
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File: a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier: fkk8+vknk6cx38wuEDDQOjQfUb+wT9/q3NOhD9YjG/8=
Subject key identifier: 05:1F:B1:EF:49:AE:03:C3:B0:0F:A5:76:74:D3:AF:27:71:46:94:73
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 01984D4258148B9E346F3422C4E454C7F8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number: 1595
Signing time: Sun 27 Jul 2025 19:00:50 +0000
Manifest this update: Sun 27 Jul 2025 19:00:50 +0000
Manifest next update: Mon 28 Jul 2025 19:00:50 +0000
Files and hashes: 1: OVBxJN_E7KClOVOyQO1dITqXrDc.roa (hash: gtF4A20X0QOWLiRvuhbFqEg7fy+sAd/zI+eINNfliv0=)
2: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: 5rXOxY4cC1WuI7sVHmZE/UPYhRirs6Ka1VO2aBHtQ2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:42:58:14:8b:9e:34:6f:34:22:c4:e4:54:c7:f8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: Jul 27 19:00:50 2025 GMT
Not After : Jul 28 19:00:50 2025 GMT
Subject: CN=051fb1ef49ae03c3b00fa57674d3af2771469473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:e1:fe:62:ed:86:fc:18:ce:9a:9f:e7:f5:
8d:49:7b:24:f4:0d:d5:5d:cf:9e:72:af:e0:3d:70:
ac:65:64:77:3c:5a:60:85:75:e6:e6:d0:50:d2:ec:
ba:9a:b4:6e:74:b0:58:83:66:ba:e2:ba:b7:10:e9:
81:a0:c6:95:af:14:e0:8c:f1:1e:fb:ae:80:ab:07:
28:3d:34:d1:fa:ba:cd:af:21:08:1b:0c:03:d0:5a:
c4:d2:c7:a7:fd:25:29:b9:ca:72:75:dc:e2:80:fd:
30:46:0b:d4:4f:9e:b6:4d:46:8d:35:f6:17:18:3f:
64:ab:f3:79:3d:0e:e2:45:b8:5c:0d:45:d2:94:2f:
13:62:59:11:0a:9b:0a:f8:e3:ba:92:e1:58:e3:50:
24:40:b5:dd:5a:9e:70:b6:ca:73:2f:f9:c8:a2:3c:
8e:72:22:fb:5f:c7:43:57:9b:48:c7:1d:10:fd:73:
b0:87:36:d2:dc:0f:c2:0c:cf:4c:8e:a7:ca:d7:7d:
c0:0c:3e:c2:63:10:62:1e:5c:3e:fb:15:2d:83:a7:
c7:21:ff:c3:64:af:20:b7:15:fb:26:94:28:80:45:
e7:2f:68:65:d9:7b:ba:eb:f0:a8:00:6e:f8:63:b3:
83:ed:ef:77:c6:cc:15:16:c8:6f:81:33:39:ee:c6:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1F:B1:EF:49:AE:03:C3:B0:0F:A5:76:74:D3:AF:27:71:46:94:73
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ce:cd:f6:84:b4:51:ee:32:ab:d5:78:d4:5a:d8:e6:2e:be:
a0:87:8d:e0:6a:22:e4:3d:5b:f1:71:fa:8b:5c:4f:55:ff:10:
ae:8e:47:2d:fd:30:0a:31:38:03:f8:6c:4c:39:70:6b:6d:90:
57:12:5a:1e:da:00:cd:37:81:3d:f2:9b:33:9f:a0:a8:01:a3:
17:fc:9e:f5:aa:ab:86:ee:7c:8f:55:ec:b9:a2:79:27:fc:2d:
19:bc:24:b7:66:b0:33:ee:79:5f:d3:93:7e:2c:cf:05:cd:f4:
89:52:90:58:9a:73:1d:43:b4:2d:97:83:d1:80:f2:1a:6c:37:
50:d3:12:f2:0c:04:d6:63:8a:c2:04:ff:a3:82:f6:bb:1a:3d:
97:8d:1f:0a:35:06:d6:62:03:73:61:5b:76:25:f0:aa:57:48:
2c:5e:a0:d4:5c:8a:0a:19:a0:7f:56:27:e0:bd:66:2d:09:4b:
2a:5f:86:b1:32:ae:9e:c2:70:6f:24:eb:7e:c7:d2:fc:62:9f:
82:ae:0a:80:05:f0:fe:eb:38:77:36:91:07:36:3b:15:41:c1:
23:b1:65:54:de:b0:fb:38:2c:82:40:c5:cc:47:69:f2:a4:38:
ec:05:af:9e:36:d0:23:6b:1c:f4:66:f5:a5:ce:c5:a9:42:85:
8c:b4:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:02:11 2025 by rpki-client