Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: B4k9C+IEASek47oNGRqs1NfW/zA6pEBlL85hglHsQD8=
Subject key identifier: 28:A0:98:4B:49:8B:BF:35:DB:4D:A4:91:8D:2F:FC:61:3D:3A:0E:0E
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 01984889BB12F957E24F790A5FD966513F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 1531
Signing time: Sat 26 Jul 2025 21:00:42 +0000
Manifest this update: Sat 26 Jul 2025 21:00:42 +0000
Manifest next update: Sun 27 Jul 2025 21:00:42 +0000
Files and hashes: 1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: 1z39wDsfzlMniPkRE+D3O/pWKDrZ20QW9rkrXktRHYI=)
4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:bb:12:f9:57:e2:4f:79:0a:5f:d9:66:51:3f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Jul 26 21:00:42 2025 GMT
Not After : Jul 27 21:00:42 2025 GMT
Subject: CN=28a0984b498bbf35db4da4918d2ffc613d3a0e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:b7:bc:7b:52:28:65:76:64:b3:ee:bf:f7:
64:53:3c:c8:dc:fd:60:df:b6:c2:b0:47:c4:35:73:
3e:53:db:af:20:b7:f5:ad:ab:dc:54:16:17:b1:19:
6b:98:5b:c3:d2:fc:42:61:b3:64:bd:22:01:68:97:
ce:b4:36:cf:87:8e:cd:92:e9:a0:8a:88:40:67:a7:
5f:2f:b0:c6:5d:83:bd:67:d8:e6:88:f9:e5:ad:92:
e0:e9:7b:fd:f4:ff:5b:c6:ac:cf:f3:e5:87:14:54:
bc:f2:a3:27:bd:4c:56:de:5d:4b:e8:e8:82:de:70:
fe:e3:09:08:a8:79:70:92:9b:65:92:5b:70:dd:dd:
12:0d:1f:65:8e:03:a1:9c:e0:d9:ba:e0:93:d8:12:
36:c5:37:e9:ae:47:e1:63:66:45:7d:82:f3:4d:73:
ab:c9:11:9f:b8:85:d6:72:5d:2b:af:d8:f1:b5:31:
ed:33:ba:8f:9f:88:61:8a:d2:88:80:81:4e:fa:a7:
57:61:9f:58:57:a2:d2:af:34:31:c5:72:a1:31:55:
50:13:f6:87:66:27:af:73:a5:7a:44:94:38:8c:b1:
26:fc:5e:e7:b7:f3:5c:d3:54:73:51:98:69:5e:53:
6b:d1:7e:56:2a:7c:13:40:1c:57:1f:e3:4a:a7:fc:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A0:98:4B:49:8B:BF:35:DB:4D:A4:91:8D:2F:FC:61:3D:3A:0E:0E
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:eb:cc:f9:80:fd:f1:aa:1b:0b:10:49:ce:a7:58:23:3b:ac:
57:e8:25:f2:09:10:1f:62:9c:0e:ba:0e:fb:4c:2c:da:3b:0d:
0c:0f:2d:4c:8b:f4:6f:65:57:7c:e5:91:23:ca:af:d9:95:f1:
83:92:60:a2:32:c3:8d:78:e1:20:cd:03:a9:97:bd:c8:08:10:
ef:5c:0f:2b:30:28:3d:c4:f1:dc:6a:6e:37:39:69:2c:99:62:
bc:dd:0a:c6:6e:12:b5:ba:d7:5e:6e:6b:60:9b:d2:34:3d:53:
35:4f:84:b8:be:82:d5:90:98:63:76:21:20:c0:03:3a:48:77:
46:c6:01:f3:b4:30:a4:42:11:74:06:dc:be:e9:d2:45:81:7a:
de:04:ca:9b:72:47:ca:27:90:ff:0c:c2:b3:2b:c1:5b:f7:ea:
cf:92:c6:11:cb:49:d7:51:2b:b6:1e:60:50:bc:18:16:da:44:
41:a1:0d:9e:c4:b9:c8:ca:f7:f1:0e:f9:a9:46:77:54:ac:0e:
74:3b:7b:83:19:29:d2:52:16:09:49:14:d9:76:c5:a6:e6:97:
be:28:91:eb:42:e1:3f:03:15:49:63:09:46:10:fa:36:4b:1c:
e6:35:49:03:d7:20:ce:53:cd:6b:a5:09:12:48:30:d7:ec:c3:
7c:66:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:16 2025 by rpki-client