
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: nz5d/1Y3J57MxfTLB4RUFI/cTOP6GjfmxF+dS77SfNU=
Subject key identifier: F9:03:B9:16:D7:35:8C:B3:28:66:C3:75:AF:C8:3B:DE:55:D7:CD:AE
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 0198D8500E2D353EE87D145480827FF7D3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 19:03:01 +0000
Manifest this update: Sat 23 Aug 2025 19:03:01 +0000
Manifest next update: Sun 24 Aug 2025 19:03:01 +0000
Files and hashes: 1: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (hash: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=)
2: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: XXEcV1dX30LQno7d/3JoCR783mgnMkh/k7jw71VSiWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:0e:2d:35:3e:e8:7d:14:54:80:82:7f:f7:d3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Aug 23 19:03:01 2025 GMT
Not After : Aug 24 19:03:01 2025 GMT
Subject: CN=f903b916d7358cb32866c375afc83bde55d7cdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:dc:aa:73:09:ae:cf:84:84:4a:5f:7c:3f:
53:ca:cc:42:66:26:b3:13:88:91:af:a1:98:e1:f1:
ca:0f:35:86:14:58:92:2b:8b:72:d5:0e:fd:8a:eb:
d9:da:da:31:c8:a3:85:14:f2:07:90:b2:22:0e:71:
04:7c:1f:b0:00:0c:6f:c9:5b:4e:1b:e3:7a:c0:55:
a4:39:93:c3:c9:17:1a:54:43:8e:4d:ef:c4:ce:72:
5f:cb:86:6c:f2:16:f7:38:51:46:a1:18:25:00:18:
fc:45:d3:d3:db:62:9d:2a:b8:aa:7e:91:b8:e4:94:
51:e5:c8:01:be:58:f7:1c:4c:ef:e2:e5:27:fd:0e:
12:7f:2e:ac:93:7d:55:45:35:aa:8d:6b:cc:a6:86:
30:43:53:78:4f:cd:84:ec:e2:57:88:dc:cd:12:5d:
a4:b0:bc:b9:fd:0c:47:4a:ec:0f:34:85:65:86:0d:
bb:7c:f6:c2:31:f5:0f:9d:af:94:38:11:f2:0c:d7:
56:12:2a:72:29:55:0d:49:8c:1a:62:a3:a4:4f:b6:
8d:7e:ec:0c:4a:0f:f8:2a:4f:93:30:a2:56:e2:1a:
72:3f:7c:6a:aa:07:40:7e:94:ef:ee:2e:bc:9d:70:
fb:2c:35:2b:f9:14:41:63:90:fd:58:f7:b8:ec:7a:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:B9:16:D7:35:8C:B3:28:66:C3:75:AF:C8:3B:DE:55:D7:CD:AE
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:56:c8:d4:9d:5f:a9:3a:7b:66:28:44:4b:a3:23:36:1a:56:
2f:b0:71:f7:bc:a5:09:f6:24:0f:8b:52:47:dc:da:76:f2:01:
9a:83:a5:c7:d0:9e:dc:33:39:24:ff:ec:08:9f:40:8c:05:e8:
b9:0c:09:52:64:b5:81:86:e6:ea:b0:c5:15:a5:b3:57:74:79:
8a:f0:3f:e5:be:9d:a9:88:2d:99:ba:67:05:67:84:6e:3b:54:
a5:06:b2:09:d4:79:6c:3a:fc:c4:e9:91:36:bc:c3:78:09:b5:
44:0d:0a:6d:22:00:c2:7c:b4:ce:eb:90:37:57:ee:b0:2d:05:
3a:5e:9c:ec:71:32:ec:a2:a7:c4:28:17:bb:0e:58:59:0d:de:
0c:53:fa:26:d8:10:80:f7:3e:31:4f:f9:f3:67:46:cd:11:da:
4e:3a:45:c9:d9:b6:bd:09:64:73:3c:e2:9f:b2:7a:aa:32:74:
c0:da:90:51:72:ce:f1:41:bb:cb:1e:1c:68:1b:32:09:5a:b6:
f9:3e:4d:65:3e:ad:1a:50:3f:80:51:05:b8:06:0d:99:9e:07:
dc:0c:e1:ee:63:f0:c1:d4:04:3a:f0:44:41:32:3d:73:25:78:
f9:a0:ca:83:da:98:94:04:8f:64:e2:61:54:24:9c:65:24:51:
17:97:c6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:02 2025 by rpki-client