Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: t+N4DGzNGhf03lVgHM1WkJMkUpmgmL3hKFWWJS6r+zY=
Subject key identifier: 32:26:2F:64:23:E3:62:0A:02:F0:07:16:AC:8D:B2:FE:BF:36:BC:C8
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 0198D697F7FA01246BD7D3FD10C6E0F9D196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:20 +0000
Manifest this update: Sat 23 Aug 2025 11:02:20 +0000
Manifest next update: Sun 24 Aug 2025 11:02:20 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: bcjsHY6B+8gVcGkA9KR66pTdqspPE8amef5Ruk4waLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f7:fa:01:24:6b:d7:d3:fd:10:c6:e0:f9:d1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Aug 23 11:02:20 2025 GMT
Not After : Aug 24 11:02:20 2025 GMT
Subject: CN=32262f6423e3620a02f00716ac8db2febf36bcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:10:51:16:59:3e:d6:b3:d1:13:ca:47:a2:
08:e2:ab:db:6f:31:14:8e:7c:7c:9b:71:53:a4:18:
d1:ea:a8:3d:37:c3:9d:e0:aa:36:dd:a0:ac:91:28:
b4:2b:9c:e1:78:8e:fe:d3:55:7e:c2:43:8b:a5:56:
a0:3c:96:b4:d6:0d:ee:16:8c:ca:b8:5a:5a:e6:19:
69:b2:df:f2:83:7a:13:86:df:32:bb:3f:14:1c:9b:
1b:80:b8:c5:77:fe:9c:22:9f:07:29:30:06:21:00:
39:7f:ec:8b:a1:dd:af:eb:ea:5c:62:b8:30:51:9f:
41:76:45:b7:29:ff:69:ad:ca:a9:51:90:9a:76:7f:
22:b0:86:1e:a0:85:71:8a:c6:43:3a:61:1a:4e:8f:
5c:3c:df:c8:9f:2d:50:08:27:37:b6:f4:b0:b6:3d:
4a:89:75:41:69:92:c7:cc:4e:d5:70:65:83:45:94:
5d:35:67:51:c3:37:d4:51:5d:02:33:a7:b8:76:53:
c1:62:b0:47:cd:82:dd:71:ae:a8:6e:e3:ba:10:d2:
37:a7:36:69:51:ae:8b:0c:3a:ab:46:ed:25:b8:7a:
d3:88:7d:fa:a8:f4:4c:24:e4:b5:eb:79:de:d6:73:
34:46:38:7b:99:c3:f4:ba:59:f1:88:48:a5:30:4e:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:26:2F:64:23:E3:62:0A:02:F0:07:16:AC:8D:B2:FE:BF:36:BC:C8
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b4:bc:1d:13:25:73:f9:86:8a:8f:33:ee:3c:9b:0c:7c:3c:
84:7f:45:dd:17:54:76:3c:5a:80:a9:db:7a:3e:6a:72:33:e9:
ed:5c:17:be:8e:db:4b:a2:32:47:12:5a:0e:5a:b1:db:29:be:
18:ea:dc:76:22:2e:5c:79:79:7a:a2:64:a2:28:21:39:e6:b6:
46:81:c0:3b:ed:f4:0e:e7:db:17:c4:82:3e:1e:a0:28:cf:46:
b2:c1:74:af:ca:0e:ef:da:c0:0e:6c:53:86:72:10:de:ad:66:
67:71:2a:19:65:7c:84:2f:81:b6:25:3f:28:a4:1f:a6:c3:e7:
3a:b2:ee:d3:96:83:8d:6c:6d:bf:c4:5e:39:5f:6e:7c:cd:bb:
7f:af:1a:16:76:c9:49:de:b1:f1:95:85:0c:7e:37:d9:68:c6:
a9:45:c3:45:d4:14:9f:2a:14:43:4a:c4:49:1a:3c:88:53:44:
52:93:ee:7f:3e:a6:32:9b:cd:b0:df:61:70:a0:63:60:96:77:
c0:f7:ed:ad:93:cf:25:76:31:62:0d:b2:1d:32:b4:6c:de:c0:
27:85:ff:a5:eb:1c:ed:5e:1d:ca:a5:8e:da:94:9a:d1:e4:78:
1f:33:5e:11:f0:ad:11:a0:b8:e5:e2:1b:e2:4d:21:92:a5:cc:
0a:25:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:05 2025 by rpki-client