Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier: brtLzhB+ZuEOeAQ5qU2NcrkvY4QXHdq1FF5z2mhN0zc=
Subject key identifier: 6A:DD:CF:67:3A:41:C8:45:80:04:E1:43:D0:45:A3:25:E0:05:E4:51
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 0199239F559BC04285800ED9A18CF65E8614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:01:08 +0000
Manifest this update: Sun 07 Sep 2025 10:01:08 +0000
Manifest next update: Mon 08 Sep 2025 10:01:08 +0000
Files and hashes: 1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: tRjcUWPJVuwxP5rAO8Cmt7LtRYVFRQd3GuSAl2f+K/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:55:9b:c0:42:85:80:0e:d9:a1:8c:f6:5e:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: Sep 7 10:01:08 2025 GMT
Not After : Sep 8 10:01:08 2025 GMT
Subject: CN=6addcf673a41c8458004e143d045a325e005e451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:84:76:41:e0:d0:4a:79:6e:d0:c2:31:2d:
9c:0e:9e:ea:5f:0c:e7:7b:f2:b2:38:60:12:9e:51:
69:26:a4:08:97:54:f6:fe:34:0e:b0:23:a7:0d:80:
30:96:4d:f7:17:9a:5c:4e:1c:e8:d0:60:38:ce:d8:
14:63:32:ae:8a:1b:ff:54:32:d4:4f:91:e2:43:56:
62:79:a3:02:88:97:04:6e:8a:a0:a7:3e:25:24:75:
71:23:24:9e:c7:f9:c7:2a:98:7b:1f:5c:b8:76:99:
06:c3:b2:50:0d:6f:6a:1e:53:c9:64:05:45:72:6d:
2a:a9:45:44:5d:8d:3b:b9:1b:f2:92:fb:87:3a:fe:
6c:be:be:16:0f:1b:12:b2:f0:46:f3:d6:b0:c7:91:
1f:84:60:da:ac:0f:b1:f7:23:2c:be:14:87:61:96:
7d:0e:57:92:81:1f:a3:f0:59:4c:e2:74:13:1b:44:
5c:dd:35:44:87:7a:11:c7:eb:32:c7:82:7c:28:4f:
7f:11:f2:f8:bf:0c:f5:bf:c3:0b:6a:92:15:c1:fe:
91:f1:ee:44:11:57:5d:03:94:c1:5c:d8:f0:f6:77:
a2:c8:4b:2d:22:b5:72:ee:03:02:37:3d:46:59:5d:
db:44:c4:8d:89:43:4f:15:1f:93:9b:85:f6:97:7f:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:CF:67:3A:41:C8:45:80:04:E1:43:D0:45:A3:25:E0:05:E4:51
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c9:e3:f7:98:7a:d6:02:f3:f8:f9:a9:8e:1d:7e:5a:02:99:
df:a8:42:67:b1:10:91:58:33:9a:38:e9:78:0a:52:e7:c7:8e:
bc:04:39:50:eb:6a:52:c1:fd:09:9d:9d:fb:62:02:9c:be:cc:
70:7d:99:3c:1e:75:f7:60:d9:6c:ca:a9:5b:c6:2a:4d:75:c5:
1f:05:05:02:12:ec:36:39:d5:ed:b1:b1:62:68:e6:4d:37:0b:
a1:c0:0f:f6:16:a6:3e:14:11:87:4e:13:6e:57:45:94:08:d6:
fb:17:e0:8b:db:59:fa:54:0b:24:29:12:b7:8f:b2:67:77:7c:
ab:f9:3d:19:c0:0a:ee:79:0a:e8:1c:11:47:37:ae:66:c5:03:
24:d1:ad:1e:eb:2c:5f:4a:c6:df:e6:b4:40:4a:fa:46:53:ec:
69:39:0b:bb:13:bf:74:eb:94:aa:bd:2a:95:d0:fe:94:14:25:
44:08:a7:04:2a:37:39:a4:a7:96:6a:d2:84:79:89:63:9d:f7:
6a:e5:e6:72:55:59:81:b6:50:22:5d:24:c4:6b:d6:17:ec:a3:
4a:3a:e3:bb:10:73:8e:00:f4:d5:9d:bc:33:ad:75:52:7b:24:
dd:7d:72:df:65:48:b3:69:19:00:95:d1:fe:64:00:46:c9:fa:
c3:7a:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:58 2025 by rpki-client