Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier: vpS4XKNG+NdG6bLffqrJUeS3ForTFpt8nG8Swe4VSVE=
Subject key identifier: 3F:31:E4:F8:99:BA:88:ED:93:A5:31:28:F0:CF:3B:E6:21:D8:E2:31
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 019A1E3EDCE3E5C26287820F9353D7ED42F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number: 1204
Signing time: Sun 26 Oct 2025 02:00:27 +0000
Manifest this update: Sun 26 Oct 2025 02:00:27 +0000
Manifest next update: Mon 27 Oct 2025 02:00:27 +0000
Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: g0xh/mq8dSFmfYGo13gIT2sDLDzZSY+AWW6MTIsOefU=)
2: H1OMOC2BAR_5642Cu7ZwMViudi8.roa (hash: XWP0BQbCva9Xp/f//R3LpuOJ9bWFeCg7RqrDman+FAE=)
3: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (hash: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=)
4: pg2Uo1mGaRZ4g8oAbIXuXT68ouw.roa (hash: dY7d7wlBY9scutfRZI+Jc0/ht66poZjZN1QodpAABEg=)
5: rS4RgydKxGdwOWf1j4StfouO-tE.roa (hash: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:dc:e3:e5:c2:62:87:82:0f:93:53:d7:ed:42:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Oct 26 02:00:27 2025 GMT
Not After : Oct 27 02:00:27 2025 GMT
Subject: CN=3f31e4f899ba88ed93a53128f0cf3be621d8e231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:82:e4:15:cc:d1:63:75:b1:37:13:90:0a:
63:b6:20:bf:3a:98:5f:73:7f:31:ae:39:61:10:7b:
9d:ac:d6:30:31:7b:d6:f1:94:f6:2e:03:d6:8d:18:
55:44:6c:8a:5c:15:63:10:05:7d:e8:ee:91:a2:7c:
e1:ea:b4:38:89:5d:89:87:06:7a:5b:ff:7c:5b:ad:
c0:b5:f7:67:57:90:0a:13:bf:51:25:92:15:c3:78:
5f:52:34:5c:38:92:28:08:8d:db:78:3a:f4:86:55:
27:73:1d:c3:aa:4f:3b:64:42:d2:8a:1a:fb:84:24:
74:79:3e:5e:1b:67:c7:0d:2b:88:37:57:07:83:81:
9d:fe:c0:88:0b:44:01:5b:2f:b7:54:35:e6:ed:5d:
8f:4c:50:33:94:ef:f3:16:c0:10:ce:37:63:55:d0:
66:f1:94:21:aa:15:24:c4:00:e4:fb:3b:b1:6c:50:
7c:9a:1f:f0:4a:5d:b8:ad:82:98:31:00:90:36:9e:
9f:0b:97:cb:09:cc:54:da:26:6a:61:56:8b:85:26:
56:0b:5b:6e:74:7b:0d:2a:86:75:5a:be:d9:cd:0a:
48:cf:d0:0f:77:76:5c:f8:bd:87:bf:b6:37:bc:38:
c4:89:fd:5e:4b:b2:03:15:9c:a4:0c:14:c5:dd:bc:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:31:E4:F8:99:BA:88:ED:93:A5:31:28:F0:CF:3B:E6:21:D8:E2:31
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:35:6f:ae:f6:f3:97:50:7d:3c:de:b4:cd:cf:87:a7:7c:e5:
b6:ae:93:90:d4:62:57:13:99:e3:58:b0:1a:6b:fc:ad:1f:fa:
f8:ca:d2:5f:60:c8:6c:0c:58:f1:59:bd:09:2f:f5:fe:2b:f7:
7e:e9:c3:6b:1b:bc:d2:8c:f9:9a:29:20:e8:74:2f:65:0e:46:
d8:9e:96:0b:42:88:10:06:bd:1d:be:9c:d3:17:5e:f1:ff:06:
ef:b4:60:54:b3:f8:55:3e:6d:db:b4:b4:c3:ae:3c:76:17:e4:
1d:0b:e8:2b:2f:88:f5:43:19:64:ce:3e:5d:ad:38:e3:92:45:
99:83:d9:90:b6:dc:a6:e7:b6:37:ca:21:79:42:0f:38:51:a1:
73:eb:89:8f:71:8d:dc:13:27:c9:ca:6c:ad:8a:39:76:c7:3a:
f2:6d:3d:7d:14:99:ec:45:bb:d9:d6:92:de:05:61:1d:ab:69:
da:b6:6c:a1:6f:13:6a:55:ed:c7:3b:1f:6c:4f:00:2f:b2:e0:
85:3d:8a:bf:9a:7f:8c:8d:18:8b:c0:27:3e:71:e2:bb:aa:67:
b3:e5:a4:20:6c:98:2b:3e:a9:03:61:6a:7e:55:b1:0c:d0:87:
31:3a:b5:fb:d0:2c:2b:80:01:fb:34:be:1b:26:cd:85:e9:67:
8a:6a:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:07:01 2025 by rpki-client