Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: XOS2n3ZYcMXuu5Rx67kP+hWcKunaYPY7kfIZ1PDwMLE=
Subject key identifier: 46:CA:67:9B:49:F7:42:26:19:CD:3D:AD:3F:4C:4E:52:10:60:CF:24
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019921E7D7DC7076BB70A3089243DF735648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 02:01:05 +0000
Manifest this update: Sun 07 Sep 2025 02:01:05 +0000
Manifest next update: Mon 08 Sep 2025 02:01:05 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: gPRWxwTOQxvNysdMWTwWDtYvYHkvw7tAWYxCUFhuW+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d7:dc:70:76:bb:70:a3:08:92:43:df:73:56:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Sep 7 02:01:05 2025 GMT
Not After : Sep 8 02:01:05 2025 GMT
Subject: CN=46ca679b49f7422619cd3dad3f4c4e521060cf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:a4:95:f1:2a:dc:90:aa:df:31:31:37:e7:
85:17:45:72:14:fc:f6:66:15:7a:59:ae:af:87:be:
2d:e1:59:bd:95:d4:85:13:59:16:db:9e:2e:c5:bd:
dc:e5:55:48:a8:20:ad:e2:5e:be:19:7d:7e:05:e1:
86:e4:50:21:dd:b0:30:6c:94:41:60:aa:51:cc:d5:
f4:18:5c:07:a0:12:97:8e:18:1c:d5:18:e7:56:6a:
0f:f1:96:01:0e:7e:b6:39:13:82:2f:d5:ac:4f:3f:
17:24:6e:5c:9b:6e:66:2e:49:46:bc:e2:48:ea:6c:
10:3e:e3:ff:94:42:fa:f8:96:a7:41:9e:ce:a2:72:
9b:47:eb:71:da:fa:19:d2:a5:ea:f2:b2:cf:0d:57:
de:37:7f:5f:99:63:ef:3e:8b:c4:76:56:12:09:f2:
83:9c:6c:72:1f:57:45:f2:99:04:ea:cf:73:77:aa:
5e:17:3b:5c:44:8b:b1:cf:c0:e1:67:e7:da:03:82:
bc:01:9f:de:5e:20:c7:84:e8:1b:ce:d0:45:47:2d:
95:17:e2:15:20:7b:be:ca:ec:45:8e:4b:9d:ba:5c:
06:9a:5f:4b:c8:68:ca:aa:c3:d0:2e:40:97:e1:1e:
8f:1d:e8:41:21:de:fb:26:7e:d0:ba:b1:ca:41:7d:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CA:67:9B:49:F7:42:26:19:CD:3D:AD:3F:4C:4E:52:10:60:CF:24
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:54:94:ad:78:7f:aa:fc:47:30:95:0e:6d:5b:05:af:7b:ae:
0e:14:d5:ce:ae:3b:83:41:d2:ee:18:1c:da:8c:3b:35:e5:36:
8f:92:86:0a:b9:c1:15:91:7c:8b:76:11:fb:ca:98:19:3b:01:
a0:b4:ae:36:f0:90:a6:09:5d:32:74:0e:cd:8f:fa:a2:b7:05:
e2:0f:b1:aa:ee:3f:ad:d3:74:5f:73:e9:13:76:80:f8:cb:82:
63:a4:60:96:ed:46:6d:c1:73:80:e3:ea:57:dd:98:a6:53:42:
4f:9b:a8:cf:8b:12:f2:0d:3c:c5:ee:33:d3:f7:92:3f:f8:d2:
4a:b9:a3:47:90:0e:5a:b4:78:74:d5:80:66:2c:f7:73:e9:81:
b0:c1:d0:2c:47:85:5b:48:60:ce:9b:8e:72:8b:62:4c:ab:86:
1c:ef:2e:2a:0e:9a:3c:ec:dd:ef:8a:5d:aa:ef:11:51:c9:b2:
3c:10:a7:3d:06:98:cf:f9:45:9f:fd:d3:34:ac:d0:db:43:f1:
e9:88:06:a6:8f:22:51:a6:7c:a7:0d:2d:5a:78:33:33:19:64:
28:e3:67:5b:bc:74:14:cf:6c:3c:60:cd:d0:30:8d:df:16:f7:
76:dc:e4:b3:5b:8e:8a:2e:50:a4:90:2b:4b:8e:62:66:66:c7:
a4:d9:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:02 2025 by rpki-client