8:cb:f4:84:8e:6a:
e5:db:77:d1:61:da:24:1c:5b:34:3d:c0:66:e1:cd:
69:69:6f:a4:8a:06:e7:4e:17:0c:cb:87:44:bf:58:
a5:2c:9c:36:ed:6e:87:35:37:af:e9:06:04:2b:ee:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:F8:C9:7B:04:D6:7B:FE:93:93:CD:B2:49:D7:7B:24:FB:1F:37
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:45:4e:9b:48:69:95:b4:50:69:3e:51:09:61:eb:92:bb:ad:
32:bb:12:73:5f:54:88:62:32:78:57:3a:ab:64:87:f6:12:78:
f6:53:12:8d:d8:9b:c3:60:f8:7b:81:74:f4:47:8c:f4:ea:b1:
03:97:ba:9a:76:d9:6b:d6:66:d1:31:51:6d:56:4b:ef:c1:ed:
e5:cf:68:87:19:a8:a6:49:41:7c:31:c5:8a:9d:29:3b:b5:68:
db:6d:35:6c:08:15:b4:5d:31:15:5b:8c:d7:51:56:e9:d3:08:
eb:7e:39:ca:5f:b1:79:ed:5d:4f:99:64:5e:8d:1c:b8:5b:8c:
01:c3:36:0f:c1:90:95:f0:e3:47:bc:57:2d:e2:c1:d1:1d:10:
02:e0:f5:94:c9:32:7e:70:f3:eb:bf:42:5a:1a:46:45:77:c5:
9f:0f:2f:d9:96:b4:48:18:4c:19:c2:c1:59:24:eb:1d:90:1e:
6e:2f:7e:0c:9d:77:06:16:58:56:88:41:d5:4a:f8:ad:da:66:
dd:01:7c:c3:27:bb:da:5e:ab:78:3f:b9:55:b1:37:f2:fa:32:
72:f3:2f:cc:be:46:4c:59:48:f3:08:b5:b6:0f:f0:47:9f:38:
5a:4e:2f:46:92:26:c1:2c:40:8f:58:b1:f0:73:3a:94:8f:2d:
3f:6c:d2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:31 2025 by rpki-client