Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: QghcYH7oOha1acOasnLAzjX4eQjcxMEpbWMb0sOZhHM=
Subject key identifier: B8:DD:FA:0E:AA:BA:65:16:03:7A:6F:DF:A0:8C:FE:35:0B:F2:64:94
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 0198D6601308AE211BEA1E7C96D6309A8057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 032D
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: S9tx0Zr4rpEzGHDp8U1Pc8u7kQtoEThn5stCahOxfGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:13:08:ae:21:1b:ea:1e:7c:96:d6:30:9a:80:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=b8ddfa0eaaba6516037a6fdfa08cfe350bf26494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:68:de:fe:9c:07:c2:6d:c4:ab:cb:e2:07:
e6:7d:21:7a:a1:a0:5b:d6:3f:35:0d:cd:48:cd:a8:
1f:ea:e8:c4:e7:f5:ed:36:f1:8d:5c:9b:8e:ca:aa:
4d:83:6f:4e:50:e1:46:c2:7c:fe:a4:a8:7f:5f:23:
d9:04:14:7f:90:65:e1:10:f7:08:62:1c:2d:71:bf:
cd:73:5b:80:68:2c:66:da:a6:03:78:cb:43:6a:49:
cc:f9:f6:f1:7f:46:3d:25:17:a7:f0:70:10:70:6a:
f9:4a:f7:bf:c6:5d:b9:55:d9:22:2c:85:91:4f:a7:
82:32:35:b8:91:4a:87:00:f7:68:59:9b:2d:b0:a2:
8b:1d:b3:cb:71:19:ca:4d:9e:4b:13:aa:1a:92:cc:
cd:16:fd:f8:3a:28:61:d2:b5:ff:8e:c8:61:09:4b:
60:4e:d3:e1:f3:34:ce:15:ed:1c:4e:e0:c1:42:97:
88:06:ac:a4:db:71:47:80:37:6e:20:4d:51:6a:f3:
96:2b:15:dc:d7:cd:80:0c:be:b8:90:44:b7:bb:c6:
05:e6:a5:fa:23:0d:68:69:89:c3:1f:29:51:44:c6:
49:0a:18:27:04:a4:b8:f8:c7:5b:f5:fe:7b:57:04:
7a:9f:f1:80:d7:20:f7:f2:96:b2:82:a0:5b:bd:b2:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:FA:0E:AA:BA:65:16:03:7A:6F:DF:A0:8C:FE:35:0B:F2:64:94
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:51:1b:50:8b:b3:ee:dd:e0:7e:bd:09:80:e0:dd:06:a2:ae:
6d:ff:4d:c9:a1:71:71:59:ac:0a:7e:b2:53:f7:b8:5a:0a:ee:
88:47:ec:ed:4d:a4:32:ef:7c:ca:a7:59:f2:ed:f8:5a:3b:0d:
4e:46:10:ac:18:1c:cf:83:1f:5a:62:07:8d:40:31:42:51:cb:
e3:78:8c:67:bb:1e:59:ef:19:f2:9d:c4:8d:6b:cc:dc:6a:da:
f7:a7:3e:ee:ba:42:0d:9d:73:ce:f4:9c:76:c5:dc:2b:ed:98:
85:49:2b:82:49:0c:a7:7c:a0:3c:ea:94:21:19:90:aa:15:36:
e3:68:13:4e:79:b1:90:46:eb:2c:76:0f:d6:8b:c5:44:e1:e5:
c1:4e:3a:88:8d:55:54:a2:02:58:0f:44:3a:d6:e2:e9:7d:1e:
5c:ed:55:11:d3:83:06:69:35:3e:e0:79:b7:ee:67:d7:06:37:
b5:f6:3e:ec:48:7a:c8:76:14:81:ea:a9:0c:11:0b:1b:77:7e:
97:91:57:a9:14:4f:38:d7:15:04:77:e8:d7:a7:85:99:e3:52:
2a:67:fe:e1:71:33:8a:b3:4b:66:73:40:d7:f7:f0:41:ea:c2:
d9:bd:f4:a0:ec:65:2a:90:53:d9:ae:76:a2:01:a6:a9:d4:41:
9d:f3:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:34 2025 by rpki-client