
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier: M/ox7svDnrtNwG6E4745tWDgzaejZixYqgZLMej1xyY=
Subject key identifier: 2D:9E:CC:2C:23:A4:38:B3:1F:26:8E:71:51:0A:C5:9B:8D:F2:6C:76
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 019930B5A72B50195089053F46C1A81803A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number: 1189
Signing time: Tue 09 Sep 2025 23:00:35 +0000
Manifest this update: Tue 09 Sep 2025 23:00:35 +0000
Manifest next update: Wed 10 Sep 2025 23:00:35 +0000
Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: 8i6JPTPYffloGfyEs9k4IODs2uoH/tLxgngdJX7i1Qw=)
2: H1OMOC2BAR_5642Cu7ZwMViudi8.roa (hash: XWP0BQbCva9Xp/f//R3LpuOJ9bWFeCg7RqrDman+FAE=)
3: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (hash: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=)
4: pg2Uo1mGaRZ4g8oAbIXuXT68ouw.roa (hash: dY7d7wlBY9scutfRZI+Jc0/ht66poZjZN1QodpAABEg=)
5: rS4RgydKxGdwOWf1j4StfouO-tE.roa (hash: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:a7:2b:50:19:50:89:05:3f:46:c1:a8:18:03:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Sep 9 23:00:35 2025 GMT
Not After : Sep 10 23:00:35 2025 GMT
Subject: CN=2d9ecc2c23a438b31f268e71510ac59b8df26c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dd:50:71:ce:9c:52:3f:c9:08:13:17:4b:9f:
25:fd:67:37:04:da:75:a6:23:d7:24:15:84:ad:f3:
d5:7f:dd:fa:ea:e3:11:08:17:8b:69:3e:32:54:17:
fe:ec:62:83:7b:f8:73:9f:e9:c2:e6:ca:33:a1:c2:
9d:ab:71:f4:96:d0:0c:34:96:3e:c7:ac:68:09:78:
3c:41:fa:47:8b:a6:2c:ea:b2:28:ac:6e:a7:89:95:
11:91:d8:58:1f:e0:c1:c2:31:2f:54:69:50:bb:16:
63:ad:f6:37:ac:93:b7:5e:7e:07:89:8a:9f:cc:f3:
c4:71:f1:1a:5b:73:78:6f:5d:d7:e5:78:45:22:05:
54:d7:4e:3d:22:f8:2a:10:cc:24:01:62:ee:e3:f4:
9f:13:9a:fa:b8:59:d0:c8:48:68:14:41:00:08:91:
31:37:91:fa:f4:a2:ee:bd:63:d8:9b:ef:0f:1d:8d:
90:99:26:cc:d6:bc:9d:3b:4b:f5:5c:c6:11:fb:29:
5f:28:d5:5f:e1:0a:18:bf:53:3c:e9:71:36:14:1c:
4e:ec:48:b3:d8:08:91:a2:6c:24:bb:9f:94:82:d0:
c4:c3:03:d3:96:0e:fa:b0:c4:5e:d5:dd:ce:0f:63:
cb:ae:88:31:db:de:7f:ca:74:84:3c:49:d8:8c:78:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9E:CC:2C:23:A4:38:B3:1F:26:8E:71:51:0A:C5:9B:8D:F2:6C:76
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:86:d1:bc:60:0e:82:69:02:6f:17:1c:c5:bb:f0:42:b2:b9:
5d:22:6a:3f:9b:86:c2:2e:af:4c:bb:42:8f:22:8e:50:b3:fc:
f0:0a:c7:15:f4:80:6d:cd:9d:a7:09:03:3e:b6:38:e9:82:61:
21:d6:f3:63:d3:95:29:02:9d:bd:48:6b:d8:c6:2c:66:3d:1c:
90:fa:08:94:40:95:44:10:c3:ea:d9:25:d0:d9:ad:02:f1:e3:
3f:25:2b:13:6e:b1:0d:88:58:d5:1b:3e:4b:d1:76:e1:2e:1a:
7d:60:25:d1:35:b3:7a:6a:7c:a7:a5:ff:ec:fd:57:7a:fd:b0:
58:fb:d6:ff:66:d1:47:13:be:89:0f:2c:12:5b:52:a3:d3:59:
49:1b:51:45:3a:e1:11:d1:bc:7a:d5:d8:ba:70:7e:90:18:25:
16:94:1d:27:db:bd:6b:ec:2e:17:8f:b8:e3:27:bd:1e:2f:d9:
a3:4b:f1:7e:83:db:d9:61:48:28:32:39:f8:09:18:53:34:cb:
21:ba:5e:f7:71:33:90:d2:2c:f0:f7:b7:f6:57:5c:37:fc:b6:
d3:16:a7:dd:3f:a7:e1:a2:c9:7f:61:66:52:a5:70:8c:16:91:
a7:ef:72:8e:4d:8e:60:17:73:16:49:a7:62:5a:44:41:ad:35:
ad:49:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:01:14 2025 by rpki-client