Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: sbi56Miw1rfoAPgewwaOD4GUZzaoEOH3011Y5GZ5ygY=
Subject key identifier: 82:9C:52:22:EE:16:E2:66:05:58:75:05:AC:3C:7E:B7:A8:32:29:C1
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 019848F773AEC4F9670C4CFABF429C492C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 23:00:33 +0000
Manifest this update: Sat 26 Jul 2025 23:00:33 +0000
Manifest next update: Sun 27 Jul 2025 23:00:33 +0000
Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: sQfxW5YZI4qIh1FUfYl5FGjjLt4gBLNE6tscS4fp8JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:73:ae:c4:f9:67:0c:4c:fa:bf:42:9c:49:2c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Jul 26 23:00:33 2025 GMT
Not After : Jul 27 23:00:33 2025 GMT
Subject: CN=829c5222ee16e26605587505ac3c7eb7a83229c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:4e:d5:7e:93:d9:33:fa:0b:27:47:96:e3:
f3:f6:38:4c:0c:cc:5e:99:24:5b:98:1b:e0:4c:e6:
ea:ff:0a:46:bf:56:f9:7f:a6:ee:27:61:57:3e:3e:
c6:b1:61:b4:fe:5c:62:3f:2f:88:2e:58:17:6d:19:
ff:e3:d0:9e:1b:c6:f3:37:19:eb:aa:b2:77:ca:aa:
21:3f:ec:41:f5:7b:70:02:53:32:96:e1:31:60:1b:
09:c7:f9:f9:d5:35:75:d4:54:32:5d:72:09:e9:73:
bc:ed:56:39:e7:c0:b5:e3:65:c0:4a:80:a2:6a:be:
0f:a2:33:02:18:da:bc:a8:06:7d:20:88:b9:e0:42:
91:2f:3d:08:b1:bd:c0:8a:af:6f:72:4f:03:0d:ff:
90:e7:9e:10:7c:b1:96:87:5b:db:d3:df:3b:4c:d1:
6e:27:21:96:47:4d:d9:b2:31:78:a2:75:72:46:e1:
ab:47:e6:b1:78:12:d1:15:ec:9c:30:4c:b1:8f:b4:
4d:be:99:78:3b:f4:c0:34:46:ba:dc:cd:c0:3e:69:
6c:9d:c1:5a:fc:f9:7e:62:ec:1a:e4:59:02:97:73:
53:28:97:19:29:8c:7f:17:b2:39:53:d0:fa:b7:d6:
81:bb:97:6d:27:36:39:98:60:b7:fa:9e:cb:8f:d3:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:52:22:EE:16:E2:66:05:58:75:05:AC:3C:7E:B7:A8:32:29:C1
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:01:c0:34:25:59:d7:4d:70:df:b8:4b:34:19:45:9f:b6:cd:
7e:40:fd:2b:9c:00:59:06:76:72:3e:07:7a:7e:13:ef:a1:f3:
b5:ea:3f:02:2c:ab:49:3d:a6:f7:4d:49:99:89:83:73:46:03:
ae:50:7b:ab:da:ea:ce:b2:0d:2c:27:27:b8:a6:7d:db:a1:46:
2e:2d:86:90:74:02:2c:3a:2d:0b:8a:09:c8:c5:f6:d9:09:94:
97:8a:02:3e:1a:46:d1:0c:be:99:8f:85:22:1e:f5:1d:c8:f2:
e6:69:b7:e6:1c:ff:53:f3:76:93:7b:0a:1d:b4:e3:39:5d:12:
b6:49:1b:96:8a:85:0e:49:7a:f6:31:e0:b5:42:a6:00:8f:53:
09:3a:70:60:28:1b:6f:54:44:dd:f1:9b:2e:de:af:96:a3:76:
1e:ca:55:97:2a:6e:c9:bf:e4:f2:38:51:37:9c:79:0e:cf:36:
d4:44:3c:1d:77:73:90:f9:84:0a:76:55:36:49:1c:e7:2b:60:
3f:1e:67:5d:81:97:4d:7a:3a:9c:b5:54:74:98:21:10:18:8f:
a6:a0:e8:9b:bd:c0:2f:76:a0:30:e9:27:80:e1:ec:8e:8a:36:
25:f0:8e:9c:79:f6:d6:b8:fd:ca:ff:61:25:b3:ac:38:82:b1:
40:4e:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:46:47 2025 by rpki-client