Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: U8cOjQ9oqaudcoI9CBel+f0Syt7NDAo7nc6ts57zXuc=
Subject key identifier: 81:F4:87:13:C1:98:22:4A:DA:46:DB:90:E8:92:BE:3A:38:5B:8C:F6
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 0198D65F4F7E0303F3A6F0BA7335BA71D2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0BBF
Signing time: Sat 23 Aug 2025 10:00:27 +0000
Manifest this update: Sat 23 Aug 2025 10:00:27 +0000
Manifest next update: Sun 24 Aug 2025 10:00:27 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: rPZH94szMyTf35aZON5hgloO8L2/EJ3YPJiTx4yPmY4=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4f:7e:03:03:f3:a6:f0:ba:73:35:ba:71:d2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Aug 23 10:00:27 2025 GMT
Not After : Aug 24 10:00:27 2025 GMT
Subject: CN=81f48713c198224ada46db90e892be3a385b8cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:e4:e5:21:62:f3:66:37:df:b7:ca:12:03:
8e:16:03:83:c9:27:2a:0b:3f:4b:f0:2d:ef:c4:a7:
da:c2:c1:a1:fa:16:2b:f5:5b:0d:bc:07:8b:3c:74:
2b:40:ac:af:61:b8:3b:57:8f:0d:58:79:f1:82:58:
78:e6:5b:44:86:45:ad:29:a6:aa:c7:9c:19:07:d1:
fc:d5:d9:bf:03:14:a0:32:4b:9e:17:d4:04:33:d7:
8e:dd:0b:2d:77:a6:5b:d8:ba:fe:55:d6:2c:04:43:
85:64:80:36:29:6f:34:7b:e0:6b:9b:25:28:8a:48:
8f:26:fb:bc:e6:b2:96:13:08:34:f5:27:0c:ca:0a:
bb:8b:fb:ec:3c:8b:a1:48:5c:ce:ec:39:c9:a5:9f:
f6:f7:ee:9d:1b:2a:3a:ef:00:b9:5a:1e:b1:f9:70:
e7:67:a4:9f:65:06:bc:16:cd:78:b7:b2:69:90:83:
d6:48:d5:bb:6a:82:fd:0c:9e:2d:60:75:20:20:94:
4d:3d:f2:48:d5:fd:9a:32:d8:3f:b6:66:b0:f9:97:
eb:b0:2c:fb:64:16:0f:c9:8c:bd:d9:33:da:19:44:
e6:cd:1c:fa:5c:7c:55:e6:a2:07:db:5e:fb:f6:e4:
11:14:ae:20:2c:f2:db:54:40:84:05:2b:4f:79:7b:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F4:87:13:C1:98:22:4A:DA:46:DB:90:E8:92:BE:3A:38:5B:8C:F6
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ee:f0:4d:96:1b:ff:91:bd:6c:67:c8:5a:10:24:04:2c:7a:
56:5a:20:3b:9a:65:13:7f:d8:13:bb:4a:07:6e:7f:91:76:3e:
7f:40:d5:71:08:c2:d5:fd:2c:f4:34:78:03:ca:b9:9e:ed:01:
45:81:a6:ec:83:4f:fe:51:7b:8b:f7:1a:bb:9e:6b:4e:27:8d:
91:97:ae:16:0f:cc:81:7f:6e:de:3c:cd:11:cc:2d:b4:03:b0:
fe:e5:a1:05:18:67:50:2a:b3:75:0b:9a:ee:bc:ae:e7:eb:5b:
83:21:49:5c:8b:86:fc:7c:62:ff:d0:9f:f7:f8:bf:d6:60:45:
8c:12:16:45:cd:23:af:9b:c5:d3:f2:ee:df:e3:14:2e:86:86:
79:9c:90:55:85:6e:c6:08:02:4a:b5:eb:d9:30:52:42:84:dd:
68:d3:7d:9b:74:6c:d2:e9:f5:a6:bb:97:01:53:b1:0b:f3:b2:
46:d3:07:a7:0e:2f:ff:f9:42:c3:9d:30:bd:80:f5:97:e0:c7:
52:e5:ea:47:f4:07:37:61:d9:fe:a8:0d:d8:2e:53:1c:8d:db:
21:07:9c:c9:df:a8:6b:12:80:1c:f9:f3:ee:f9:a6:d2:b9:31:
9f:01:94:c7:e5:70:a5:db:d9:ce:b9:03:ff:61:4b:cb:4e:16:
d5:f5:ec:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:24 2025 by rpki-client