Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: HalBi3iZodY9nalNhGcArWtuq8cpdvHwaXUd6kviW9g=
Subject key identifier: BA:06:7F:83:91:A0:84:81:93:2F:BB:3D:4C:53:9D:11:31:19:55:F1
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 0198D6298F3F3B9F37EEF0E8FE13D4E33D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0A5E
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: 6Yt2qjs5CnMUKrQgIgRoxGXi2KdTcZ0FDhz9dMaFAWs=)
3: XNJw0i5YROHsLdGqQV-sQNcutQk.roa (hash: jP7HL40L4UifhwI3DQuFuVlNNqWLOXwjBtyAaPoZl9M=)
4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8f:3f:3b:9f:37:ee:f0:e8:fe:13:d4:e3:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=ba067f8391a08481932fbb3d4c539d11311955f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:1c:d8:1f:d7:b3:78:a2:87:1c:d4:24:de:
1a:4c:ff:5c:02:6c:82:9f:1f:4c:ac:60:de:95:93:
99:30:a6:cd:d0:3f:d9:6e:19:cf:d2:b0:fb:88:98:
7a:03:06:50:6b:1a:48:eb:b0:3b:be:a8:31:f3:90:
57:b1:02:d8:ce:6e:8e:e7:21:a8:41:53:60:8c:fb:
66:65:33:94:f2:37:fa:1e:1b:23:e2:f9:30:ed:aa:
70:90:da:93:f4:a0:95:fc:7e:05:03:67:de:c2:c0:
f9:1a:1d:5e:54:c3:b7:b3:32:44:4e:a4:15:94:1f:
ad:38:c4:b8:86:da:60:85:52:09:0f:d6:d8:13:c2:
ae:1e:93:e2:e6:5b:7f:e5:6f:b4:93:47:e4:78:b1:
7a:1c:71:2e:2d:ef:fe:26:46:af:e4:96:ed:d6:db:
0f:97:a7:2f:ff:32:61:ce:5b:8e:60:ad:20:d0:47:
80:f7:82:a1:4b:d0:31:35:95:6f:d9:9d:52:bb:28:
cc:b7:78:81:79:4e:a4:3a:42:17:97:97:0e:79:39:
3c:4b:78:d2:0b:db:ff:c8:3d:27:bb:6b:04:57:c1:
60:bb:35:8c:80:57:b4:4f:14:d2:97:fe:64:a3:60:
c1:7b:73:6b:92:4d:40:67:0d:99:e3:0b:ca:3f:93:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:7F:83:91:A0:84:81:93:2F:BB:3D:4C:53:9D:11:31:19:55:F1
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c7:c2:8b:37:81:1a:10:64:1e:65:fe:30:ec:37:53:26:76:
2b:37:ab:c7:c9:f5:11:20:56:85:58:f4:4b:9b:5c:b9:da:aa:
f7:62:32:c6:79:6a:74:bf:e6:79:c3:df:41:f5:ea:35:ee:8b:
77:0c:51:b7:b2:a6:24:a8:5b:90:38:eb:6a:01:57:a6:04:8c:
ca:71:d0:69:3c:56:5b:c0:ed:ca:57:9d:30:09:bb:49:f3:ea:
57:49:d4:31:14:28:1f:84:c5:e2:3a:2d:19:fa:06:37:3e:88:
1f:7b:6c:cd:d7:23:1e:7c:4f:85:9f:8c:0a:22:62:bb:fd:f4:
cf:f2:08:3f:36:77:27:10:41:7e:b3:63:8b:28:24:0e:8d:7e:
04:91:82:c1:ff:05:94:ea:23:27:ad:28:c9:0e:5d:6a:43:dd:
71:ad:b2:5c:0b:56:79:0a:d3:31:c2:9b:d5:f2:5a:70:ae:17:
65:f0:bc:ab:1b:3e:19:27:2b:22:09:ef:42:f8:4c:1a:45:dc:
55:dd:4a:42:f9:5b:94:68:82:18:b9:c5:ab:a5:ce:cf:db:f7:
b9:73:35:72:68:5b:70:72:2f:36:e3:92:3b:7d:13:cb:3b:15:
3e:3b:bf:60:fb:5c:82:03:b6:67:fd:c5:ad:bb:6a:e5:70:94:
ba:fc:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:53:27 2025 by rpki-client