Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: PHeOv4L1MNNJhDtYWGHzyCQgGf6BlEUoGNbB5/cNjaU=
Subject key identifier: 35:C3:57:F8:F3:C8:C1:1A:0D:04:27:80:65:6B:52:66:74:CB:A0:02
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 0198D660CB595671426CF14D8FC5896C0614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0728
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: bQE2Ox1y5wsKFrnSf5a0Y339qHfessGOVyBEJxX2CR4=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cb:59:56:71:42:6c:f1:4d:8f:c5:89:6c:06:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=35c357f8f3c8c11a0d042780656b526674cba002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:7c:55:77:8c:27:c7:63:1b:b0:10:d7:6f:
cf:a6:09:91:4b:82:4f:ce:01:96:d0:a6:e9:5b:40:
8b:26:ba:88:6d:74:e1:ac:87:c8:83:40:e7:d0:55:
3f:c3:9f:25:a7:8c:52:07:a2:6f:9a:6e:62:47:62:
70:e9:40:2f:2d:4f:09:41:5a:42:67:7c:21:d0:8f:
8a:07:a5:c9:3d:02:4e:59:03:74:06:20:84:c2:2c:
39:5c:2e:77:3b:43:3a:55:0f:aa:58:58:47:3f:53:
7e:93:11:30:80:49:d5:34:8c:72:f4:f1:5a:d1:67:
f8:b4:ed:e0:01:d2:62:c7:2a:97:de:da:ba:4a:6e:
9e:46:59:da:4c:7c:fe:1b:bf:39:4b:f0:3c:58:7c:
db:76:06:6e:5d:53:54:36:15:4e:be:7b:1a:b0:ec:
9b:fd:bc:bf:aa:8a:e6:a8:2a:b3:22:14:92:ef:0a:
a6:05:c6:91:b1:5f:2e:ad:d1:a4:2f:ad:ff:db:06:
c8:8e:2a:37:88:b6:51:6a:1d:1e:55:a7:9f:98:69:
ed:9c:e7:fa:34:7b:ed:fc:a5:75:6d:95:ab:a7:b0:
20:92:41:57:07:0d:cd:08:1c:ac:c0:24:3e:8e:b3:
b5:23:9e:0b:98:2d:28:04:69:2c:4b:b2:7a:cd:d0:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:57:F8:F3:C8:C1:1A:0D:04:27:80:65:6B:52:66:74:CB:A0:02
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:65:f2:20:78:4c:4f:93:6a:24:39:2d:79:88:a9:e7:ff:7b:
49:c8:4b:77:be:c8:2c:c9:c5:32:22:52:dd:c8:dc:6d:d3:0d:
f5:b1:24:75:30:a9:61:7b:9b:74:58:9d:79:14:c8:88:99:95:
71:48:40:ba:2c:c0:76:41:e3:78:3b:e0:c3:3f:8c:ae:0e:92:
0e:02:ae:a0:7d:64:81:11:dd:fc:44:da:ce:a1:d7:cc:12:f3:
53:04:81:77:91:0c:0e:9f:df:6b:97:b0:00:02:30:14:4d:53:
11:8d:07:f8:7f:1e:44:7b:46:c0:62:dc:0f:29:e2:d3:20:20:
bf:a7:45:51:85:47:d5:e4:8d:04:86:6c:c4:33:77:03:33:43:
76:b6:5b:bf:b0:ce:23:a2:7a:83:28:c2:e0:df:48:14:96:02:
27:9b:f8:c9:db:8f:90:f3:74:c7:b5:30:f7:c1:04:11:79:ee:
2d:37:19:28:ee:84:ac:3a:58:52:e1:b6:78:63:ef:09:03:29:
e9:af:e8:be:d9:0d:be:02:49:7a:2b:f6:26:da:4d:72:52:e9:
67:07:2f:8f:c0:21:4c:11:1c:4f:a3:91:69:5f:32:61:41:b5:
42:37:59:fc:d8:7b:f7:33:9c:42:04:99:e8:e2:3d:b1:9a:fd:
eb:b7:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:24 2025 by rpki-client