Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: qUfduR4I9fRZgf6JqV4DR0YNmrzNyYj7XcoGyWHkb5A=
Subject key identifier: 26:79:17:16:6A:10:C7:AD:0C:93:26:F2:4A:47:8B:45:35:29:78:D3
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 0199FFC74C227557F703767B75719ED4EEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1331
Signing time: Mon 20 Oct 2025 04:01:15 +0000
Manifest this update: Mon 20 Oct 2025 04:01:15 +0000
Manifest next update: Tue 21 Oct 2025 04:01:15 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: JHahitd5hM35fIpCbzm2KKbNQfHtQOXHvsIqVHZQMnw=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:4c:22:75:57:f7:03:76:7b:75:71:9e:d4:ee:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Oct 20 04:01:15 2025 GMT
Not After : Oct 21 04:01:15 2025 GMT
Subject: CN=267917166a10c7ad0c9326f24a478b45352978d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:75:6e:6f:2b:5c:6f:15:f7:02:12:3b:96:
87:22:03:ab:16:ba:fb:f7:f9:bf:13:7d:53:63:21:
56:6f:25:f7:13:aa:08:22:02:ea:25:03:75:35:35:
9c:1c:5d:34:92:27:d3:f3:0d:0d:f2:08:03:5a:c2:
fe:04:f1:13:9a:e0:e8:3d:6f:3e:01:88:89:4d:53:
7c:5e:aa:ad:c3:bd:de:88:77:44:3d:9d:3a:da:c9:
62:29:35:e7:72:43:65:c0:a0:54:8e:ba:17:3c:74:
ca:8c:7f:00:38:b4:6c:6d:ed:85:8d:1d:cd:60:ce:
ee:b3:83:d6:5b:aa:62:17:8a:f1:66:16:96:09:3a:
ec:0f:15:4b:ea:a8:2e:34:fe:b8:ee:71:a3:4f:d0:
cd:69:ca:cd:c8:c0:08:b1:91:6a:d4:9d:47:5a:43:
42:b8:b0:69:82:62:a0:bc:29:e7:e6:2a:b5:c6:cd:
6c:ec:fb:0a:b3:bc:66:7e:cf:70:ae:c0:65:13:d2:
50:17:bf:7d:76:aa:da:3f:1d:b8:8e:f8:be:73:22:
8e:17:e5:8e:db:47:f2:6f:f1:41:d1:63:78:91:95:
7e:d5:06:29:b2:d4:99:4c:77:0d:c3:20:90:70:e8:
69:ab:85:9b:64:a8:c0:85:62:0e:10:8f:d3:9b:a5:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:17:16:6A:10:C7:AD:0C:93:26:F2:4A:47:8B:45:35:29:78:D3
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:17:72:08:3d:b0:6d:db:c4:52:53:9c:3e:c1:a1:38:d4:
1e:a2:a2:8c:bf:e1:00:c3:18:8f:38:b6:3b:b8:34:aa:49:05:
b3:f0:a5:03:f3:9c:d3:2f:66:05:b5:9b:26:f9:f8:86:8f:4e:
f5:d7:0c:7e:1f:3f:38:ce:18:0f:8f:5f:ff:2e:e8:e2:a6:db:
db:85:5d:67:fd:87:a4:e3:8c:3e:b1:71:32:6e:e6:8c:27:bb:
85:ff:69:c2:6b:6d:67:ef:3a:f3:fa:9f:51:6b:b3:25:b9:a4:
a4:b9:7e:c1:69:0b:16:9c:7c:71:c8:de:10:aa:5a:1f:68:39:
87:4b:83:24:0f:e5:aa:3d:e1:1f:5d:ac:51:c6:db:04:0e:2d:
9d:41:ff:a9:aa:4e:5d:2d:db:b3:a2:12:14:60:57:ee:c2:e0:
2f:05:a2:60:ef:f2:7d:57:c5:a9:bf:da:48:da:90:79:eb:4b:
ec:52:b2:80:ea:24:33:90:ec:7a:f2:5a:9b:06:d0:ec:5e:cc:
b2:43:ee:08:8c:1b:73:5c:55:c1:b1:64:f5:97:ac:fc:97:3b:
9c:f4:fb:02:dc:6f:24:7b:5c:38:64:79:64:8b:1c:dc:df:13:
07:19:d3:96:c7:03:10:fc:02:82:8a:1d:06:45:c1:a0:ad:2d:
20:c3:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:31 2025 by rpki-client