Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: x2QE+QJwxUxGphPwSqsWWIzhYCNMho+GVDU2kHZfgM4=
Subject key identifier: 98:5E:35:15:00:2C:10:89:68:2A:2C:BD:0B:7F:48:65:0C:AA:99:8C
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 01985344663F8708EC9BE6A17621EB081EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 23:00:48 +0000
Manifest this update: Mon 28 Jul 2025 23:00:48 +0000
Manifest next update: Tue 29 Jul 2025 23:00:48 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: zXPnxtXpNZfb+n5wHMt7eX4So2aQQegnGXq4ysbR8ps=)
2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:66:3f:87:08:ec:9b:e6:a1:76:21:eb:08:1e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Jul 28 23:00:48 2025 GMT
Not After : Jul 29 23:00:48 2025 GMT
Subject: CN=985e3515002c1089682a2cbd0b7f48650caa998c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:a8:8a:2c:f1:db:8d:aa:55:4a:2b:91:23:
43:d9:02:98:29:a1:78:51:09:c4:a8:70:7d:ee:c0:
e8:8f:72:1f:7f:8d:61:dd:5c:c6:9b:8a:e3:c3:51:
12:aa:0e:42:80:b1:c9:fa:cb:e0:86:63:bd:60:bc:
fc:94:8d:e4:7f:0a:b4:89:2a:a6:d0:8e:a3:45:d8:
4d:c8:7e:b2:1a:3a:6d:bb:7c:4e:54:18:24:51:62:
89:07:69:bf:c5:aa:47:1c:a6:08:b6:8c:58:ab:c4:
82:05:07:c6:2c:e8:d3:0b:21:80:7b:3a:c0:1d:bc:
5e:7f:cd:a7:6d:a1:11:c3:12:7d:67:ce:f7:29:78:
3a:a6:56:01:f1:56:d1:8a:92:fa:90:5d:26:2a:95:
f7:c5:2e:d2:80:90:9d:f6:ee:13:95:e4:03:df:c2:
06:14:65:3f:d6:a2:42:d1:73:db:91:a2:8d:2e:be:
0f:ec:ae:b4:92:4e:f8:f0:8c:f7:85:e0:b5:36:b9:
f5:65:97:22:14:0a:e3:79:35:82:2b:42:28:07:e5:
18:3f:68:a6:bb:dc:eb:54:98:fe:51:3f:c5:a8:81:
2a:9c:69:68:cf:14:bb:96:6e:49:d3:b3:2b:5e:55:
dd:ec:7e:f2:ab:b3:17:85:a6:0a:fa:4c:47:a0:6c:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:35:15:00:2C:10:89:68:2A:2C:BD:0B:7F:48:65:0C:AA:99:8C
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f8:35:e6:c5:97:45:10:1c:9c:67:bb:f3:5a:9e:97:72:fd:
72:60:4e:60:89:d2:63:2f:8a:34:fc:90:0c:8a:69:49:10:f8:
02:9b:b7:8b:27:7a:da:a6:24:0a:c5:7b:d3:90:0b:72:f6:26:
17:f3:78:e6:53:43:f3:ea:2f:ed:13:cc:49:0a:4c:ad:a7:79:
28:86:e5:3d:a4:c2:53:91:56:52:f8:d5:37:43:24:94:21:6a:
c3:ba:85:44:55:44:7a:69:b8:52:d0:f7:80:e0:dc:02:6d:d5:
c9:3d:80:98:9f:7a:db:22:c3:55:07:61:cc:a4:f6:57:ba:c6:
13:0b:72:a7:97:4f:9b:33:30:1d:20:8a:64:9f:7e:42:e1:16:
99:73:99:41:04:47:90:21:d5:85:a0:c6:7a:c5:20:7c:7c:dc:
26:ab:07:6c:e0:07:69:fb:29:a2:fb:54:c0:f7:7e:43:7f:59:
b4:66:ed:48:a6:99:52:7f:2e:e3:88:7c:6b:0d:64:9a:83:33:
43:11:f6:60:d3:ea:ad:29:99:4b:9d:5c:20:a0:91:0f:11:a0:
45:e2:f3:b7:ee:23:8b:5a:ab:76:8b:cb:33:f2:7c:37:cf:e3:
c3:7a:13:16:eb:2f:08:f2:a6:9e:b2:96:48:f4:ba:80:e1:9d:
0a:a1:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:40 2025 by rpki-client