Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: oQdsFIOumxkkJA0uMuTC7yrqnbcSACrvIAhSTYN5JqQ=
Subject key identifier: EC:43:AA:C1:34:22:77:83:D3:C3:EE:53:BC:D3:61:48:16:63:7D:A8
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 019921B1B9B7F8CBEA0AD5C585850E0B74B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 074F
Signing time: Sun 07 Sep 2025 01:01:59 +0000
Manifest this update: Sun 07 Sep 2025 01:01:59 +0000
Manifest next update: Mon 08 Sep 2025 01:01:59 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: HZvt9S6rzwxnXjkp/+aDUJdMqOyk7RxSjYKd5oV6Zco=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:b9:b7:f8:cb:ea:0a:d5:c5:85:85:0e:0b:74:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Sep 7 01:01:59 2025 GMT
Not After : Sep 8 01:01:59 2025 GMT
Subject: CN=ec43aac134227783d3c3ee53bcd3614816637da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:7a:82:23:c1:63:34:20:57:40:d4:2f:15:
43:b1:33:ce:ee:34:77:e4:37:9b:a0:0f:c5:35:24:
7b:65:14:1f:d1:0a:c0:4e:68:a6:c6:5c:69:9f:02:
47:80:41:35:c4:25:79:7d:40:d5:8e:39:2c:e7:4a:
c5:0e:de:70:50:45:99:c1:5f:71:12:4c:5f:0e:32:
6c:c8:5b:ab:8d:1f:77:41:24:79:35:ee:91:fc:88:
96:26:47:4c:b0:a2:88:ec:e4:6b:04:9f:bb:ff:fc:
c4:15:ac:9f:ce:f0:92:2d:eb:e9:20:ad:24:b9:4e:
ca:07:55:1d:cb:4b:91:cc:59:95:cd:9e:95:d0:06:
4f:47:ac:d2:f7:c9:ae:47:8c:57:14:91:2e:ad:4d:
ab:d0:c9:e6:02:a7:d7:1a:ea:04:2c:d6:1a:62:b7:
54:ae:91:8a:f6:38:b9:a0:89:4c:f2:fd:26:0d:79:
01:7f:f5:4b:b4:e9:64:fd:4c:8e:f1:1a:1b:b3:8d:
05:d0:94:98:ea:6d:c2:5d:0b:3f:89:5b:ac:df:b9:
33:7e:41:44:de:98:5d:1b:cd:a8:f4:b6:58:15:76:
07:69:03:c5:43:f5:dc:30:21:a2:61:51:48:cf:e9:
ba:56:82:d0:56:62:31:86:7a:95:c1:1d:4b:94:c6:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:AA:C1:34:22:77:83:D3:C3:EE:53:BC:D3:61:48:16:63:7D:A8
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4a:eb:22:ce:46:1d:8a:83:80:6b:70:01:7f:6a:b3:23:2a:
96:43:f0:17:ca:fe:7c:0f:d4:b3:62:ad:ac:61:eb:8d:4f:d5:
66:d3:05:bd:44:60:84:68:f9:43:4f:f6:ae:8f:fc:50:83:d0:
b6:db:3f:6e:4d:59:f6:97:28:de:3f:a4:b6:17:c1:e1:b4:f0:
77:61:62:a2:94:fb:0f:f1:4e:69:bb:bd:c6:30:55:34:89:3b:
a1:8b:1a:c8:0c:8d:ea:57:5d:32:4c:d4:2d:52:9e:73:cf:df:
f8:f6:f7:f0:e8:df:41:93:0a:d5:bb:9c:79:49:bc:c0:c3:6f:
34:db:f1:6a:72:48:fb:c3:a4:92:6d:d1:66:a2:4b:2e:ef:e7:
f1:d9:1c:0a:03:70:6e:50:fb:15:47:c2:c1:81:c7:74:8a:67:
ac:26:28:e7:cc:d3:46:09:9c:c6:5b:69:f0:17:a3:63:aa:a8:
ef:e1:24:d2:eb:f7:ea:82:eb:61:c6:57:3b:12:7b:3e:b0:b9:
a3:7b:93:2b:2d:58:c2:a5:e3:4d:a8:52:0f:55:46:15:19:0d:
5a:b4:02:51:d5:c3:df:40:1d:4b:d7:1c:7e:92:47:4f:1c:7e:
2a:44:bb:a2:4b:08:7a:f3:fa:61:00:10:35:2a:22:52:47:74:
4a:4a:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:30 2025 by rpki-client