Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: 9YXOLxdq4vZXrw1+nQCS1MCsSkMkGWyiJROm1uzsFyY=
Subject key identifier: 98:C3:20:FE:D8:41:94:7F:FB:5E:4C:C5:96:E9:6C:A8:35:E3:A8:09
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 019A71B81D75BDEEB9817BF28BB0A45D4DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (hash: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=)
2: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: MsCPmzpD41d1QXc7mY3jjuPtMa69mfjocguCe7G3qdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1d:75:bd:ee:b9:81:7b:f2:8b:b0:a4:5d:4d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=98c320fed841947ffb5e4cc596e96ca835e3a809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:77:56:ef:0b:15:09:ba:7c:fa:7d:bf:ac:
f9:ee:01:56:66:bd:17:fa:8b:f6:33:8a:4f:4d:b5:
7f:07:54:6b:b8:f9:d3:21:20:8d:fb:66:97:49:e9:
1a:07:71:df:bc:3d:9d:3f:8c:cd:6a:d5:e8:66:3c:
b0:f7:57:ab:b2:63:ff:41:5b:e2:f8:b4:a7:ca:60:
5d:c6:a4:3e:87:5b:e4:60:f9:2f:6a:dd:76:69:53:
01:ea:18:cf:ec:0e:21:10:b7:8c:01:65:c6:2d:51:
f2:36:d7:a5:86:62:e4:93:87:26:e5:57:13:b2:aa:
1d:d3:d2:d6:c3:a4:55:7c:63:c7:58:28:8f:b8:82:
08:1a:89:c2:96:9d:4e:64:4a:2b:95:bc:5a:37:27:
1a:e2:e3:f1:18:8a:09:ba:a7:ca:68:d5:75:9a:a9:
57:4e:ec:2b:ba:cd:af:d6:5f:20:82:bf:c0:e3:cc:
76:e6:44:43:a3:0d:99:02:3f:fe:e3:f6:17:e7:29:
d7:ba:59:d3:dd:1f:96:3b:53:c5:14:40:8d:38:35:
0f:07:7e:2a:65:2a:a0:ad:7e:43:26:c1:66:10:07:
1a:3b:d6:32:a4:de:a5:ef:cc:b4:7d:76:88:84:0f:
a1:43:75:5d:e7:a8:52:a4:47:91:9d:f2:84:f7:fa:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:20:FE:D8:41:94:7F:FB:5E:4C:C5:96:E9:6C:A8:35:E3:A8:09
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2a:59:0f:18:2b:aa:16:c3:be:cf:55:ac:93:14:e9:f3:e1:
c4:12:1f:dc:a4:83:d5:7b:48:98:83:95:11:de:34:53:cc:a9:
d4:90:3b:fb:5f:65:4f:fd:5e:ba:93:76:04:8f:8c:7c:c8:27:
e8:06:93:cf:b6:e7:39:9c:f4:b9:c9:6a:09:7d:28:0a:76:e9:
74:98:a2:0b:58:13:e2:af:ff:ff:d0:e6:ce:82:ba:2b:f1:dd:
34:f8:6e:71:e9:76:19:04:f4:79:39:82:58:83:9e:3f:5f:c5:
b7:52:5f:96:28:cc:6b:9a:9e:2d:e7:47:f2:3c:d4:19:6e:ed:
73:ad:5f:8e:a9:7e:5e:0b:99:8c:fc:54:74:6c:c9:9d:4b:17:
65:49:b6:ad:63:be:5f:8e:51:b4:e0:9a:1e:ad:e9:39:19:5c:
33:64:82:be:8b:1d:42:3e:10:84:90:aa:0a:77:27:ad:8f:c6:
22:58:3e:67:4a:cc:ea:3f:59:e4:40:4f:7c:39:df:ae:b8:b6:
f6:06:33:9a:a2:78:3a:4b:ac:e6:dd:f0:d5:05:9e:f4:0d:39:
2a:84:0e:e7:79:fa:ed:47:f0:6b:9d:26:cb:ae:a5:ed:4c:c3:
29:b3:4e:7a:94:ab:34:7e:a1:4f:14:88:e1:0d:6f:9e:ee:4b:
18:01:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:10 2025 by rpki-client