Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: fvyTwv4w5XoMsMv+N/hHQm0otnNEgTmL9yf7dsQLhx4=
Subject key identifier: A1:0C:CD:4E:55:53:B6:1B:BD:E4:E0:C8:A9:6C:FA:A8:AF:00:6D:7B
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 0197E00AA6D5D6D9FCD90EC7DE7C7608C59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 15EC
Signing time: Sun 06 Jul 2025 14:01:23 +0000
Manifest this update: Sun 06 Jul 2025 14:01:23 +0000
Manifest next update: Mon 07 Jul 2025 14:01:23 +0000
Files and hashes: 1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 6bqi+HEqPdXlVRw2im9McDwg5Kc94VSGuPaLZ78/CxY=)
3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e0:0a:a6:d5:d6:d9:fc:d9:0e:c7:de:7c:76:08:c5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jul 6 14:01:23 2025 GMT
Not After : Jul 7 14:01:23 2025 GMT
Subject: CN=a10ccd4e5553b61bbde4e0c8a96cfaa8af006d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:7f:35:e6:32:c3:c9:d4:aa:f6:b4:34:17:
e9:ab:01:fb:35:87:32:c0:23:ce:6a:a9:a0:3c:c5:
bb:c0:a7:e2:31:b8:96:7f:eb:c1:b5:b2:9d:14:1b:
93:d3:bc:1f:89:42:75:80:98:29:fc:a6:fa:dc:be:
09:73:3b:ac:97:af:70:12:3d:71:02:d9:49:ff:70:
0b:6c:b1:20:df:4b:01:73:a7:4f:ba:44:57:58:e0:
0d:d7:6a:d2:4b:78:4d:95:ad:5e:22:28:16:44:3a:
af:45:1f:9e:22:38:74:6e:d6:42:e6:8d:66:dd:be:
ab:79:e2:ce:a7:e6:76:98:75:56:74:81:5a:18:ef:
40:4b:5f:85:4e:0e:3f:3c:a3:7b:ee:73:75:a8:b7:
54:b9:0b:e0:5b:9f:e3:96:c6:e9:b5:fb:fe:2b:ff:
f2:ba:92:f2:bd:bf:6e:2d:d2:ba:38:f8:b4:21:bb:
05:c6:66:8c:ec:9d:ce:f0:44:34:80:ba:f0:be:58:
50:da:36:39:d3:0f:14:97:ec:77:90:1b:07:11:32:
a0:87:04:af:df:5b:e1:5d:57:77:e8:10:8e:bf:14:
db:89:77:8b:a4:90:c1:12:8f:6b:86:25:0e:b6:5e:
56:28:f4:08:a0:1f:29:5c:9b:33:bd:7d:46:90:79:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:CD:4E:55:53:B6:1B:BD:E4:E0:C8:A9:6C:FA:A8:AF:00:6D:7B
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b9:92:71:8f:4d:f6:c7:be:f5:5e:d0:d1:78:2e:39:2a:9d:
54:74:73:b2:35:39:00:2f:4c:67:10:b7:b5:7d:5d:02:f4:4c:
27:67:fe:b6:9c:6f:61:bb:f1:61:31:62:ca:ac:8a:74:e8:09:
3c:77:19:75:74:fc:f1:5b:97:89:93:38:1f:1c:58:22:3c:63:
fa:be:c2:cf:f9:1d:6a:c2:a7:1d:19:b7:3f:aa:cc:56:d7:19:
18:7f:f7:55:51:a9:ef:ef:40:f0:51:be:52:dc:10:ff:9d:d0:
79:46:ef:b6:0c:3c:f6:8d:40:f5:c6:ef:6a:54:1a:e2:55:5d:
c6:47:ef:8e:3c:9d:9f:c0:27:fe:d4:36:fd:49:63:31:46:d3:
73:ff:87:51:bf:7e:0c:d4:c1:98:7d:cb:af:62:9b:4d:f3:4e:
56:45:2d:c9:82:df:1a:27:13:79:13:b3:7a:66:87:a0:fa:7a:
b3:ee:20:91:4b:68:75:4c:db:9b:5f:d3:21:28:6c:53:22:f5:
7c:13:01:01:33:e4:64:1a:b4:74:d7:db:30:ff:cf:79:1b:35:
95:37:32:31:76:2b:91:e5:69:8a:67:6f:a7:96:2d:77:fc:df:
8f:ef:ba:24:2b:a1:a8:d0:fc:81:0c:fa:2f:36:31:7a:94:59:
ed:18:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 22:20:32 2025 by rpki-client