
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: TYVWDr3UHse0Pq6GFhC0nHCnYrMjn/X662vnFZypF0U=
Subject key identifier: C1:9E:E5:7D:7C:07:89:83:C4:5D:B0:3D:96:BB:B7:58:E9:5A:6F:98
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 0198518C4AE6382ECC3178802673FC39E751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 132F
Signing time: Mon 28 Jul 2025 15:00:05 +0000
Manifest this update: Mon 28 Jul 2025 15:00:05 +0000
Manifest next update: Tue 29 Jul 2025 15:00:05 +0000
Files and hashes: 1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: l9fJpVpVAraGBSYD1Q+HF/Mj+kYgar41jfsEi5KqiK0=)
2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:4a:e6:38:2e:cc:31:78:80:26:73:fc:39:e7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Jul 28 15:00:05 2025 GMT
Not After : Jul 29 15:00:05 2025 GMT
Subject: CN=c19ee57d7c078983c45db03d96bbb758e95a6f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:83:76:fb:c3:bf:95:4d:93:1a:c3:13:67:
2e:fe:7a:43:f0:8a:76:44:84:83:51:dc:83:61:b4:
72:bb:a4:19:cb:f9:a3:08:11:ab:1a:29:ae:2a:87:
a3:33:8a:3f:a3:53:96:20:79:2e:8f:8a:c4:ed:05:
80:e9:ae:d4:c2:6e:12:a7:bd:2f:bf:78:18:c4:6c:
c1:cd:5e:7f:a9:51:50:0b:91:19:f7:49:63:1e:d3:
2b:49:ae:97:35:84:29:e0:8c:25:9f:fa:a1:e8:40:
4e:80:75:62:5b:37:30:c6:c4:dd:ae:49:ba:d7:94:
c4:8b:7d:bb:ef:01:2f:42:ac:32:ba:b2:88:42:fb:
66:57:37:8e:0f:aa:7d:0b:e6:27:af:e1:d5:d0:47:
f0:53:5a:4c:2c:c2:49:c2:f0:68:ff:7f:ea:91:d1:
82:52:21:2a:75:3c:9a:12:00:28:eb:1f:38:22:60:
c3:a3:e9:5b:25:c7:58:0c:cd:41:82:ae:26:b7:9e:
bd:41:35:62:a9:17:1c:6f:3d:fa:c5:78:f0:e1:5c:
d9:e2:8b:eb:d3:2c:66:45:e5:e8:5d:17:ad:50:0d:
31:c9:dd:c7:80:0a:d2:a9:34:94:52:3e:74:02:2c:
bd:4b:09:c1:59:e2:36:d6:b3:b6:00:9b:d4:9a:42:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:E5:7D:7C:07:89:83:C4:5D:B0:3D:96:BB:B7:58:E9:5A:6F:98
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:62:09:bf:d5:89:96:bb:42:23:3e:a4:63:f5:aa:57:d6:05:
54:f6:8a:d1:1f:f7:1e:50:18:62:47:18:bf:51:62:cd:37:56:
05:90:af:11:8a:7c:70:67:00:5d:4b:80:dd:49:55:8b:57:fc:
81:c0:31:e8:25:3d:da:d7:34:4a:0e:55:39:2f:f3:ee:1f:6d:
db:97:41:3a:b9:64:00:04:a5:08:5e:8d:1c:81:b7:26:77:50:
ef:d9:c6:b7:76:09:08:82:2c:51:54:16:01:6f:0c:15:9b:ba:
2c:7d:fc:98:75:0d:a8:4c:43:4c:4f:c7:ea:ed:56:b2:a1:55:
3e:38:d8:2e:50:36:62:1e:35:74:68:f9:9a:c1:e7:64:a7:a5:
c0:a9:d6:55:85:bd:78:a6:a4:61:7a:57:a1:53:fb:d6:3f:f0:
4a:41:7e:3e:58:6c:af:9a:3d:7a:b2:34:58:f3:44:42:cb:b6:
de:53:ec:f3:f9:d6:dc:46:3c:33:bb:e0:20:0f:0f:9f:e7:ae:
29:db:a1:29:3f:32:6a:3a:06:4e:81:de:ae:95:ad:b6:14:15:
45:bd:a3:8b:60:27:9e:6e:37:f9:57:6e:23:dd:f5:ca:93:74:
ef:b0:d9:8b:da:15:59:f9:d3:07:3a:93:81:ad:b0:37:5d:64:
bf:ac:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:21:21 2025 by rpki-client