Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: K8P8mHIetRK2wGfcEL0wXpgB88sRqJ7mJthcT2xakiY=
Subject key identifier: 02:22:F8:E3:CC:8D:B6:AC:C5:52:55:65:46:20:B8:C2:5A:13:78:28
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 0199282119369F3E1AB1A3509B76DF712A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 08BC
Signing time: Mon 08 Sep 2025 07:01:21 +0000
Manifest this update: Mon 08 Sep 2025 07:01:21 +0000
Manifest next update: Tue 09 Sep 2025 07:01:21 +0000
Files and hashes: 1: 4ZVhrpuB1IHBXfe6fTnFzmbNef0.roa (hash: FuraICrae+dlC4EwK8Mlwdgne0MzMhtiCSQ/Z77/tTA=)
2: 5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa (hash: UnXYlFiyJBM2cbEBf2cCAcTXlYLcyD51tGVhPbgsuJM=)
3: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: 12IlgFn5UVGVOaZ/wa/LQDKQqukNvO+YVgSjqRZBD7U=)
4: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (hash: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=)
5: x-3D4SyWxTWtE8fU6h7K761mso0.roa (hash: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:21:19:36:9f:3e:1a:b1:a3:50:9b:76:df:71:2a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Sep 8 07:01:21 2025 GMT
Not After : Sep 9 07:01:21 2025 GMT
Subject: CN=0222f8e3cc8db6acc55255654620b8c25a137828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:d3:3c:fa:38:6a:e5:0f:1b:5c:4d:b4:fe:
17:3b:a3:da:3a:f6:cf:21:d0:53:ae:42:47:49:37:
57:5b:22:89:4f:fb:c8:22:36:60:1d:22:c1:96:83:
06:1d:89:e8:24:14:ef:0a:21:5e:ee:20:4c:c6:a7:
cb:0d:f2:0c:55:f6:b8:67:17:a0:e7:4e:9d:e8:ed:
17:2b:ac:9b:3b:d2:7b:45:dd:58:c6:7e:50:b1:84:
0f:41:bf:11:7b:f9:a0:9a:ba:b5:4b:a5:a7:10:21:
82:50:eb:29:16:e8:35:88:ae:0c:e1:1c:7c:f3:ae:
b8:74:32:ff:fb:67:59:06:57:12:7c:a8:5a:ee:7a:
86:23:40:1b:6a:cc:82:35:67:2a:26:ff:ac:37:c4:
65:89:7f:9c:50:cf:e4:62:f4:2a:19:37:28:03:c0:
c4:7b:15:6a:ba:99:e9:f6:6b:43:6f:ff:86:5d:07:
d8:aa:18:bb:e8:6a:75:ae:7f:58:1a:f2:dd:05:f1:
92:22:ee:be:04:6b:a9:ec:67:c3:3b:cc:65:d3:bb:
bc:fc:73:c5:a3:77:6d:71:47:f9:04:99:01:32:16:
7b:89:6a:bf:b4:91:d5:d6:70:25:3b:9a:76:b8:4e:
80:b5:eb:4a:b4:45:eb:2e:b8:ce:51:89:61:67:f5:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:F8:E3:CC:8D:B6:AC:C5:52:55:65:46:20:B8:C2:5A:13:78:28
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e5:b2:b3:84:70:1b:cc:b5:1b:51:52:3f:ca:5f:19:2c:93:
49:ee:4e:82:5c:1f:1e:51:d9:6c:29:9f:de:a2:5f:3e:36:22:
93:89:4a:3b:a2:36:30:59:31:86:36:9d:cc:58:64:b3:13:79:
88:65:7d:d5:ce:24:2c:9d:b6:cc:5b:3b:fd:5e:0f:d7:b1:f5:
83:f6:95:00:2f:b2:d7:ba:d2:8b:66:04:86:a6:8e:14:09:8b:
48:52:f3:78:fc:c8:e3:80:69:e1:f8:e2:26:a8:99:8a:1d:44:
37:4f:17:ff:45:99:1b:aa:01:86:72:b6:2b:88:de:d3:73:73:
46:0b:a5:45:94:5b:d6:fe:98:5d:cf:a4:36:62:df:78:73:a4:
99:d3:a9:82:8b:0e:c4:0b:e9:dc:16:4c:52:39:2c:85:5c:83:
e4:b8:9e:33:67:cc:1f:f2:bf:d2:05:27:a0:4a:59:84:dc:74:
89:4f:15:fc:fb:00:50:bc:5c:ba:35:f5:4b:3d:c1:1a:33:4c:
71:e0:fc:7d:3f:41:cf:13:89:38:bb:14:4c:0c:15:48:dc:d0:
d8:56:3f:19:e8:ee:7f:3f:39:6f:74:46:f7:87:6b:9f:45:a0:
71:c5:12:bb:c9:ce:dd:d8:7e:ae:0c:c9:f4:5f:ea:d4:7e:e3:
f3:6c:5c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:19 2025 by rpki-client