Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: 32i6wnIVUI5trFjozib51kRoVUBkR1BYHVLIDke9oUk=
Subject key identifier: 30:88:20:D5:10:9D:F3:59:D7:DE:85:79:7C:EC:96:DF:50:8E:00:76
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 0197B89072D0B0E2633BF9265FB84D313771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1203
Signing time: Sat 28 Jun 2025 22:02:43 +0000
Manifest this update: Sat 28 Jun 2025 22:02:43 +0000
Manifest next update: Sun 29 Jun 2025 22:02:43 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: DsjygpuScT4YrwRqUwLZEb+7kd6kWZANGBRkNQV2WLQ=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:72:d0:b0:e2:63:3b:f9:26:5f:b8:4d:31:37:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Jun 28 22:02:43 2025 GMT
Not After : Jun 29 22:02:43 2025 GMT
Subject: CN=308820d5109df359d7de85797cec96df508e0076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:4b:47:ed:3e:f5:c0:8d:85:fc:45:7b:44:
e9:d8:be:7d:42:57:24:9f:58:f6:6e:56:ff:b6:bf:
3f:a4:9a:ef:2e:97:e4:97:5c:6b:7d:1d:41:90:3d:
41:71:18:00:63:3a:ab:89:23:8d:98:ac:0b:97:01:
90:6b:4f:93:f6:51:67:26:77:f0:5f:54:68:37:e9:
92:f7:65:c1:83:24:71:b8:49:a5:f9:08:94:01:10:
72:cf:78:f1:47:3a:b7:81:05:2a:86:a9:8a:be:4d:
86:0c:99:a0:4c:8e:1e:dd:83:88:85:9d:a5:26:05:
b6:15:6c:de:b2:f8:05:df:ff:2c:1d:37:cf:f1:f0:
51:15:6d:b6:35:37:31:6c:40:8c:a7:c7:a9:5e:0c:
01:3b:76:8d:37:b5:21:39:96:ff:b9:c1:21:c4:4e:
db:af:7c:1f:43:10:f8:f5:e6:7d:de:cd:ea:d4:0f:
49:af:a3:fe:9f:f5:8c:30:3b:57:03:f5:7f:aa:90:
38:8c:9f:1e:a0:b3:73:4c:b5:40:08:73:f4:46:22:
db:44:17:3e:4a:97:03:e1:af:20:d1:cc:10:97:22:
88:37:cd:a4:5b:ca:40:b2:db:7c:ca:15:d2:b2:01:
5d:7d:13:95:0c:d5:5b:79:12:3f:e5:65:e1:e5:a2:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:88:20:D5:10:9D:F3:59:D7:DE:85:79:7C:EC:96:DF:50:8E:00:76
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:31:20:8c:a1:61:5f:74:09:23:93:be:35:c5:f4:5a:fe:3f:
1f:12:59:bf:81:9c:6d:01:95:9f:4f:41:bb:8f:11:b0:bc:fc:
e8:ca:b2:2b:bd:fc:20:47:ef:38:ec:ff:12:3b:d4:1d:30:92:
3e:30:15:6e:01:15:d1:d7:54:07:65:57:6c:ab:d6:7f:28:2e:
63:b7:c5:a2:36:3e:81:4e:f4:ca:84:02:2a:99:46:74:3b:7a:
10:81:9f:bb:f2:49:76:58:d7:9c:af:e1:21:b7:3e:f5:22:4a:
74:56:c7:6c:9d:1f:80:d2:4d:a5:9c:fb:b2:52:b1:19:c0:74:
e3:d1:01:7b:04:08:5d:20:5b:8c:73:ca:d6:85:73:10:d6:84:
30:3a:de:96:1b:2e:35:ea:9b:20:71:bb:f8:72:fd:10:14:f8:
a2:7b:7c:2f:8b:ce:c4:e5:11:fe:7f:e7:24:7e:86:31:0b:04:
89:4e:62:e1:aa:54:c9:56:1b:1c:4c:ad:37:13:8d:31:07:87:
26:5f:99:1d:a7:d4:4d:43:d3:ef:61:d1:69:92:fc:92:76:56:
39:4f:c6:7b:5f:da:b3:c7:b6:66:6f:c5:c3:31:84:8b:b9:33:
8c:90:2f:c7:14:ae:d5:f5:98:42:84:bf:4a:9b:c2:51:41:f9:
5a:24:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:25 2025 by rpki-client