Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: ZoqU+7dTa6VsSuOs+aFXEr9eAs1oojIw9P+iujLXC/4=
Subject key identifier: CD:58:86:26:8D:57:C6:F9:96:B5:30:20:E8:35:6F:AF:56:4F:80:7C
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 0199228C5A547970765F45A1743DFB1CBD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0A9F
Signing time: Sun 07 Sep 2025 05:00:47 +0000
Manifest this update: Sun 07 Sep 2025 05:00:47 +0000
Manifest next update: Mon 08 Sep 2025 05:00:47 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: 0p1rvQwVRw4885PDHEh5Uuhy0bkJ53551s5mFy0GANI=)
2: MK6Wt26ubZnx8uPGofYFajPlEuM.roa (hash: pNoc6zxMnN0pQF1kB42eiM3UzngOuAJOl2Ggh4EWIBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5a:54:79:70:76:5f:45:a1:74:3d:fb:1c:bd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Sep 7 05:00:47 2025 GMT
Not After : Sep 8 05:00:47 2025 GMT
Subject: CN=cd5886268d57c6f996b53020e8356faf564f807c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:6f:ad:d1:08:eb:27:2e:7d:e4:74:64:77:
97:21:43:f0:ab:49:b5:84:a3:7c:0c:33:64:ee:ef:
f8:65:14:16:51:49:2e:13:76:ec:45:50:35:aa:26:
ea:2c:bd:3b:d8:37:f8:3d:8a:54:41:ab:f3:ed:4e:
f5:d8:a9:95:3f:5b:16:e0:55:c9:fd:28:cf:cc:07:
ca:a5:36:a7:3f:ca:44:4b:df:cf:ca:0f:d2:af:c4:
46:db:f0:7b:34:74:78:f5:02:12:8d:fe:a0:fb:68:
6d:3a:3d:97:91:33:a7:0b:d9:00:b5:28:b3:49:d3:
95:c5:6a:9c:bb:16:e0:8d:43:34:fd:00:be:7b:cf:
e7:ad:eb:34:64:a0:3e:f9:e5:54:64:5e:34:35:27:
64:1b:f5:b7:99:d6:d1:12:f0:e9:a8:63:fc:4d:f8:
39:d6:37:1e:e4:ac:1e:b1:10:f3:b4:7c:5f:a2:a4:
1e:a8:bd:04:59:5d:3d:0e:75:23:84:47:ec:bd:a3:
df:df:72:79:d4:d6:cb:1e:24:21:f9:19:7e:ad:11:
57:28:df:82:3a:52:fb:e9:96:7c:7b:e6:8e:7a:00:
fe:36:cf:21:b5:b5:93:2b:d8:19:55:8e:35:44:af:
f0:f4:b5:0d:59:57:00:ce:46:86:7f:38:33:87:ad:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:86:26:8D:57:C6:F9:96:B5:30:20:E8:35:6F:AF:56:4F:80:7C
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6f:bf:a5:21:b2:74:54:91:e7:d9:d1:9d:c0:6a:94:52:80:
55:e8:4a:e9:ec:8c:b7:34:33:0b:e2:b7:07:3e:29:38:bd:0f:
36:27:0b:a7:53:14:f6:dd:6b:21:df:ab:8b:86:5b:66:dd:eb:
28:1d:11:81:63:db:d6:ad:a8:33:e8:ad:13:88:62:b3:9f:b2:
32:dc:aa:e6:81:ff:e5:8a:ed:92:98:45:fe:ec:c5:7c:bb:31:
df:53:f7:50:83:c7:62:62:02:e6:7b:45:65:ef:08:ee:23:29:
e0:b7:8c:ac:a4:5b:ce:05:23:cb:86:af:91:75:6a:15:86:df:
d6:1b:87:ed:c0:88:d3:8e:37:4d:67:6a:c0:eb:3b:d6:bb:3b:
65:94:63:31:ca:5e:0b:96:c7:40:12:4c:18:62:54:31:2a:00:
f1:17:23:4b:7f:a4:1b:db:b8:df:96:44:6c:f6:ae:61:3b:9b:
c1:68:04:a7:0e:cc:39:ad:4a:39:e7:86:eb:f4:93:a2:59:3d:
57:e6:e0:4e:49:95:f8:41:0b:85:9c:d8:b6:44:f4:b0:f0:c4:
ab:72:6f:7f:16:9e:9d:21:bf:96:5b:22:30:a8:2f:39:da:83:
cf:7c:be:da:f4:2e:95:8d:b9:c7:ec:f4:4c:11:3d:40:b6:3b:
36:26:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:31 2025 by rpki-client