Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: 0+zxZt3JdO/CSwQXOn/mZPo8p53QDFH/8MCac486aYc=
Subject key identifier: F9:4A:90:0F:DB:16:4B:16:AD:79:5F:3F:EA:D3:4C:40:8A:6D:EC:FC
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 0199FDD9B3984D1A4DF915535C274C3C6A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0C58
Signing time: Sun 19 Oct 2025 19:02:06 +0000
Manifest this update: Sun 19 Oct 2025 19:02:06 +0000
Manifest next update: Mon 20 Oct 2025 19:02:06 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: wGOHKXKx2FFVKQBHCTFMIvCbuL1NeBvvbPI4EaA5lR4=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b3:98:4d:1a:4d:f9:15:53:5c:27:4c:3c:6a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Oct 19 19:02:06 2025 GMT
Not After : Oct 20 19:02:06 2025 GMT
Subject: CN=f94a900fdb164b16ad795f3fead34c408a6decfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:c1:29:a5:18:d3:72:4c:04:15:8e:fd:11:
c2:9b:d8:7f:4c:12:97:4f:40:a2:0f:f9:fe:56:b7:
f5:3b:a4:ac:69:96:23:a7:5d:70:e8:71:23:4d:f3:
a8:fe:86:b6:cd:e8:fc:78:f1:3f:5c:13:01:b2:0b:
ef:be:cf:93:3c:91:e1:53:f8:43:f8:52:f0:4b:3b:
97:89:e5:b3:3d:7e:7b:a8:4f:2a:ae:eb:12:73:db:
fd:bd:17:ff:ca:04:e0:3c:99:74:9e:13:71:d5:c2:
2d:ab:23:27:87:44:5e:b1:74:ba:dd:ac:9d:ee:fe:
5d:bc:b5:18:b7:48:a4:c2:b4:35:75:c1:9c:c5:0c:
6c:2d:03:9d:12:2e:ba:cf:3c:a6:6b:46:73:a1:97:
e2:60:ea:7b:af:65:56:db:c9:2e:b5:14:13:b3:89:
a7:a5:66:db:27:18:54:0a:e3:46:29:ce:76:98:3b:
50:97:97:4f:9a:80:59:39:25:1b:0e:64:77:96:01:
63:00:d6:14:f4:55:e5:c2:5f:7f:c4:e6:aa:16:01:
69:57:ad:1d:75:93:8a:2f:07:39:72:4c:10:b3:f6:
83:90:00:8a:51:b2:1c:5b:e2:97:10:c8:32:7e:a8:
3f:99:b4:62:c2:09:31:3a:c0:32:9a:bf:e8:05:9f:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:90:0F:DB:16:4B:16:AD:79:5F:3F:EA:D3:4C:40:8A:6D:EC:FC
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e7:cc:07:d7:fd:2f:ec:83:8a:94:f3:fd:92:09:aa:a7:4c:
e1:01:13:3a:b3:c5:c8:35:8b:38:81:bd:31:4d:82:57:08:75:
6f:0f:4f:23:3e:2e:10:bb:8f:d3:98:87:f9:fb:44:f1:0f:94:
5e:8e:f0:1f:7d:01:b9:7c:74:77:c5:45:04:86:41:3a:2d:b8:
c9:3b:0f:23:4c:48:41:20:7e:9b:be:2f:f9:46:62:45:71:21:
76:8c:0a:f8:0a:75:06:bd:23:19:de:94:a3:5e:e4:e0:9d:ec:
a9:f8:07:f1:a2:e1:d9:ce:a1:d1:bd:04:92:01:80:ef:37:51:
e0:67:67:2f:82:5e:05:3a:a4:42:7f:1a:bc:d7:98:81:fb:c9:
93:09:d1:09:8e:77:66:98:e2:28:50:1e:b3:c3:b1:2f:26:d1:
51:94:2f:47:62:1c:e6:29:7e:05:15:75:52:ca:b0:4d:ca:2a:
a7:b5:c2:09:06:b5:93:84:17:2e:d7:f1:aa:7b:43:cb:a1:4b:
3e:7a:06:0f:c5:b7:9b:45:e2:e3:eb:c9:25:6e:8a:8e:35:20:
93:8b:34:d6:37:28:2a:6b:a3:14:a8:de:84:43:73:7b:1a:cd:
a3:e9:32:0a:de:a3:7b:4b:3d:a8:85:b2:0f:de:54:cf:13:e7:
6a:c5:c5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:28:02 2025 by rpki-client