Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File: A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier: 3mgJIYVx7Jx7w+y/0fMObWOqkLFC0i8Z5KcVblfXUWc=
Subject key identifier: A4:97:89:1B:DF:92:0D:38:98:8A:E1:7C:F5:A4:37:96:56:AD:B5:37
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 01984A0A4DD297E111DFA0883847773C25B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number: 0834
Signing time: Sun 27 Jul 2025 04:00:45 +0000
Manifest this update: Sun 27 Jul 2025 04:00:45 +0000
Manifest next update: Mon 28 Jul 2025 04:00:45 +0000
Files and hashes: 1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: tXc4JfFKGg45T79N/DxHCWmbipGGftWCRitQg/1UJhc=)
2: l0K6PAqN9Gt27j_CVXz67WejrWo.roa (hash: 791A1HYehBk0Xv4a4YcluI/Rrf5zyMUHKzRR42V6uDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:4d:d2:97:e1:11:df:a0:88:38:47:77:3c:25:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Jul 27 04:00:45 2025 GMT
Not After : Jul 28 04:00:45 2025 GMT
Subject: CN=a497891bdf920d38988ae17cf5a4379656adb537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:51:ee:b9:65:8f:17:86:b9:36:96:a5:21:
34:8c:61:27:a3:bb:e1:51:b9:4f:c9:66:a2:03:8e:
5d:85:bd:f0:23:07:94:1b:04:a4:d1:5c:27:4b:ea:
03:fa:6f:61:c0:4f:7a:30:f1:c2:86:53:fb:d0:f7:
60:d2:4d:fa:d6:41:10:7b:b1:d8:a9:b4:f5:ff:64:
cb:23:1e:de:45:8b:27:c9:17:49:5b:92:a8:90:98:
13:d2:65:16:23:38:39:8c:11:10:f4:a1:44:38:26:
a3:e2:f4:df:7c:71:e0:95:e8:9b:c2:12:e8:d6:52:
95:ab:4d:58:02:bc:67:16:44:22:3f:b0:08:da:84:
6c:00:d9:97:ea:9e:5f:b9:52:c9:07:39:81:66:18:
f6:c5:b5:f3:e7:6f:04:e4:b2:b8:a1:3c:26:f7:5c:
ce:9a:43:72:c9:7b:ff:71:2c:c8:6b:67:bb:c2:4a:
bc:31:7f:0b:0b:a3:8f:33:11:81:97:a6:1b:00:47:
5a:05:4a:13:e9:ec:78:80:7a:4d:59:db:f3:b8:25:
e7:67:05:7a:41:81:67:1d:f9:de:95:d2:28:1a:10:
c1:fc:f8:7d:77:82:d6:7c:9e:e6:9a:3b:76:c3:7f:
f9:c7:af:2a:3e:6f:24:03:b4:68:36:7b:6e:3b:b2:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:97:89:1B:DF:92:0D:38:98:8A:E1:7C:F5:A4:37:96:56:AD:B5:37
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:67:b0:8f:b1:82:ce:f5:b6:88:e0:8c:0d:6e:ee:e5:ae:74:
95:2f:08:da:f0:b0:79:13:64:5f:5d:d6:d6:93:a0:4b:4f:14:
d9:22:2d:7a:de:48:bf:43:36:d7:c5:d5:6b:53:4c:b9:5c:c0:
bc:f8:be:bb:ca:0f:77:17:36:da:33:03:d2:68:28:53:de:ed:
79:b4:ab:3f:55:11:6a:16:55:d1:d5:dd:c2:36:d6:07:32:ac:
08:b5:c5:3b:9f:5f:b9:8d:a6:12:aa:20:7d:b1:d4:74:67:e3:
f6:01:1d:72:94:39:23:9e:e6:f8:ed:a8:ff:f8:80:d6:24:be:
3e:58:13:13:97:0c:e0:99:25:17:51:9a:49:16:55:26:80:ea:
60:a6:d4:85:cb:ba:4e:49:9d:62:aa:10:a8:aa:e6:21:e2:85:
f8:c8:7c:24:8b:93:f1:5b:4f:db:aa:ee:35:c4:23:0a:8a:45:
a0:32:3d:ae:c7:24:53:2a:d0:7c:32:33:b9:94:ea:b8:2a:24:
10:c9:c1:77:5d:40:40:6c:a4:f1:0c:2e:f5:73:b7:44:74:b9:
36:e9:d5:45:51:bb:a7:ec:3c:00:49:70:88:1f:ec:28:08:53:
04:4e:1c:91:e5:95:1b:77:3b:53:47:c2:7e:b3:6a:9c:2d:28:
e9:5d:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:43:30 2025 by rpki-client