Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: akkQDVXneG6+dAddSSOG8UeObyWTqTU5TlpOqbNHgL0=
Subject key identifier: 7B:92:B5:6B:47:94:11:72:5C:40:4B:55:F4:28:EB:8E:D7:E9:65:03
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 0199342522EA2ACE601CB454A13C8B9FF309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 15AB
Signing time: Wed 10 Sep 2025 15:01:12 +0000
Manifest this update: Wed 10 Sep 2025 15:01:12 +0000
Manifest next update: Thu 11 Sep 2025 15:01:12 +0000
Files and hashes: 1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: pSrKmQzea0V584BblbzZoptUJcwwDHPII7a2lU3C44g=)
4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:25:22:ea:2a:ce:60:1c:b4:54:a1:3c:8b:9f:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Sep 10 15:01:12 2025 GMT
Not After : Sep 11 15:01:12 2025 GMT
Subject: CN=7b92b56b479411725c404b55f428eb8ed7e96503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:63:92:17:03:ea:8c:33:cd:b7:dd:68:85:
16:71:3c:9c:99:34:ec:44:b7:93:60:d2:59:56:bf:
e2:19:29:8d:0c:9f:65:80:3e:35:29:83:31:a6:8f:
c4:09:e2:66:14:50:5c:b3:5c:d4:5d:1e:21:07:40:
ef:49:f4:6d:78:7e:75:34:1a:f4:9f:76:e0:b7:5f:
29:56:c5:59:7e:86:39:1f:63:ab:ff:bb:cf:b0:b7:
9c:d3:6b:3c:11:8a:44:84:9c:5b:86:3e:6f:02:a8:
5f:ce:90:49:80:32:86:ee:f5:0f:47:4d:fc:c2:9b:
1f:f3:64:5e:bd:b0:1d:3b:fc:ba:c4:93:fd:66:77:
39:7e:2a:05:72:f8:8e:65:b9:ae:4c:1d:26:07:39:
b0:bd:74:b3:ae:cd:91:c6:01:e1:ac:70:c8:b8:ef:
f2:c2:56:e6:7d:44:60:50:5b:75:9b:7e:8b:f9:55:
18:4d:5f:2f:ce:5e:3c:ba:c3:69:86:d2:db:88:bf:
28:af:30:24:e1:94:0b:59:52:5f:77:ef:e2:1a:b3:
18:0f:ae:b2:4b:e7:30:e7:b7:c6:41:da:c3:88:32:
a3:aa:bb:95:76:30:f9:44:37:41:90:dd:61:ca:0b:
c4:67:81:96:f9:c8:bb:3b:1f:0e:ce:59:7b:14:5b:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:92:B5:6B:47:94:11:72:5C:40:4B:55:F4:28:EB:8E:D7:E9:65:03
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:be:bd:f1:4e:87:00:2e:72:21:0a:45:5f:b6:59:e0:56:a8:
bb:fd:f9:c8:85:4c:16:1f:90:51:1b:6f:e1:70:b2:40:1a:b5:
71:1f:00:83:c8:4b:26:ae:21:b8:d5:26:17:75:ec:97:e9:2b:
40:48:88:86:55:44:5b:55:68:cf:f9:3d:a4:e6:e2:ec:6e:9a:
ec:e4:1c:b2:e9:35:48:c9:52:57:83:5c:b7:9b:c4:6d:c8:65:
00:7a:d5:88:d7:03:c8:9f:a5:28:20:05:0b:d2:44:95:07:a7:
2f:b5:42:3c:03:da:df:91:a9:5e:9a:b5:38:71:0b:99:77:3b:
7f:88:38:46:b7:58:3d:75:c0:52:b8:e5:03:bb:2c:e5:59:f6:
c7:42:f3:b6:22:ec:f6:8a:d1:6c:5d:b3:d4:3c:fa:5c:76:bc:
b5:10:c7:cf:df:90:a1:b9:0f:97:81:2f:89:7f:0a:63:3c:e4:
e4:72:c4:c0:27:9b:46:2d:09:96:5e:93:fa:d9:53:52:6b:48:
84:35:ff:2c:d5:f6:b0:74:a4:06:3a:3b:39:74:96:fc:e9:3c:
eb:97:73:38:d7:1a:a8:60:f3:83:94:6d:77:77:f7:f6:4c:87:
80:70:45:ff:19:7c:9a:ed:58:03:28:1a:fe:85:4e:a2:50:9d:
70:18:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:36 2025 by rpki-client