Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: RIzd1yOK8H73T35iSHQrBywpuP2+6LH1edo91yS6bsE=
Subject key identifier: F0:8B:19:7F:10:B2:DB:1A:05:DA:80:B4:A4:B3:63:66:E9:B3:EF:8E
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 019932A3B39AFEE19F992FB1821AB771911F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 1678
Signing time: Wed 10 Sep 2025 08:00:12 +0000
Manifest this update: Wed 10 Sep 2025 08:00:12 +0000
Manifest next update: Thu 11 Sep 2025 08:00:12 +0000
Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: 5bBL706pftu2eg1Rom/jlS39Im8r7w6JhJchH83T6w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:b3:9a:fe:e1:9f:99:2f:b1:82:1a:b7:71:91:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Sep 10 08:00:12 2025 GMT
Not After : Sep 11 08:00:12 2025 GMT
Subject: CN=f08b197f10b2db1a05da80b4a4b36366e9b3ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:5e:99:25:d2:7a:00:72:9e:64:1a:eb:45:
9a:f5:3f:3d:c7:52:c8:85:df:16:fc:45:42:71:f0:
c4:af:62:68:55:ae:b5:d4:75:99:22:81:61:68:17:
70:55:44:fc:eb:65:23:95:1c:f3:85:2d:64:10:18:
2e:20:67:2f:26:d5:f4:96:32:88:52:33:e0:0c:22:
19:b7:3d:ad:7f:06:7a:f8:92:6e:d2:e0:2f:11:cd:
de:31:53:20:16:64:4f:f7:55:f1:bc:8b:a1:95:60:
d7:75:81:0d:67:a4:78:df:e3:4a:4a:ee:88:eb:1f:
29:f9:c6:7d:af:8e:32:b9:d9:3d:36:9b:f8:cc:b1:
f6:9a:50:a4:e7:94:ab:e5:6a:91:63:27:bd:ea:56:
51:f7:80:e0:4c:82:d3:69:d2:8f:10:4f:e0:2c:88:
65:e6:be:1b:af:97:6e:10:07:1d:a8:b9:7a:ef:ac:
cb:5e:e7:ae:c6:65:3e:8f:21:46:61:d1:89:21:65:
c7:13:b9:35:db:f5:49:07:13:cd:af:d1:9e:1b:97:
39:58:89:bd:a8:65:a7:e8:57:c3:2f:a7:cd:c7:10:
5c:10:84:5a:6c:04:cb:88:83:88:a1:08:44:36:49:
d8:fa:e0:d5:a7:db:ce:00:ec:32:8d:4f:c4:8c:33:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:19:7F:10:B2:DB:1A:05:DA:80:B4:A4:B3:63:66:E9:B3:EF:8E
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c2:7a:d1:27:4f:44:d6:1d:ff:c2:52:56:e8:0e:5a:fa:6c:
48:e2:f0:77:6f:4a:0c:3e:7f:7c:8f:c6:dc:41:71:00:94:2e:
ca:30:3b:bc:c4:c1:01:10:4b:f1:95:7b:1b:56:42:ac:02:df:
6a:cc:e5:0e:24:3c:1b:b1:b7:cb:e9:fc:11:22:36:0e:ef:92:
58:8a:a8:c5:6f:37:8b:76:5a:5f:ba:2d:26:4c:61:f3:62:51:
8a:13:5b:b1:2d:dc:b1:a4:3a:e1:8d:a2:01:f9:62:b4:59:b7:
4b:d8:c1:30:ef:5f:b0:51:fc:57:d5:75:74:26:8c:1d:3f:6b:
3e:b8:92:5f:2b:47:5b:50:5a:b7:cc:1e:ae:0d:57:65:25:b5:
66:5b:6f:e2:9b:de:40:f9:42:68:0f:a6:ae:d8:72:25:db:a4:
4c:3b:04:6b:9e:37:b0:65:f0:29:1f:4c:f3:3e:17:f1:b3:c7:
a2:b0:ac:8d:ab:76:c7:49:81:d8:3e:5c:9c:9b:50:e5:f3:ff:
42:7d:86:80:61:4e:74:27:ff:5a:53:22:d6:f9:81:3e:62:10:
98:f9:a3:f9:cb:6b:2b:6b:35:ab:dc:ce:1c:54:f0:ff:08:0d:
7e:6d:41:f9:6c:31:ec:2e:66:06:98:05:f3:22:63:e8:98:04:
11:a7:54:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:23:06 2025 by rpki-client